Security Update for SQL Server 2016 SP2 CU15

[SQLTom]

The Security Update for SQL Server 2016 SP2 CU15 is now available for download at the Microsoft Download Center and Microsoft Update Catalog sites. This package cumulatively includes all previous SQL Server 2016 SP2 fixes through CU15, plus it includes a new security fix for SQL Server Engine.

• Security Bulletin: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1636
• Security Update of SQL Server 2016 SP2 CU15 KB Article: https://support.microsoft.com/help/4583461
• Microsoft Download Center: http://www.microsoft.com/download/details.aspx?FamilyID=a66ac224-77c7-4e46-805e-4530de5cc92e
• Microsoft Update Catalog: http://www.catalog.update.microsoft.com/Search.aspx?q=KB4583461
• Latest Updates for Microsoft SQL Server: https://docs.microsoft.com/en-us/sql/database-engine/install-windows/latest-updates-for-microsoft-sq...

[smilne]

Will there be a security update available for SQL Server 2016 SP2 CU14 for those who haven't updated to CU15 due to the following issue?

"There is a known issue with the SQL Writer component in SQL Server 2016 SP2 CU15. The SQL Writer service is shared across all instances of SQL Server that run on the same server, regardless of version. If you have installed this cumulative update on a server that also runs older versions of SQL Server, such as SQL Server 2014 or SQL Server 2012, VSS backups will fail against these older instances. If you are running SQL Server 2016 side-by-side with older versions of SQL Server, we recommend that you do not install this Cumulative Update. This issue will be fixed in the next Cumulative Update release."

https://support.microsoft.com/en-gb/help/4577775/kb4577775-cumulative-update-15-for-sql-server-2016-...

[George_Yin]

having the same concern as Segmilne. MS, please update.