Security Update for SQL Server 2025 RTM CU10
The Security Update for SQL Server 2025 RTM CU10 is now available for download at the Microsoft Download Center and Microsoft Update Catalog sites. This package cumulatively includes all previous security fixes for SQL Server 2025 RTM CUs, plus it includes the new security fixes detailed in the KB Article. Security Bulletins: CVE-2026-66813 - Security Update Guide - Microsoft - Microsoft SQL Server Denial of Service Vulnerability Security Update of SQL Server 2025 RTM CU10 KB Article: KB5129299 Microsoft Download Center: https://www.microsoft.com/download/details.aspx?familyid=5e2be05e-84ab-4e42-9e55-07ae669e71d2 Microsoft Update Catalog: https://www.catalog.update.microsoft.com/Search.aspx?q=5129299 Latest Updates for Microsoft SQL Server: https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updatesSecurity Update for SQL Server 2025 RTM
The Security Update for SQL Server 2025 RTM GDR is now available for download at the Microsoft Download Center and Microsoft Update Catalog sites. This package cumulatively includes all previous security fixes for SQL Server 2025 RTM, plus it includes the new security fixes detailed in the KB Article. Security Bulletins: CVE-2026-66813 - Security Update Guide - Microsoft - Microsoft SQL Server Denial of Service Vulnerability Security Update of SQL Server 2025 RTM GDR KB Article: KB5132748 Microsoft Download Center: https://www.microsoft.com/download/details.aspx?familyid=d176f513-455e-468b-953f-21639b5a1a43 Microsoft Update Catalog: https://www.catalog.update.microsoft.com/Search.aspx?q=5132748 Latest Updates for Microsoft SQL Server: https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updatesAnnouncing flexible provisioning for SQL Server on Linux Azure VMs (Public Preview)
What’s changing We’re introducing a new script-based deployment experience for provisioning SQL Server on Linux Azure Virtual Machines (VMs). This experience replaces the earlier model that relied on pre-created SQL Server on Linux Marketplace images, which have been deprecated. Pre-created SQL Server on Linux Marketplace images are no longer available for new provisioning through the Azure portal, the Azure SQL hub, Azure CLI, or PowerShell. Instead, SQL Server is now installed and configured during VM provisioning using a flexible, automated, script-based workflow. The result is a more adaptable and supportable deployment model that keeps SQL Server on Linux Azure VMs fully supported, reduces image-maintenance overhead, and makes it easier to adopt the latest Linux distributions, VM families, and configuration options - all while giving you more control over your SQL Server setup. Why the new model matters Greater flexibility and control — choose your Linux distribution, SQL Server version, edition, and even bring your own mssql.conf to tailor the configuration. Faster access to innovation — new Linux versions and Azure capabilities are picked up automatically, without waiting for a new baked image to be published. Automatic registration built in — every VM is registered with the SQL IaaS Agent extension by default, unlocking licensing flexibility, compliance, and richer visibility. A dynamic, guided UI — the portal enables or disables options based on supported operating system, SQL Server, and licensing combinations, so you only see valid choices. Supported Linux distributions The script-based deployment experience supports the following distributions, and future versions are picked up automatically as they become supported — no manual intervention required: Distribution Supported versions Red Hat Enterprise Linux (RHEL) RHEL 9, RHEL 10 (and future versions) Ubuntu Ubuntu 22.04, Ubuntu 24.04, Ubuntu 26.04 (and future versions) Automatic registration applies to both Red Hat Enterprise Linux and Ubuntu, across all their supported versions. Automatic registration with the SQL IaaS Agent extension SQL Server on Linux VMs deployed through this experience are automatically registered with the SQL Server IaaS Agent extension. Registration creates a SQL virtual machine resource in Azure (separate from the VM resource) and unlocks: Licensing flexibility — choose Pay-As-You-Go (PAYG) or Azure Hybrid Benefit (AHB), and switch between them anytime with no downtime. Compliance — a simplified way to meet Azure Hybrid Benefit product-term requirements without per-resource registration