SQL Server 2019 CU32 + GDR (KB5122772) is a security update for build 15.0.4490.9. Microsoft says it contains fixes and resolves vulnerabilities, with coverage spanning the Database Engine and several related components.

The release also calls out one known issue affecting certain linked server queries that use MSDASQL. For teams running SQL Server 2019, the main takeaway is that this update combines security-related changes with a broad set of engine and component fixes.

Known issues

Microsoft lists one confirmed issue in this release:

  • Linked server queries that use the MSDASQL (OLE DB Provider for ODBC Drivers) provider and specify a provider string (@provstr) can fail with Msg 7416: Access to the remote server is denied because no login-mapping exists. Microsoft says a stricter connection validation check in the Database Engine can reject some linked server configurations that used to work in earlier builds.

Microsoft does not mark any other known issues as confirmed in the release packet.

Improvements and fixes

This update includes 40 verified fixes. The changes are concentrated in a few main areas:

  • PolyBase and security infrastructure: fixes include an unsafe deserialization issue in the PolyBase Engine, changes related to PolyBase service command-line parameters and raw TCP listeners, and a security issue in Microsoft Entra authentication login handling.
  • Backup and restore: Microsoft includes fixes for managed backup stored procedures (managed_backup.sp_get_encryption_option and managed_backup.sp_do_backup) and for SQL Server VSS Writer handling of malformed or undersized backup metadata.
  • SQL Agent, replication, and connectivity: the update strengthens validation in SQL Server Agent, adds validation and handling improvements across many replication stored procedures, and addresses malformed TDS and Binary XML input in SQL Connectivity.
  • In-Memory OLTP and XML: several fixes address native compilation scenarios, including buffer over-read, access violation, and heap buffer overwrite cases, plus XML handling issues such as large OPTION (USE PLAN) XML, DTD attribute lists, and malformed XML format files used with OPENROWSET(BULK...) or BULK INSERT.
  • Query execution, Query Store, programmability, and Extended Events: Microsoft includes input-validation and memory-handling fixes, along with security-related updates for internal event data, Extended Events validation, and SqlDataRecord.SetBytes with sql_variant values.

A few representative bug references from the release include 5370330 for PolyBase, 5383449 for managed backup, 5499872 for the XML reader, 5502660 and 5506118 for query execution validation, and 5541278 for Query Store Showplan handling.

Several replication items focus on identifier handling, bounds checks, and protection of internal replication data, while Windows-specific replication fixes also include improvements for queued updating subscriptions in Transactional Replication.

What this means for SQL Server 2019

For DBAs and developers on SQL Server 2019, KB5122772 is a broad servicing release that touches core engine behavior as well as components used for replication, backup, XML processing, and administration tasks. The release notes emphasize security-related fixes throughout, but they also include reliability and validation changes that may matter in day-to-day operations.

Official source