Released: Microsoft.Data.SqlClient 4.0.6, 5.1.6, 5.2.2

We have released updates to multiple supported versions of Microsoft.Data.SqlClient. The updates address several issues.

Microsoft.Data.SqlClient 4.0 and 5.1 are LTS releases. 5.2 is a non-LTS release. All will continue to get fixes and updates until their respective End of Support dates.

To see which versions are LTS versus non-LTS, what that means, and their support timelines, see the Support Lifecycle for Microsoft.Data.SqlClient.

Updates in Microsoft.Data.SqlClient 4.0.6 include:

Fixed

• Fixed connection to unsubscribe from transaction completion events before returning it to the connection pool #2301 #2435
• Fixed AcquireTokenAsync timeout handling for edge cases in ActiveDirectoryAuthenticationProvider #2707

Changed

• Code health improvements: #2147, #2513, #2519

For more details about the changes in Microsoft.Data.SqlClient 4.0.6, you can also see the Release Notes.

Updates in Microsoft.Data.SqlClient 5.1.6 include:

Fixed

• Fixed Transient fault handling issue with OpenAsync. #1983 #2508
• Fixed AcquireTokenAsync timeout handling for edge cases in ActiveDirectoryAuthenticationProvider. #2706
• Fixed pending data with SqlDataReader against an encrypted column. #2618 #2818

Changed

• Upgraded Azure.Identity version from 1.11.3 to 1.11.4 [#2649] (#2649) [#2529] (#2529) to address CVE-2024-35255.
• Upgraded Microsoft.Identity.Client version from 4.60.0 to 4.61.3 [#2649] (#2649) [#2529] (#2529) to address CVE-2024-35255.
• Added caching to TokenCredential objects to take advantage of token caching. #2776
• Code health improvements: [#2490] (#2490)

For more details about the changes in Microsoft.Data.SqlClient 5.1.6, you can also see the Release Notes.

Updates in Microsoft.Data.SqlClient 5.2.2 include:

Fixed

• Fixed AcquireTokenAsync timeout handling for edge cases in ActiveDirectoryAuthenticationProvider. #2650
• Fixed issue with Socket.Connect in managed SNI. #2779
• Fixed path for AssemblyAttributes in obj folder causing NET 8.0 assembly to appear in NET 6.0 dll. #2789
• Fixed SSPI retry negotiation with default port in .NET. #2815
• Fixed ArgumentNullException on SqlDataRecord.GetValue when using user-defined data type on .NET. #2816
• Fixed pending data with SqlDataReader against an encrypted column. #2817

Changed

• Upgraded Azure.Identity version from 1.11.3 to 1.11.4 #2648 to address CVE-2024-35255.
• Upgraded Microsoft.Identity.Client version from 4.60.0 to 4.61.3 #2648 to address CVE-2024-35255.
• Added caching to TokenCredential objects to take advantage of token caching. #2775

For more details about the changes in Microsoft.Data.SqlClient 5.2.2, you can also see the Release Notes.

To get the new packages, add a NuGet reference to Microsoft.Data.SqlClient in your application.

If you encounter any issues or have any feedback, head over to the SqlClient GitHub repository and submit an issue.

David Engel