AskWoody.com

Why did Microsoft re-offer the old .NET patches?

Right now it loks like you can work around the .NET patch installation problems by installing them (manually if you need to), then going into Windows Update and unchecking all of the patches so they aren’t offered again.

Microsoft should be drawn and quartered, but you’ve heard me say that before, eh?

When I get a definitive solution, I’ll let you know. In the meantime, I’ve been wondering why in the world MS is offering these old patches again. Ends up that Microsoft has issued “Minor Revisions” to the security bulletins. Usually, “Minor” means that you don’t have to re-apply the patch. This month, though, Auto Update is pushing the patches. Here’s what MS says:

********************************************************************
Title: Microsoft Security Bulletin Minor Revisions
Issued: May 22, 2012
********************************************************************

Summary
=======

The following bulletins have undergone a minor revision increment.

Please see the appropriate bulletin for more details.

* MS11-100 – Critical
* MS12-034 – Critical
* MS12-035 – Critical
* MS12-MAY

Bulletin Information:
=====================

* MS11-100 – Critical

Reason for Revision: V1.5 (May 22, 2012): Added entry to the update FAQ to announce a detection change for KB2656352 for Microsoft .NET Framework 2.0 Service Pack 2 to correct an installation issue. This is a detection change only. There were no changes to the security update files. Customers who have already successfully updated their systems do not need to take any action.

- Originally posted: December 29, 2011
– Updated: May 22, 2012
– Bulletin Severity Rating: Critical
– Version: 1.5

* MS12-034 – Critical

Reason for Revision: V1.2 (May 22, 2012): Added an entry to the Frequently Asked Questions (FAQ) Related to This Security Update section to explain this revision.

- Originally posted: May 8, 2012
– Updated: May 22, 2012
– Bulletin Severity Rating: Critical
– Version: 1.2

* MS12-035 – Critical

Reason for Revision: V2.1 (May 22, 2012): Added entry to the update FAQ to announce a detection change for KB2604092 for Microsoft .NET Framework 2.0 Service Pack 2 and KB2604110 for Microsoft .NET Framework 3.0 Service Pack 2 to correct an installation issue. This is a detection change only. There were no changes to the security update files. Customers who have already successfully updated their systems do not need to take any action.

- Originally posted: May 8, 2012
– Updated: May 22, 2012
– Bulletin Severity Rating: Critical
– Version: 2.1

Let me repeat, for emphasis: these patches were re-released on May 22. I have no idea why. The notification from Microsoft says that they are updates to the KB articles only. It sounds to me like somebody accidentally ran these down the automatic update chute when they shouldn’t have.

Problems with KB 2633880, 2518864, 2572073

I’m seeing reports all over the place about a lousy bunch of .NET patches that went out in the past few hours. People complain that they’re being offered repeatedly, or they won’t install. They seem to be causing problems on XP and Server 2003 boxes.

Susan Bradley advizes that the problematic patches are these:

MS12-016: Description of the security update for the .NET Framework 2.0 Service Pack 2 on Windows XP and Windows Server 2003: February 14, 2012: KB 2633880

MS11-044: Description of the security update for the .NET Framework 3.5 Service Pack 1 and .NET Framework 2.0 Service Pack 2 on Windows XP Service Pack 3 and on Windows Server 2003 Service Pack 2: June 14, 2011: KB 2518864.

MS11-078: Description of the security update for the .NET Framework 2.0 SP2 for Windows XP and Windows Server 2003: October 11, 2011: KB 2572073

 Don’t even try to install them. Wait.

I sure hope you’re following along here, and you’ve noticed the MS-DEFCON 1 warning. This has been a horrendous month for patches. Turn OFF Automatic Update and wait for Microsoft to sort out the mess.

Windows 8’s new UI: A return to Flatland

In an amazing reversal, Microsoft intends to remove all vestiges of Vista’s ‘dated and cheesy’ Aero interface in favor of a flat look.

InfoWorld Tech Watch

Dear Mozilla: Don’t give up on Windows RT!

Mozilla (with a little help from Google) is pressing an important point, not just for Firefox on Windows RT, but for the future of Windows applications.

InfoWorld Tech Watch.

Best Practices for trouble-free Windows patching

Excellent Top Story by Susan Bradley, in this week’s Windows Secrets Newsletter.

Has “Windows” become a liability to Microsoft’s mobile strategy?

Using the name “Windows” brings all sorts of baggage.

InfoWorld Tech Watch.

More MS12-034 / KB 2686509 mayhem

Just when you thought it might be safe to get back in the water…

I’m getting another report of a different problem with installing last week’s .NET patch, KB 2686509.

We’re still at MS-DEFCON 1, folks. It looks like Microsoft has a real turkey on its hands.

Susan Bradley promises full details in this coming week’s Windows Secrets Newsletter.

Windows RT ‘isn’t Windows’

And what that means in the latest browser kerfuffle…

InfoWorld Tech Watch.