Announcing Microsoft.Data.SqlClient 7.0.2 and 6.1.6
Microsoft.Data.SqlClient has released stable servicing updates, versions 7.0.2 and 6.1.6, now available on NuGet. These updates introduce crucial enhancements and bug fixes for improved security and functionality. A significant feature is the addition of Web Account Manager (WAM) broker support for Microsoft Entra ID authentication modes on Windows. This integration facilitates OS-brokered token handling, leading to better single sign-on and support for Conditional Access and Windows Hello. The Text Data Stream (TDS) parser has been strengthened with strict data-length bounds checks to enhance security against malformed protocol payloads. Additionally, a null-reference issue in SqlDataReader during buffer-based reads has been resolved, now surfacing argument validation errors correctly. The Always Encrypted column master key signature verification cache has also been fixed, ensuring accurate application of cached results. For users of version 7.0.2, it is recommended to upgrade companion extension packages to the same version for compatibility. Instructions for installing or updating the packages via NuGet are provided. Release notes for both versions are available on GitHub. New users can find introductory documentation, and those migrating from System.Data.SqlClient can refer to a porting cheat sheet. Issues encountered can be reported on GitHub.