Jo-Anne wrote:
> On Thursday, I downloaded and installed Microsoft's June high-priority
> updates on my laptop (running WinXP Professional) and my netbook (running
> WinXP Home). At that time, Microsoft claimed that they all were installed
> OK. Today, the yellow shield appeared again on both computers, and Microsoft
> Update now shows two more high-priority updates:
>
> Security Update for .NET Framework 2.0 SP2 and 3.5 SP1 on Windows Server
> 2003 and Windows XP x86 (KB2518864)
> Security Update for .NET Framework 2.0 SP2 and 3.5 SP1 on Windows Server
> 2003 and Windows XP x86 (KB2478658)
>
> When I did a search at Microsoft's website, I found that they've been
> available since Tuesday; but my update history at Microsoft Update doesn't
> show them.
>
> Any idea of why they showed up several days after the regular updates? And
> are .NET Framework updates needed for users who aren't programmers?
>
> Thank you!
>
> Jo-Anne
>
>
I'm guessing that since there was a massive round of updates pushed out
last Tuesday that included updates known to cause installation issues
(EX: Visual C++ Runtime updates that were rereleased due to installation
issues), that the .NET Framework updates were regulated.
As to your need for .NET Framework updates ... the vulnerabilities that
the .NET Security updates address are both rated as Critical for Windows
XP so, they should be installed.
Microsoft Security Bulletin MS11-044 - Critical
Vulnerability in .NET Framework Could Allow Remote Code Execution (2538814)
http://www.microsoft.com/technet/sec.../MS11-044.mspx
The above Security Bulletin is for KB2518864
Microsoft Security Bulletin MS11-039 - Critical
Vulnerability in .NET Framework and Microsoft Silverlight Could Allow
Remote Code Execution (2514842)
http://www.microsoft.com/technet/sec.../MS11-039.mspx
The above Security Bulletin is for KB2478658
MowGreen
================
*-343-* FDNY
Never Forgotten
================
"Security updates should *never* have *non-security content* prechecked