14,506 questions
Since SQL Server 2012 SP4 is out of extended support (ended 2022-07-12), it will be hard for you to find support.
KB4583465 Hotfix update for SQL Server 2012 SP4 reported missing by ACAS
vorear
41
Reputation points
Our ACAS claims KB4583465 is missing but the required SQL version appears in Programs and Features and the registry. Ran SQL report, then reinstall attempt, then uninstallation of KB4057116 then install KB4583465 but none of these procedures work.
SQL Server | Other
{count} votes
-
Erland Sommarskog 122.8K Reputation points MVP Volunteer Moderator2022-12-13T22:37:04.717+00:00 Colour me stupid, but what is ACAS?
-
vorear 41 Reputation points
2022-12-14T14:38:26.087+00:00 Assured Compliance Assessment Solution (ACAS) is a software set of information security tools used for vulnerability scanning and risk assessment by agencies of the United States Department of Defense (DoD). It performs automated vulnerability scanning and device configuration assessment. ACAS was implemented by the DoD in 2012, with contracts awarded to Tenable, The commercial version is called Tenable Security Center or Tenable.SC
I have asked the testing team to gather install logs and report on all versions of SQL that are installed to look for older versions that are not needed and are confusing the hotfix installer. I have also posted this question to the Tenable community.
Our problem is the patch is not updating all components, it leaves the following components at the older revision:
Database Engine Services Standard Edition 11.4.7462.6
Full-Text and Semantic Extractions for Search Standard Edition 11.4.7462.6 -
vorear 41 Reputation points
2022-12-14T18:51:15.97+00:00 Tenable staff requested we open a support ticket as "Looking at prior issues with SQL Server 2012 detection looks like there have been concerns with the binary to use and what elements are updated."
Btw, we are on Windows 2012 R2 and the problem is the patch is not updating 2 of the 5 components:
Product Feature Edition Version
SQL Server 2012 Database Engine Services Standard Edition 11.4.7462.6
SQL Server 2012 Full-Text and Semantic Extractions for Search Standard Edition 11.4.7462.6
SQL Server 2012 Management Tools - Basic Standard Edition 11.4.7507.2
SQL Server 2012 Management Tools - Complete Standard Edition 11.4.7507.2
SQL Server 2012 Client Tools Connectivity Standard Edition 11.4.7507.2
Note:
11.4.7462.6 = old version
11.4.7507.2 = New version
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(28.799999999999997, 2%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESX%3C/text%3E%3C/svg%3E)
Seeya Xi-MSFT 16,661 Reputation points2022-12-16T07:03:17.837+00:00 Hi @vorear ,
To sum up, you should have installed SP4 first and then GDR. did you install it like this?
Best regards,
Seeya
Sign in to comment
Accepted answer
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 12%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJL%3C/text%3E%3C/svg%3E)
Jingyang Li 5,896 Reputation points Volunteer Moderator2022-12-14T14:49:21.723+00:00
2 additional answers
Sort by: Most helpful
-
Seeya Xi-MSFT 16,661 Reputation points
2022-12-14T02:30:49.32+00:00 Hi ,
Same question, not sure what ACAS is.
Please see some concepts below:
RTM: stands for Release to Manufacturing, which is the original release version of the product and the default version when downloaded from the CD or MSDN. However, nowadays, when you download the SQL Server version, there is also a version with SP integrated.
Hotfix: An issue that needs to be fixed. Every year, there are many bugs or vulnerabilities in SQL Server, and the fixes for these issues are defined as Hotfix.
Cumulative Update (CU): Cumulative update package, which consists of Hotfixes. CU is released every 8 weeks, so there will be CU1, CU2 ......, etc. Each latest CU version contains Hotfixes from the previous CU. CU is installed based on the original version (RTM) or SP.
Service Package (SP): SP is the package with the most integrated Hotfixes, which are officially and fully tested. SP is the largest patch file for a SQL Server product release, and is released every 12 to 18 months.
GDR (General Distribution Release) is different from CU in that each latest CU contains cumulative updates based on RTM/SP, while GDR contains only serious updates. They have the same baseline.
Each latest CU contains fixes for issues integrated with the previous CU, and each SP contains fixes for issues included in the previous SP. Now look at the picture again.
Here is a picture for your inference:
Hope this will help you.Best regards,
Seeya
If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread. -
vorear 41 Reputation points
2022-12-16T19:04:30.543+00:00 Our corporate Microsoft support says the patch is not supported by Windows Server 2012 R2 (as reported by Issue installing a SQL Security Update on Windows Server 2012 R2) and Tenable is processing the engineering request to update their test to close the false positive.
Thanks to everyone for the suggestions, now how do I close this question as resolved?
-
Seeya Xi-MSFT 16,661 Reputation points
2022-12-19T02:09:18.607+00:00 Hi @vorear ,
In order to benefit all community members who are having this similar issue, please choose an answer to accept for the answer you think is useful to you. Your contribution is highly appreciated.
Best regards,
Seeya
Sign in to comment -