question

BerndLeutenecker-4033 avatar image
0 Votes"
BerndLeutenecker-4033 asked RitaHu-MSFT commented

WSUS doesn't contain SQL-Server-Update

While manually checking for updates against Windows update and not our WSUS we noticed the update kb4019091 (Security Update for SQL Server 2014 SP 1 GDR) was missing.
Two persons then checked the download-settings in our WSUS - everything in the section SQL server was checked, except 2008 R2 and older. So we cannot understand why this update is not offered on our WSUS. Are there are other download-sections necessary in WSUS to receive all updates for our SQL servers?

Thank you!

Regards

Bernd Leutenecker

sql-server-generalwindows-server-update-services
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@BerndLeutenecker-4033
It seems that there are no updates for several days. May I know the status of the case? Is there any help I could provide?

Please keep us in touch if there are any updates of the case.

Thanks for your time and have a great day.

Regards,
Rita

0 Votes 0 ·
BerndLeutenecker-4033 avatar image
0 Votes"
BerndLeutenecker-4033 answered RitaHu-MSFT commented

OK, is there a source where one could check which updates should be available in WSUS and which older ones (e. g. pre-SQL-Server 2012) have to be searched manually outside WSUS?

And - is there a way to get e. g. lists of all / important updates for SQL-Server editions? Or do we really have to e. g. use the the MS update catalogue to just download any update available there?
Although I guess it will be much easier to change the security setting that (our SQL-) servers shouldn't contact MS-update directly any more but use WSUS only.

Regards

Bernd


· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@BerndLeutenecker-4033
OK, is there a source where one could check which updates should be available in WSUS and which older ones (e. g. pre-SQL-Server 2012) have to be searched manually outside WSUS?
As we all kmow, the WSUS server is a tool we could used to download the required updates and deploy for the clients. So it is recommended to surf the update history first and confirm the source of the update first.


And - is there a way to get e. g. lists of all / important updates for SQL-Server editions? Or do we really have to e. g. use the the MS update catalogue to just download any update available there?
I find a related link for your reference. It may be helpful. Please review this link to confirm the latest updates for Microsoft SQL server.

Thanks for your time and have a nice weekend.

Regards,
Rita


0 Votes 0 ·
TomPhillips-1744 avatar image
0 Votes"
TomPhillips-1744 answered AJTek-Adam-J-Marshall commented

The SQL Server team stopped distributing SQL updates via WSUS a long time ago. You need to manually download and install SQL updates.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

That's not true. SOME updates may not be available like old SP updates, but anything NEW is for SQL - including Service Packs. I update SQL 2012+ with WSUS.

0 Votes 0 ·
BerndLeutenecker-4033 avatar image
0 Votes"
BerndLeutenecker-4033 answered RitaHu-MSFT edited

Hello Rita,

thank you for your help.

I have checked the download-settings again:

119848-product-selection.png

119849-classification-selection.png

But still no update with the kb-no. 40190...:
119911-update-not-available.png

Does this mean that we maybe declined and then deleted these Updates long ago (before updating our servers too using our WSUS)?

Or is this a result of my regular cleanup-process which just recently turned out to be no longer correct: Using a manual I have found years ago for preparations for the WSUS-cleanup-tool I always selected all superseded updates (*) and declined them, then I ran the cleanup-wizard every other month. Not until recently I was notified that some of our Win10-clients need one or more older updates that are not provided by our WSUS and this update(s) are no longer in our WSUS.

(*):
119826-superseded-updates.png

As far as I remember there has been a security-issue last year or 2019 and as a result we were told to deny our servers the abiltiy to access MS-update directly and only use our WSUS. Meaning we usually cannot check for missing updates using MS-update without canceling that security-setting.





Regards

Bernd


· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Does this mean that we maybe declined and then deleted these Updates long ago (before updating our servers too using our WSUS)?
It seems you have already cleaned up the updates. We could try to import the update on the WSUS console again. Here is a related screenshot for you:
120031-4.png

It is recommended to approve the latest updates for the clients and make sure all the clients downloaded and installed completely. Then we could try to decline the superseded updates and clean up.


0 Votes 0 ·
4.png (6.7 KiB)
RitaHu-MSFT avatar image
0 Votes"
RitaHu-MSFT answered

@BerndLeutenecker-4033
I checked the following products and classifications below and synced successfuly. And then I found the update on the WSUS console. Here are several screenshot for your reference first:
119786-12.png

119814-11.png

It seems that you haven't ticked the right products and classifications. Add the above products and classifications and then sync successfuly. You will find the missed update.

Hope the above will be helpful.

Regards,
Rita


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


12.png (35.9 KiB)
11.png (47.2 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

BerndLeutenecker-4033 avatar image
0 Votes"
BerndLeutenecker-4033 answered BerndLeutenecker-4033 edited

We too can manually download the update. But as we are using WSUS including Updates for SQL-Servers nobody checked manually.
So we are wondering why WSUS seems to support updates for SQL-Servers but doesn't offer this security update.
If it really will be necessary to always manually check for updates I am going to inform the SQL-server-admins that because of this WSUS-problem I will exclude SQL-server-udpates from WSUS as there is no advantage or even more as this case showed a rather big risk, as nobody noticed a missing security update because it had to be downloaded separate from WSUS on the servers.

Are there any known reasons for this strange setting, why MS has apparantly blocked this update for WSUS?

Regards

Bernd

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

RitaHu-MSFT avatar image
0 Votes"
RitaHu-MSFT answered RitaHu-MSFT edited

@BerndLeutenecker-4033
Thanks for your posting on Q&A.

According to this link, we could not get the update from WSUS server. But we could get the update from Microsoft Update、Microsoft Download Center and Microsoft Update Catalog.

Please try to download and install the update from the Microsoft Download Center or Microsoft Update Catalog. Please keep us in touch if there are any udpates of the case.

Thanks for your understanding and cooperation.

Regards,
Rita


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.