forms. Visibility and telemetry — clear license-type visibility, subscription-level tracking, and better operational insight from the Azure portal, CLI, or PowerShell. Note: Automatic registration is enabled by default during deployment. You can unregister or re-register a VM after deployment through the Azure portal, Azure CLI, or PowerShell. The end-to-end flow at a glance Two ways to deploy You can provision SQL Server on Linux through either of these Azure portal experiences. Both lead to the same guided SQL Server configuration: Create a virtual machine tab - start from the standard Azure VM creation flow and add SQL Server. Azure SQL hub (aka.ms/azuresqlhub) - start from a SQL-first experience with SQL Server on Azure VMs. Experience 1: The “Create a virtual machine” tab Use this flow if you prefer to start from the standard VM creation experience in the Azure portal. In the Azure portal, go to Virtual machines (or Create a resource → Virtual machine) and select Create. On the Basics tab, select your project details (subscription, resource group), instance details, and a supported Linux base image — RHEL 9, RHEL 10, Ubuntu 22.04, or Ubuntu 24.04. Choose your VM size, authentication, and inbound ports as usual. Go to the Advanced tab and select the Install SQL Server checkbox. This enables SQL Server provisioning on the VM. A new SQL Server settings tab becomes available. Open it to configure your SQL Server deployment: SQL Server version — e.g., SQL Server 2025 or SQL Server 2022. Edition — Enterprise, Standard, Developer, Express, and Evaluation editions (options adjust to the selected version). Licensing model — Pay-As-You-Go (PAYG, default) or Azure Hybrid Benefit (AHB). Advanced configuration — Upload a custom mssql.conf file to set SQL connectivity, Azure Key Vault integration, and the tuned performance profile. Select Review + create, review the configuration summary, and select Create. Azure provisions the VM, then automatically installs and configures SQL Server and registers the VM with the SQL IaaS Agent extension. Experience 2: Azure SQL hub Use this flow if you prefer a SQL-first experience, where SQL Server on Linux is available as a first-class deployment option. Go to the Azure SQL hub at aka.ms/azuresqlhub. Under SQL Server, select SQL Server on Azure VMs, and then select + Create. Select the operating system for your deployment. You’re seamlessly transitioned to the Create a virtual machine experience. Your operating system selection is automatically carried forward, and Install SQL Server is enabled on the Advanced tab. Configure the remaining VM and SQL Server settings, including size, networking, disks, licensing, connectivity, Key Vault integration, tuned profile, or a custom mssql.conf. Select Review + create, review the configuration summary, and then select Create. Azure provisions the VM, installs and configures SQL Server through the same script-based deployment flow, and automatically registers the VM with the SQL IaaS Agent extension. Managing licensing after deployment Because your VM is registered with the SQL IaaS Agent extension, you can change the licensing model anytime — with no downtime and no restart of the VM or SQL Server service. Azure portal: Go to the SQL virtual machine resource → Settings → SQL Server configuration → Manage. Azure CLI az sql vm update -n <VM_NAME> -g <RESOURCE_GROUP> --license-type AHUB Azure PowerShell: Set-AzSqlVM -Name <VM_NAME> -ResourceGroupName <RESOURCE_GROUP> -LicenseType AHUB Note: Switching between PAYG and AHB is immediate, incurs no additional cost, and does not restart the VM or the SQL Server service. Wrapping up The move to script-based deployment modernizes how you provision SQL Server on Linux Azure VMs. By replacing deprecated pre-created Marketplace images with a flexible, automated, script-based flow — and by registering every VM with the SQL IaaS Agent extension automatically — you get more choice, faster access to new Linux and SQL Server versions, and a cleaner path to licensing flexibility, compliance, and visibility. Whether you start from the Create a virtual machine tab or the Azure SQL hub, you get the same guided experience across RHEL 9, RHEL 10, Ubuntu 22.04, Ubuntu 24.04, and future versions. Ready to try it? Head to a Create a virtual machine option in the Azure portal. We’d love your feedback — let us know how the new experience works for your workloads in the comments.Cumulative Update #10 for SQL Server 2025 RTM
