Resolved: Issue with security update for the Remote Code Execution vulnerability in SQL Server 2016 SP2 (CU): August 14, 2018

We have replaced KB4293807 with KB4458621 resolving the issue described below. Updated SQL Server 2016 SP2 CU packages are now available on the Microsoft Download Center and Microsoft Update as outlined in KB4458621.

If you have previously installed KB4293807 it is recommended that you install KB4458621 as soon as possible.

You may optionally first uninstall KB4293807 , but it is not necessary as KB4458621 supersedes and replaces KB4293807.

Comments

• Anonymous
  August 28, 2018
  Does "Updated SQL Server 2016 SP2 CU packages are now available on the Microsoft Download Center" this mean the latest Cumulative Update(SQL 2016 SP2 CU2) included security fix for CVE-2018-8273?Thank you!
  • Anonymous
    August 28, 2018
    The comment has been removed