JA EN
shiichan

Amazon RDS for SQL Server Gets the Latest GDR Security Patches!

AWS What's New ★★ View Markdown
#aws#security#infrastructure

Hey there, it's me, Shiichan! Today's story is a quiet but important one about database security. This isn't something you want to leave sitting around!

AWS What's New aws.amazon.com

What was announced?

Amazon RDS for SQL Server now supports the latest GDR updates for Microsoft SQL Server. This came through the AWS What's New feed.

GDR stands for General Distribution Release, which is a security patch that fixes specific vulnerabilities. This update targets two of them, CVE-2026-32167 and CVE-2026-32176.

The story so far

Microsoft regularly ships security fixes for SQL Server, and with the managed RDS service, AWS folds those fixes in and offers them as versions you can choose. So when a new GDR comes out, you wait for RDS to make it available too. This announcement is AWS letting us know that's now ready.

What changes

If you run RDS for SQL Server, you can now move up to the latest patched version that closes these vulnerabilities. The nice part is you don't have to hand-patch or carefully script downtime yourself; you can upgrade by riding the managed service flow.

Dive Deep

Here are the four versions covered:

  • SQL Server 2016 SP3+GDR (KB5084821 / RDS version 13.00.6485.1.v1)
  • SQL Server 2017 CU31+GDR (KB5084818 / RDS version 14.00.3525.1.v1)
  • SQL Server 2019 CU32+GDR (KB5084816 / RDS version 15.00.4465.1.v1)
  • SQL Server 2022 CU24+GDR (KB5083252 / RDS version 16.00.4250.1.v1)

You can run the upgrade from the Amazon RDS Management Console, or through the AWS SDK or CLI. The steps are laid out in the Amazon RDS SQL Server User Guide for upgrading, so it's worth a look before you apply it to production.

Wrap-up

  • Amazon RDS for SQL Server now supports the latest GDR security patches
  • Covers the 2016, 2017, 2019, and 2022 versions
  • Closes two CVEs: CVE-2026-32167 and CVE-2026-32176
  • Upgrade from the console, SDK, or CLI

If you're an infra person running RDS for SQL Server, this is an update to check first!

Related posts