The 10th cumulative update release for SQL Server 2025 RTM is now available for download at the Microsoft Downloads site. Please note that registration is no longer required to download Cumulative updates. To learn more about the release or servicing model, please visit: CU10 KB Article: https://support.microsoft.com/en-us/servicing/sql/sql-server-2025/cumulative-update/kb5125471-cu10 Starting with SQL Server 2017, we adopted a new modern servicing model. Please refer to our blog for more details on Modern Servicing Model for SQL Server Microsoft® SQL Server® 2025 RTM Latest Cumulative Update: https://www.microsoft.com/en-us/download/details.aspx?id=108788 Update Center for Microsoft SQL Server: https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updatesMicrosoft at PASS Data Community Summit 2026:
Microsoft is excited to be back as Sapphire Sponsor and bring that spirit to life through a mix of technical deep dives, community-led conversations, and opportunities to engage directly with Microsoft product leaders and experts. This year, we’ll go deep across the Azure Data portfolio to cover the subjects we’ve been asked about the most, from SQL, PostgreSQL, to Fabric. Whether you’re talking SQL over breakfast, asking your toughest questions during our Azure Data AMA, diving deep with the engineers building the products you use every day, or catching a live Data Exposed session, there are plenty of ways to participate beyond the breakout room. PASS Data Community Summit is more than a place to hear what’s new. It’s a place to be part of what’s next. Microsoft together with our co-sponsor AMD will be there with sessions and experiences that will hopefully leave you inspired by what you can build next. Here’s a look at the Microsoft sessions happening across the week: But PASS Data Community Summit has always been more than just sessions. So, we’re bringing back some of the most popular experiences to the community: We hope to see you there! Register now and use code AZURE150 for a discount off your registration!Security Update for SQL Server 2025 RTM CU9
The Security Update for SQL Server 2025 RTM CU9 is now available for download at the Microsoft Download Center and Microsoft Update Catalog sites. This package cumulatively includes all previous security fixes for SQL Server 2025 RTM CUs, plus it includes the new security fixes detailed in the KB Article. Security Bulletins: CVE-2026-32176 - Security Update Guide - Microsoft - Microsoft SQL Server Denial of Service Vulnerability Security Update of SQL Server 2025 RTM CU9 KB Article: KB5126967 Microsoft Download Center: https://www.microsoft.com/download/details.aspx?familyid=6d582614-a5b0-4cfa-b1f5-ef5c74f5d252 Microsoft Update Catalog: https://www.catalog.update.microsoft.com/Search.aspx?q=5126967 Latest Updates for Microsoft SQL Server: https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updatesSecurity Update for SQL Server 2025 RTM
The Security Update for SQL Server 2025 RTM GDR is now available for download at the Microsoft Download Center and Microsoft Update Catalog sites. This package cumulatively includes all previous security fixes for SQL Server 2025 RTM, plus it includes the new security fixes detailed in the KB Article. Security Bulletins: CVE-2026-32176 - Security Update Guide - Microsoft - Microsoft SQL Server Denial of Service Vulnerability Security Update of SQL Server 2025 RTM GDR KB Article: KB5128492 Microsoft Download Center: https://www.microsoft.com/download/details.aspx?familyid=05d38ba3-f609-4011-b045-d56a9eb0bccb Microsoft Update Catalog: https://www.catalog.update.microsoft.com/Search.aspx?q=5128492 Latest Updates for Microsoft SQL Server: https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updatesIntroducing sqlsimtools
