Posts

SQL SERVER CU5: Fixes CPU starvation issues

Image
Before we dive into today's topic, if you missed my previous post you can take a look at SQL SERVER CU5: Bug Reference 5131003, Fixes an XML External Entity (XXE) vulnerability in the Web Service Task . 👉 If you found this deep-dive helpful, feel free to check out the ads—your support helps me keep creating high-quality SQL Server content for the community. 💣 SQL SERVER CU5: Big Reference 5157138 Fixes CPU Starvation Issues During In-Memory OLTP Garbage Collection SQL Server CU5 quietly fixes a dangerous CPU starvation scenario inside In-Memory OLTP hash index garbage collection scans. ⚡ If your server suddenly spikes CPU with Hekaton workloads, this is one CU you absolutely do NOT want to ignore. 🧠 TL;DR ✔️ SQL Server CU5 fixes CPU starvation during In-Memory OLTP hash index garbage collection ✔️ The engine now adds scheduler yields at regular intervals during long-running scans 🛠️ ✔️ This prevents workers from monopolizing CPU ...

SQL SERVER CU5: Bug Reference 5131003, Fixes an XML External Entity (XXE) vulnerability in the Web Service Task

Image
Before we dive into today's topic, if you missed my previous post you can take a look at SQL SERVER 2025 “Things SQL Server DBAs Say Before Disaster” Sunday SQL Humor - part 2 . 👉 If you found this deep-dive helpful, feel free to check out the ads—your support helps me keep creating high-quality SQL Server content for the community. SQL SERVER CU5: Bug Reference 5131003, Fixes an XML External Entity (XXE) Vulnerability in the Web Service Task ⚡ SQL Server 2025 CU5 silently fixes a serious SSIS security issue that could expose local files, internal services, and even crash your server through malicious XML payloads. 🧠 TL;DR BOX ✔️ SQL Server CU5 fixes a dangerous XXE vulnerability inside SSIS Web Service Task ✔️ The fix blocks the use of file:// protocol inside WSDL endpoints 💣 ✔️ Before the patch, attackers could potentially read local files, trigger SSRF attacks, or crash the server through malicious XML entities 🚨 ✔️ After CU5,...

SQL SERVER 2025 “Things SQL Server DBAs Say Before Disaster” Sunday SQL Humor - part 2

Image
Before we dive into today's topic, if you missed my previous post you can take a look at SQL SERVER & SECURITY: What Is an XXE Attack and Why Should SQL Server DBAs Care? . 👉 If you found this deep-dive helpful, feel free to check out the ads—your support helps me keep creating high-quality SQL Server content for the community. SQL SERVER 2025 “If SQL Server Errors Were Honest” Sunday SQL Humor - part 2 😅 ⚡ Because every DBA has said at least one of these famous last words before disaster hit production. 🧠 INTRO Hi SQL SERVER Guys and Gals, After 25 years working on SQL Server environments, I can confirm one thing: sometimes the funniest DBA jokes are actually real incident reports. The scary part? Almost every catastrophic performance issue starts with a sentence that sounds harmless. ⚡ Today’s Sunday SQL Humor is dedicated to those legendary “last words” every DBA has heard at least once. ☕ Sunday SQL Humor 1. “Things SQL Server...

SQL SERVER & SECURITY: What Is an XXE Attack and Why Should SQL Server DBAs Care?

Image
Before we dive into today's topic, if you missed my previous post you can take a look at SQL SERVER 2025 CU5: Bug Reference 5090650, fixes issue in which an EntryPointNotFoundException for GetNumaNodeProcessorMask2 . 👉 If you found this deep-dive helpful, feel free to check out the ads—your support helps me keep creating high-quality SQL Server content for the community. 💣 What Is an XXE Attack and Why Should SQL Server DBAs Care? XML vulnerabilities are not just a web developer problem anymore. XXE attacks can directly impact SQL Server environments, SSIS packages, SSRS reports, and XML parsing workflows. ⚡ SQL Server Security 🧠 XML Parser Internals 🚀 SSIS & SSRS Risks 💣 XXE Vulnerability ⚡ The Hook In this post, I’ll show you exactly what an XXE (XML External Entity) attack is, why it still matters today, and how it can directly affect SQL Server environments through SSIS, XML processing, and SSRS. If ...

SQL SERVER 2025 CU5: Bug Reference 5090650, fixes issue in which an EntryPointNotFoundException for GetNumaNodeProcessorMask2

Image
Before we dive into today's topic, if you missed my previous post you can take a look at SQL SERVER 2025 Optional Parameter Plan Optimization (OPPO) . 👉 If you found this deep-dive helpful, feel free to check out the ads—your support helps me keep creating high-quality SQL Server content for the community. SQL Server 2025 CU5 fixes EntryPointNotFoundException for GetNumaNodeProcessorMask2 💣 SQL Server setup crashes on older Windows versions? ⚡ CU5 fixes a nasty EntryPointNotFoundException tied to NUMA APIs and legacy operating systems. 🧠 TL;DR BOX ✔️ SQL Server 2025 CU5 fixes EntryPointNotFoundException for GetNumaNodeProcessorMask2 ⚡ ✔️ The issue occurs during SQL Server setup on unsupported or older Windows operating systems 💣 ✔️ The root cause is a missing Windows Kernel32 NUMA API function 🔍 ✔️ You can detect the problem immediately using a simple PowerShell API test 🧪 ⚡ The Hook In this post, I’ll show you why SQL Server 2025 CU5 fixes...