Warning for those who use .NET Framework Security Only updates

Topic

New Reply

From Clarification of the applicability of updates for the .NET Framework 4.6 and 4.6.1:

“Installing a security update for the .NET Framework 4.6 and 4.6.1 on a system that has an earlier version of the .NET Framework installed is unsupported and causes functionality problems.

[…]

Generally, customers on any given version of the .NET Framework should install only updates that apply to the target version of the .NET Framework that is installed on their system. Update installations that are intended for either a later version or an earlier version of the .NET Framework may not be blocked even though such an installation is unsupported. This unsupported state can be expected to cause functionality problems.“

Reply | Quote

Replies

In other words folks, if you’re going to the update catalog site to get the updates for .NET please only install updates for the version(s) of .NET that are installed on your computer, AND NO OTHER VERSIONS. So, if you have .NET version 4.6.1 only on your system, then only get and install that version’s update from the catalog site. If you have .NET 3.5.1 and 4.5.2, then go get the updates for those two and install them both from the update catalog site.

There is a utility that can check your computer for you and tell you just which version(s) you have on your system so you can go get the right update(s) from the update catalog site. The utility’s been named on another string here on Ask Woody, I don’t immediately recall which one, though. 

Do any of the MVP’s have any guidance with respect to the name and/or location to get the utility from?

Reply | Quote

.NET Framework Setup Verification Tool Microsoft

Some more Mictosoft Info

And more methods

1 user thanked author for this post.

walker

Reply | Quote

There is also a PowerShell command for this. (To open PowerShell, Start>All Programs>Accessories>Windows Power Shell.)

There is a built-in registry provider in PowerShell, so you can query it like you’d query a filesystem path:
gci “hklm:\SOFTWARE\Microsoft\NET Framework Setup\NDP”

(from stackoverflow.com)

1 user thanked author for this post.

Elly

Reply | Quote

@MrBrian
As I read KS3136092, which you linked above, it was dated when .NET 4.6 became the latest version:

Article ID: 3136092 – Last Review: Jan 15, 2016 – Revision: 1

It could be interpreted as meaning that unless you already have 4.6 or 4.6.1 installed, not to install the security updates:

If a security update for the .NET Framework 4.6 and 4.6.1 was installed on a system that does not have the .NET Framework 4.6 or the .NET Framework 4.6.1 installed, you should immediately uninstall the security update for the unsupported configuration

then go to install 4.6/4.6.1 via Microsoft Update or Microsoft Download Center.

2 users thanked author for this post.

walker, MrBrian

Reply | Quote

I tested various .NET Framework security-only updates with various .NET Framework versions, and did not find an instance of the issue noted in the first post. In every test I did, the security-only update refused to install if the correct .NET Framework version wasn’t presnt. Perhaps Microsoft is referring to older .NET Framework security updates?

I recommend using Raymondcc .NET Detector to detect .NET Framework versions installed.

2 users thanked author for this post.

walker, Bob99

Reply | Quote

Thanks, @MrBrian! You just named the .NET detector I was trying to think of in my earlier post above!

1 user thanked author for this post.

MrBrian

Reply | Quote

No need for a tool, just go to the registry & have a peek.  It won’t hurt to look.

C:\Windows\regedit.exe

This is the location to see v4.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full

On the right pane at the bottom of the list it will say Version.  Mine says 4.5.51650.

Reply | Quote