Security Only .NET Updates for April 2017

Topic

New Reply

As long as Microsoft offers the security only .Net patches than some prefer those rather than to just install them via Windows Update.

I think I found them at http://forums.wsusoffline.net/viewtopic.php?f=6&t=6512

KB4014985 .net for April Security Only

64 Bit

http://download.windowsupdate.com/c/msdownload/update/software/secu/2017/03/ndp46-kb4014552-x64_32e1c3af9a27962c93682fc66584803baa729782.exe
http://download.windowsupdate.com/c/msdownload/update/software/secu/2017/03/ndp46-kb4014558-x64_900b63e9c928af1224ba91e4a0d0a14cceee92f6.exe
http://download.windowsupdate.com/c/msdownload/update/software/secu/2017/03/windows6.1-kb4014573-x64_12e4991474e5150382f317efd3fcbd8a13090ce5.msu
http://download.windowsupdate.com/c/msdownload/update/software/secu/2017/03/ndp45-kb4014566-x64_95b57712424a36cac3fc2f27fcc12e4555a80afd.exe

32 Bit

http://download.windowsupdate.com/c/msdownload/update/software/secu/2017/03/windows6.1-kb4014573-x86_79f87c281b6d35face513f821df86a161ebd2eab.msu
http://download.windowsupdate.com/c/msdownload/update/software/secu/2017/03/ndp46-kb4014558-x86_dc321d638ffa0c672a555b9e8e37e52994c71253.exe
http://download.windowsupdate.com/c/msdownload/update/software/secu/2017/03/ndp46-kb4014552-x86_1cbfe37224f78834082cc856e29583bf5ffabc8b.exe
http://download.windowsupdate.com/c/msdownload/update/software/secu/2017/03/ndp45-kb4014566-x86_03cfe905211220f70c6d9eeb61dfdbfa12897519.exe

That is what I was asking for I think.

Reply | Quote

Replies

The links shown in #110235 are for:

KB4014552 (64-bit) as .exe, for .net 4.6.2, on W7 SP1, WS 2008 R2 SP1
KB4014558 (64-bit) as .exe, for .net 4.6, on Vista SP2, WS 2008 SP2, W7 SP1, WS 2008 R2 SP1, and for .net 4.6.1 on W7 SP1, WS 2008 R2 SP1
KB4014573 (64-bit) as .msu, for .net 3.5.1, on W7 SP1, WS 2008 R2 SP1
KB4014566 (64-bit) as .exe, for .net 4.5.2 on Vista SP2, WS 2008 SP2, W7 SP1, WS 2008 R2 SP1
KB4014573 (32-bit) as .msu, as above
KB4014558 (32-bit) as .exe, as above
KB4014552 (32-bit) as .exe, as above
KB4014566 (32-bit) as .exe, as above
respectively

The above links relate to MS support pages, which contain known issues with the updates, affecting PowerShell v3.0+.

 
According to Description of Software Update Services and Windows Server Update Services changes in content for 2017
the Security-Only update for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 on Windows Embedded Standard 7, Windows 7, and Windows Server 2008 R2 is KB4014985
as noted in #109895

Metadata has changed.
Binaries have not changed.
This update does not have to be reinstalled.

Reply | Quote

1- Going to the MS Update catalog kept giving me an error when clicking on the Download button until I added HTTPS:// in front of the www for the site and refreshed it in Chrome.

2- The download button pop-up gives you the choice of which file to download ( there are all 4 of them in the pop-up ) so in my case, I have .net 4.5.2 so I chose KB4014566.

Hope this helps

Don't take yourself so seriously, no one else does
All W10 Pro at 22H2,(2 Desktops, 1 Laptop).

Reply | Quote

If you click on the “Title” instead of “Download” in the Catalog, then on the right click on “More Information” in the box that pops up, it will take you to a page that has a description of each of the patches and which version they are for.

Reply | Quote

This links in the top post in this topic are for direct download of the updates. The second post gives the details of the files.

Reply | Quote

http://www.infoworld.com/article/3192194/microsoft-windows/yes-windows-patches-are-a-mess-but-you-should-still-install-them.html mentions “and a bunch of additional patches” in addition to either KB4014551 or KB4014985.

Is either KB4014551 or KB4014985 the only patch needed or are there additional security only ones not mentioned that are also required?

Reply | Quote

When I go to install April 2017 windows 7 security only/NET updates I get 4 links to choose from. 3 say “save” to computer and 1 has stand alone installer, what do I pick??

