diff --git a/CHANGELOG.md b/CHANGELOG.md
index 00990ff..b5bf5be 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,10 @@
+## 2020-06-25 Release 1.5.9
+### Summary
+Security Fix
+
+### Changes
+  - Change mssql dbtype to use environment variable instead of passing password on cli
+
 ## 2020-04-30 Release 1.5.8
 ### Summary
 Bug fix
diff --git a/dbdeployer_release b/dbdeployer_release
index f9d25e9..40e1bf6 100644
--- a/dbdeployer_release
+++ b/dbdeployer_release
@@ -1 +1 @@
-version=1.5.8
+version=1.5.9
diff --git a/dbtype/mssql/set_password_flags.sh b/dbtype/mssql/set_password_flags.sh
index 623d4c2..adc9dfa 100644
--- a/dbtype/mssql/set_password_flags.sh
+++ b/dbtype/mssql/set_password_flags.sh
@@ -1,4 +1,5 @@
 function set_password_flags() {
-  password_flag="-P${password}"
+  password_flag=""
+  export SQLCMDPASSWORD="${password}"
   return 0
 }