none
.NET Framework from 1.0 to 4.0 RRS feed

  • Question

  • I have a question regarding the security patching of the .NET framework.  Microsoft stats that they will stop supporting .NET framework 3.0 in a few months.  From 3.5 SP1 on it will fall under program support for family product. 

    If I have both .NET framework 3.0 and 3.5SP1... does that mean that .NET framework 3.0 is patched to 3.5SP1.  The reason I ask is because we are required to remove 3.0 by end of lifecycle date due to security risks.  If it is patched then I don't need to remove it.   Again official microsoft documentation to back this up?

    Monday, March 7, 2011 9:58 PM

Answers

  • from http://www.microsoft.com/downloads/en/details.aspx?familyid=AB99342F-5D1A-413D-8319-81DA479AB0D7&displaylang=en

    Microsoft .NET Framework 3.5 Service Pack 1 is a full cumulative update that contains many new features building incrementally upon .NET Framework 2.0, 3.0, 3.5, and

    includes cumulative servicing updates to the .NET Framework 2.0 and .NET Framework 3.0 subcomponents

    you will be fine if you use the updated .Net 2.0/3.0 components shipped with 3.5 SP1



    The following is signature, not part of post
    Please mark the post answered your question as the answer, and mark other helpful posts as helpful, so they will appear differently to other users who are visiting your thread for the same problem.
    Visual C++ MVP
    • Marked as answer by Paul Zhou Tuesday, March 15, 2011 2:38 AM
    Tuesday, March 8, 2011 2:05 AM

All replies

  • The reason this is also very important is because some applications you install or custom built applications might require .NET 2.0 for example to be installed but if I have 3.5 SP1 then does that mean 2.0 is patched up 3.5SP1 or the developers need to change the program to require a later version...
    Monday, March 7, 2011 10:15 PM
  • from http://www.microsoft.com/downloads/en/details.aspx?familyid=AB99342F-5D1A-413D-8319-81DA479AB0D7&displaylang=en

    Microsoft .NET Framework 3.5 Service Pack 1 is a full cumulative update that contains many new features building incrementally upon .NET Framework 2.0, 3.0, 3.5, and

    includes cumulative servicing updates to the .NET Framework 2.0 and .NET Framework 3.0 subcomponents

    you will be fine if you use the updated .Net 2.0/3.0 components shipped with 3.5 SP1



    The following is signature, not part of post
    Please mark the post answered your question as the answer, and mark other helpful posts as helpful, so they will appear differently to other users who are visiting your thread for the same problem.
    Visual C++ MVP
    • Marked as answer by Paul Zhou Tuesday, March 15, 2011 2:38 AM
    Tuesday, March 8, 2011 2:05 AM
  • Hi,

    I think you need to get clear how the versioning of the .NET framework works. The .NET framework 2.0 contains the CLR runtime 2.0, which is needed for .NET 3.0 as well as .NET 3.5. These are just incremental additions on the .NET 2.0 framework. However, when you patch the .NET 3.5 with it's SP1, that will also patch the .NET 2.0 and the .NET 3.0 frameworks with both to SP2. For your information, the installation of .NET 3.5 contains also the SP1 for both .NET 2.0 and .NET 3.0. See also http://msdn.microsoft.com/en-us/netframework/cc378097.

    These versioning is I know, somewhat confusing. But it's the way it is. You cannot even have .NET 3.5 (with or without SP1) without also having .NET 2.0 and .NET 3.0 installed. And the latter two have to be on SP1 before .NET 3.5 can be installed.

     


    Hope this helps
    Meile Zetstra


    http://blogger.xs4all.nl/mzetstra

    Tuesday, March 8, 2011 8:50 AM