Years ago, in a galaxy far, far away, my colleagues in support, Keith Elmore and Robert Dorr, built a tool called ostress.exe. For decades it transformed the way we reproduced customer issues for SQL Server. The engineering team used it, and up until now I've used it for demonstrations, books, and examples. Its magic was simple: ostress could simulate many concurrent users running SQL queries or scripts. I decided to rethink ostress for today's SQL world, and the result is sqlsimtools, now in public preview at https://aka.ms/sqlsimtools. It's a free, open-source suite of workload simulation tools for SQL Server 2019, 2022, and 2025, Azure SQL Database, Azure SQL Managed Instance, and SQL database in Microsoft Fabric. I've been building it for some time and using it at events and in demonstrations. Now I want everyone to have it. The public preview includes: sqlsim: a native, ODBC-based command-line tool for Windows (x64 and ARM64) and Ubuntu Linux. sqlpysim: a Python version of sqlsim built on Microsoft's mssql-python driver, for Windows and Ubuntu Linux. sqlsim Studio: a self-contained local browser app that configures, runs, monitors, replays, and compares workloads using sqlsim or sqlpysim. It's available today on Windows x64. I'm also looking for Private Preview testers for macOS, and for sqlsim Studio on Linux and Windows ARM64. If you'd like to help, request Private Preview access. I'll be writing more posts on different parts of the tools, but here are my top 10 cool things you can do with sqlsimtools: Run any SQL query, script, or mixed workload Create your own benchmarks, load tests, and stress tests Configure, run, monitor, and compare workloads visually with sqlsim Studio Replay captured SQL Server activity Monitor workload performance live or after execution Run before-and-after experiments with detailed performance comparisons Test SQL Server, Azure SQL, and SQL database in Microsoft Fabric with flexible authentication Use native or Python tools on Windows, Linux, and macOS (Private Preview) Automate testing with JSON results and live event streams Build and run workloads with AI agents such as GitHub Copilot, Claude Code, Codex CLI, and Cursor Get started today at https://aka.ms/sqlsimtools . The easiest way to start is the all-in-one sqlsimtools package, which includes sqlsim Studio and both command-line tools. You can also download just the tool for your platform, or clone the repo and build it yourself. On Windows, unblock the ZIP before you extract it, because the tools aren't code signed. sqlsimtools is an open-source project, not an official Microsoft product, and isn't covered by Microsoft support. For questions and ideas, join the conversation in GitHub Discussions (microsoft/sqlsimtools · Discussions · GitHub), and report bugs in GitHub Issues (Issues · microsoft/sqlsimtools). During Public Preview I'm not taking Pull Requests yet but file issues and as the project progresses, we will incorporate the PR process. Bob Ward Microsoft
BULKADMIN role support for SQL Server on Linux is now Generally Available
Starting with SQL Server 2025 CU9 and SQL Server 2022 CU27, SQL Server on Linux supports the bulkadmin fixed server role and the ADMINISTER BULK OPERATIONS permission for performing bulk data import operations without requiring users to be members of the sysadmin fixed server role. This capability enables you to use operations such as BULK INSERT and OPENROWSET(BULK...) while following a least-privilege security model. Previously on SQL Server on Linux, these operations required sysadmin membership. With this GA (Generally Available) release, organizations running SQL Server on Linux can provide users with the permissions required for bulk data loading without granting broader sysadmin privileges, improving alignment with the principle of least privilege. The feature applies to SQL Server on Linux, including on-premises, SQL Server on Azure VMs and container deployments. Learn more: BULK INSERT (Transact-SQL) - SQL Server | Microsoft Learn Announcing Preview of bulkadmin role support for SQL Server on Linux | Microsoft Community Hubmssql-django 2.0: Now with mssql-python
mssql-django 2.0 is on PyPI. This release adds Microsoft's new mssql-python driver as a second way to connect, moves the supported Python, Django, and SQL Server versions forward, and fixes several connection and query bugs that production teams hit. pip install --upgrade mssql-django Pick your driver, one database at a time Until now, mssql-django spoke to SQL Server through pyodbc and an ODBC driver you installed yourself. That still works, and it's still the default. Version 2.0 adds a second path: mssql-python, Microsoft's Python driver for SQL Server. You choose per database alias. Add one option to the alias you want to move: DATABASES = { "default": { "ENGINE": "mssql", "NAME": "appdb", "HOST": "contoso.database.windows.net", "PORT": "1433", "OPTIONS": { "python_driver": "mssql_python", "extra_params": "Encrypt=yes", }, }, "reporting": { # No