Reply | Quote

Have a quick look at the top two posts in this topic, which give you links to the updates and to their information pages.

There are 4 separate patches within KB4014985, and it is confusing they use different methods of deployment. Do them all for the version you need, if you haven’t already installed the components (note that they are metadata changes #110246).

Reply | Quote

Thank you Kirsty! Okay this is weird, the sec only update did have 4 things to click on as well, but just checked and now just one. That makes it easy enough..will install now.

NET sec only update gives me:

ndp46-kb4014552-x64_32e1c3af9a27962c93682fc66584803baa729782.exe
ndp46-kb4014558-x64_900b63e9c928af1224ba91e4a0d0a14cceee92f6.exe
windows6.1-kb4014573-x64_12e4991474e5150382f317efd3fcbd8a13090ce5.msu
ndp45-kb4014566-x64_95b57712424a36cac3fc2f27fcc12e4555a80afd.exe

windows 6.1 has the installer and the 3 ndp’s ask if I want to “save file”, what do I do with that?

Thanks! (yes, computers aren’t my strong point!)

Reply | Quote

If you look at this page for Win7 32-bit or 64-bit you will find that the four parts of the .NET update are for the four different current versions v3.5.1, v4.5.2, v4.6 and v4.6.2 – You only need the ONE for each version that is installed on your computer (it may not be the same on all computers if you have more than one, and there may only be one version).
For me, it is easier to download/save the file to my desktop, then delete it after the installation is finished.

If the file you need for the version on your computer has a .exe extension, you just need to double click on the file and it should install.

If the file you need ends in .msu, it uses the Windows installer:
Go to Control Panel\Administrative Tools\Services
Scroll down and highlight the Windows Update Service, then on the upper left click on “stop” to stop the service.
Double click on the file and give permission to install
Reboot if it asks you to

In the future, when you go to the Catalog and type in the update number for the .NET security only patch

PKCano wrote:

If you click on the “Title” instead of “Download” in the Catalog, then on the right click on “More Information” in the box that pops up, it will take you to a page that has a description of each of the patches and which version they are for.

EDIT to add info about download/save

Reply | Quote

Thank you very much, I will do as instructed to determine which patch I need, then install it …

Reply | Quote

Okay, I just clicked on “title” and all it did was change the order of the updates, no “more info” box came up. How does MS expect someone to know which of the four choices to pick?

I am looking for the windows 7 x64 4.5.2 sec only NET update. Any help is greatly appreciated!

Reply | Quote

Not the title BAR. The title of the update. Move the pointer down just a hair. It’s a link

Reply | Quote

Okay, I needed to click on the actual title, not the word “title” at the top..I now have the info needed..

Thank You!

Reply | Quote

Here’s a serious question- I read where Microsoft stated that if you download a “security only” patch from any source but Windows Update (such as the internet), they will also give you the “quality rollup” patch as well!

When I downloaded the “security only” patch from the MS Update catalog, it was not the standalone installer, but said the source was the “internet”.
Of the 4 choices for “security only” only one choice had the standalone installer. Why? So you have to get the update from the “internet” instead of “Windows Update”?
Thereby opening ones self to the “quality rollup” by downloading from the “internet”?

Indeed, the update does not appear in my “windows update history”, but is installed. So Windows Update doesn’t recognize it, making it from “another source”.
So, has MS stuck me with the dreaded “quality rollup” patch along with “security only”, as they said they would?

If not, why would they say they would?

peace

Reply | Quote

Firstly, you need the update for the particular version/s of .net you have installed. If you have more than one version showing in Installed Updates, you need to update them all, using the links above. i.e. if you have 4.6.2 on Windows 7 SPI 64-bit, you need to download KB4014552.

Secondly, it is considered safe to use the Windows Update rollups for .net, which have not been shown to include the same bundling issues the Windows updates contain.

Thirdly, I’m sorry but I don’t know why some of the updates have been created by MS as .msu but others as .exe.

Also, did you note that the April security updates were metadata changes, not content changes, so if you had already installed them in previous month, you didn’t need to reinstall?

Kirsty wrote:

According to Description of Software Update Services and Windows Server Update Services changes in content for 2017
the Security-Only update for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 on Windows Embedded Standard 7, Windows 7, and Windows Server 2008 R2 is KB4014985
as noted in #109895:
Metadata has changed.
Binaries have not changed.
This update does not have to be reinstalled.

A reply above shows that the four patches in KB4014985 are the 4 listed above.

Reply | Quote