Security Update for SQL Server 2016 SP3 GDR

Pascal_Deliot I've never seen the CU policy defined, just SP. I assumed that if a SP was released, then it necessarily would also receive CUs, since no SP is perfect (I don't mean security issues).

In the case of 2016, SP3 even came out a few months after mainstream support ended, so by strict definitions we shouldn't even have SP3, right?

Hi Brian,

SQL Server 2016 is now more than 5 years old and then in Extended Support phase ( https://docs.microsoft.com/en-us/lifecycle/products/sql-server-2016 ).

This means Microsoft will no more provide CU and will only ship security fix (GDR) like this one.

Out of curiosity, this prompts me to ask: how is it possible that in so much time that a CU for SP3 has not been released? While I understand that there will be no further SPs for 2016, that shouldn't mean that there will be no CUs for SP3, but I'm not sure how else to explain 9 months passing with none. That's not really normal in the SQL world that I remember.