python_driver, so this alias stays on pyodbc. "ENGINE": "mssql", "NAME": "reportdb", "HOST": "contoso.database.windows.net", "PORT": "1433", "OPTIONS": { "driver": "ODBC Driver 18 for SQL Server", }, }, } ENGINE doesn't change. Remove the option and the alias is back on pyodbc. That's the whole rollback plan, which is the point: you can try the new driver on one database, run your test suite, and leave everything else alone. The mssql-python path covers the day-to-day work: connections, pooling, retries, transactions and savepoints, datetimeoffset values, introspection, and Microsoft Entra ID authentication. One practical difference worth calling out. On the mssql-python path, pip also installs the mssql-python-odbc companion package, which supplies Microsoft ODBC Driver 18 for SQL Server. There's no separate driver install, which takes a step out of container images and App Service deployments. Know what changes before you switch The two drivers aren't identical, and the differences are the reason we made this per alias instead of a global switch. The mssql-python path ignores driver, dsn, host_is_server, and unicode_results. There's no ODBC Driver 17 fallback. It validates extra_params against an allowlist and rejects pyodbc-only keywords such as ColumnEncryption, APP, and Connect Timeout, so use the connection_timeout option instead of the last one. It also doesn't enable MARS, which means QuerySet.iterator() reads the full result into memory before yielding rows so a nested query can reuse the connection. On a large queryset, that memory is real. Budget for it. Stay on pyodbc if you depend on a named DSN, FreeTDS, MARS, Always Encrypted through ColumnEncryption, or an ODBC driver version you manage yourself. We cleaned up the version matrix This is something we've wanted to get to for a while. mssql-django 2.0 supports Python 3.10 through 3.14, Django 5.2 through 6.1, and SQL Server 2017 through 2025, plus Azure SQL Database, Azure SQL Managed Instance, and SQL database in Microsoft Fabric. Django 6.0 and 6.1 need Python 3.12 or later. Python 3.8 and 3.9 and Django 3.2 through 5.1 are no longer supported. The compatibility code is still in the tree, so nothing breaks the moment you upgrade, but those combinations aren't tested or listed. Fixes MARS settings are honored. If you set MARS_Connection=no in extra_params, the backend used to overwrite it with the Windows default and the connection failed. That's the bug frederiksoftware reported when connecting an on-premises Django app to a Microsoft Fabric Warehouse. The explicit value now wins, case-insensitively, so those connections work. To be clear about scope: this fixes the connection, it doesn't add full Warehouse support for migrations or other SQL Server features. Bracket wildcards are escaped in F() expression lookups. A pattern lookup comparing two fields, such as filter(name__contains=F("code")), didn't escape the SQL Server [ wildcard, so bracket characters in your data were treated as wildcard syntax and matched the wrong rows. Thanks to @Khan3K for the fix. Quotes are escaped in inspectdb schema names. inspectdb --schema produced malformed T-SQL for a schema name containing a single quote. An empty HOST connects to localhost on the mssql-python path. Omitting HOST in Django settings leaves it as an empty string, which mssql-python rejected. It now resolves to localhost, matching the pyodbc behavior for local instances. pytz is gone Time zone handling moved to the standard library zoneinfo module, with the tzdata package supplying the IANA database where the operating system doesn't ship one: Windows, and minimal container images. This fixes offsets for zones with negative daylight saving offsets, and it drops a dependency. Before you upgrade mssql-python is a required dependency in 2.0 even when every alias uses pyodbc. That means mssql-django 2.0 installs only on platforms that have a compatible mssql-python distribution: Windows x64, Windows ARM64 with Python 3.11 and later, macOS 15 and later on Intel or Apple silicon, and Linux x64 or ARM64 with glibc 2.28 or later or musl 1.2 or later. SUSE Linux on ARM64 isn't supported. If you're outside that list, stay on 1.8.0. Upgrade now pip install --upgrade mssql-django Release notes Documentation Report an issue Thanks to @Khan3K and @frederiksoftware for the contributions in this release.
