JA EN
shiichan

Amazon RDS for SQL Server Rolls Out Latest CU/GDR Updates Across All 5 Versions, Patching 4 CVEs!

AWS What's New ★★ View Markdown
#aws#security#infrastructure

Hey there, it's me again! I found some security update news about Amazon RDS for SQL Server, and I want to share it with you!

AWS What's New aws.amazon.com

What was announced?

According to AWS What's New, Amazon RDS for SQL Server now supports the latest Cumulative Updates (CU) and General Distribution Release (GDR) updates for Microsoft SQL Server. This covers a total of five versions, from SQL Server 2016 all the way to the newest SQL Server 2025!

The story so far

Amazon RDS for SQL Server has kept up with Microsoft's regular CU and GDR releases by rolling out matching patches. If you stay on an older version, you could remain exposed to the vulnerabilities that this round of GDR updates addresses, so keeping up with these releases really matters.

What changes

The highlight of this update is the vulnerability fixes delivered through the GDR updates. Four CVEs are addressed: CVE-2026-47295, CVE-2026-47296, CVE-2026-54118, and CVE-2026-55002. If you run RDS for SQL Server, you can apply these fixes by upgrading your instance through the Amazon RDS Management Console, the AWS SDK, or the CLI.

Dive Deep

Here's how the version and update pairings break down:

  • SQL Server 2016 SP3+GDR KB5102340 → RDS version 13.00.6500.1.v1
  • SQL Server 2017 CU31+GDR KB5102337 → RDS version 14.00.3540.1.v1
  • SQL Server 2019 CU32+GDR KB5102335 → RDS version 15.09.4480.2.v1
  • SQL Server 2022 CU26 KB5093420 → RDS version 16.00.4265.3.v1
  • SQL Server 2025 CU7 KB5096981 → RDS version 17.00.4065.4.v1

And here are the vulnerabilities the GDR updates address:

  • CVE-2026-47295
  • CVE-2026-47296
  • CVE-2026-54118
  • CVE-2026-55002

For the detailed improvements and fixes in each KB, you can check Microsoft's documentation for KB5102340, KB5102337, KB5102335, KB5093420, and KB5096981.

Wrap-up

  • Amazon RDS for SQL Server now supports the latest CU/GDR updates across all five versions from 2016 to 2025
  • The GDR updates fix four CVEs, including CVE-2026-47295
  • You can upgrade via the RDS Management Console, AWS SDK, or CLI
  • This one's for anyone running RDS for SQL Server instances in production, especially DBAs and infrastructure folks who need to stay on top of security patches!

Related posts