.NET Framework - hotfix. Can I discard the original Framework?

.NET Framework - hotfix. Can I discard the original Framework?

• MarkWastie

  The Original is titled:
  
  Microsoft .NET Framework SDK
  
  It is version 1.0.3705
  
  
  The hotfix is titled:
  
  Microsoft .NET Framework 1.0 Hotfix (KB886906).
  
  These are the only 2 .NET Framework files listed in the add remove control panel.
  
  I've got to say, this update without some explanation seems pretty darn sloppy...
  
  
  

• triston oconnor

  Hotfixes do not replace the original framework, they install over the top.  However, the space reported in Add/Remove Programs is slightly inaccurate since a hotfix will not replace the entire framework.

  If you want to find out what the fix does, you can use the KB number listed at the end of the patch name (in this case 886906).  If you search for that on http://support.microsoft.com you'll get the KB article describing the fix.  In this case, ASP.NET path validation vulnerability in Microsoft .NET Framework 1.0 Service Pack 3.

  In this case, the linked to TechNet article indicates that KB886906 only replaces System.Web.dll, which is ~1.2 MB.  Since it installs over the top of your original System.Web.dll, you won't even see an increase of 1 meg, likely just a few KB depending on how much bigger the fixed code is.

  -Shawn

  
  
  

• jonDow

  kloepper wrote:

  Also,  I have folders (and files) named: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322

  That's .NET v1.1

  kloepper wrote:

  and C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705

  That's v1.0

  
  

  kloepper wrote:

  I'm running this on Server 2003....I wonder how many new problems I'll introduce to the system that way

  .NET 1.1 is part of Windows Server 2003, so should not be removed from that platform.  You can use Add/Remove Programs to remove the v1.0 installation though, and shouldn't see any adverse effects (although applications that were explicitly binding to v1.0 will now start to bind to v1.1, so they may have slightly different behavior).

  -Shawn

  
  
  

• swapnali

  The update was pushed to you via Windows Update because it was rated as an Important security update.  In general you don't want to disable accepting updates since it will leave your system vulnerable to attacks that the patches will prevent.

  -Shawn

  
  
  

• Mike75

  Hi,
  
  You do not have any issues. Windows server 2003 comes with .NET Framework v1.1 installed on it by default and both those folders you have mentioned are present by default upon installation of Windows Server 2003
  
  Regards,
  Vikram
  
  

• benying

  Hi,

  What's the version of the framework I guess its a pretty bad idea. It might screw-up the framework. What versions can you see in the "add remove programs" dialog If its 1.0 and 1.1 I guess you could remove the 1.0 version.

   

  cheers,

  Paul June A. Domag

  
  
  

• fred79g

  OK, thanks for the help.
  
  I'm wondering where the v 1.0 hotfix came from   Why was it sent to me and I'm guessing that I accepted it without realizing that I didn't need it.
  
  I'm frustrated enough with this right now that I have turned off the automatic updates until I understand better what they are doing.
  
  I'm tempted to install nothing but the service packs or else be more careful about the automatic updates.  Any ideas about this approach
  
  Paul
  
  

• Smacker

  Also,  I have folders (and files) named:
  
  C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322
  
  and
  
  C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705
  
  
  with lots of the files for both versions listed with a blue font (the work of the hot fix )
  
  
  Maybe I ought to just delete all .NET Framework files and start over with the 1.1 version.  I'm running this on Server 2003....I wonder how many new problems I'll introduce to the system that way
  
  
• .NET Framework - hotfix. Can I discard the original Framework?