.NET Framework 3.0 - Windows XP Service Pack 3 Bug
XP Service Pack 3 fails to list the .NET 3.0 Redistributable as an optional update. The following steps were performed in order to validate this problem with XP SP3.
While still using XP Service Pack 2, I installed the .NET 3.0 redistributable using Windows Update. No problems were encountered and the install was successful. After installing the .NET 3.0 Redistributable the following three Windows Updates were listed as High Priority.
1) Security Update for Microsoft XML Core Services 6.0 Service Pack 2 (KB954459) Download size: 931 KB, less than 1 minute A security issue has been identified in Microsoft XML Core Services (MSXML) that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.
2) Microsoft .NET Framework 3.0 Service Pack 1 (KB929300) (x86) Download size: 53.1 MB, 2 minutes Microsoft .NET Framework 3.0 Service Pack 1 provides cumulative roll-up updates for customer reported issues found after the release of Microsoft .NET Framework 3.0. In addition, this release provides security improvements, and prerequisite feature support for Microsoft .NET Framework 3.5. After you install this item, you may have to restart your computer.
3) February 2007 CardSpace Update for Windows XP (KB925720) Typical download size: 152 KB, less than 1 minute This update rollup for Windows includes the hotfixes for Windows CardSpace private desktop described in KB article 925720. After you install this item, you may have to restart your computer.
After rebooting the PC, I once again checked Windows Update, no updates were available for the versions of .NET I had installed.
Verifying the Windows XP Service Pack 3 bug: First I uninstalled all versions of .NET using the Control Panel's Add/Remove Programs. I also followed up by using Stebner’s Cleanup Tool. Next I installed Windows XP SP3 by using the download file. Then once again ran Windows Update.
Sure enough .NET 3.0 Redistributable “was not” listed as an optional update. So I chose to skip any .NET updates but did install the SP3 priority updates again skipping IE7. Reboot was required after the updates were installed.
I tried Windows Update one more time, still no .NET Framework 3.0 redistributable is listed. So I continued by installed the .NET version 1.1 and 2.0 redistributables listed as optional in Windows Update. Both installed without any problems. Also used the .NET setup verifier tool as a means of checking and validating both versions.
Ran Windows update again and this time Service Pack 1 for both .NET 1.1 and 2.0 where listed as High Priority updates. No problems, both updates installed successfully.
Ran Windows update again, this time a "Priority Update" listed a security Update for Microsoft .NET Framework, Version 1.1 Service Pack 1 (KB928366) was available to install. No problem, update installed successfully.
The SP3 Bug: After this update no additional updates were available using Windows Update, and this is the bug when a Windows XP Service Pack 3 user checks the list of optional updates for they “will not” see any .NET Framework 3.0 optional update listed. XP SP2 users do not have this problem as .NET Framework is listed as a optional update.
This confirms the failure of Windows Update to offer.NET 3.0 Redistributable as an optional patch for Windows XP Service Pack 3 users as published in the December 4th Windows Secrets newsletter article by Susan Bradley titled: XP Service Pack 3 blocks .NET security patches. In it she describes XP SP3 inability to install important security patches for Microsoft's .NET technology. For more detail click on the link below: http://windowssecrets.com/2008/12/04/03-XP-Service-Pack-3-blocks-.NET-security-patches
Just how big of a bug is this? If you have no applications that require .NET Framework then there is no reason to download any of the .NET versions listed as an “Optional Update”. Again just check Add or Remove programs in the Control Panel to see if you have any version of .NET installed. If none are listed, then there is no need to download and install software you don’t need, it just takes up unnecessary disk space.