Differences between Microsoft .NET, .NET Core, ASP.NET Core Security Updates ?

Question

Differences between Microsoft .NET, .NET Core, ASP.NET Core Security Updates ?

techresearch7777777 1,981

Hello, we get a security scan report that shows related Microsoft .NET security updates on one of our Windows Server 2016 servers:

Microsoft .NET Core and ASP.NET Core Security Update for August 2021
Microsoft .NET Core Security Update March 2021
Microsoft .NET Security Update for May 2022
Microsoft .NET Security Update for March 2022
Microsoft .NET Security Update for February 2022
Microsoft ASP.NET Core Security Update for December 2021
Microsoft .NET Core Security Update for October 2021
Microsoft .NET Core Security Update June 2021

What are the Differences between Microsoft .NET, .NET Core, ASP.NET Core Security Updates...and how to address the listed above ? Thanks in advance.

techresearch7777777 1,981 Reputation points

2023-04-12T19:06:37.92+00:00

Sorry posted in wrong section.
MathewWade 0 Reputation points

2023-04-13T04:23:01.4566667+00:00

.NET is a framework for building applications. .NET Framework is the original implementation, .NET Core is a cross-platform, lightweight implementation, and ASP.NET Core is a web framework built on top of .NET Core. Security updates are necessary and can be applied through regular updates and following secure coding practices.

1 answer

Your answer

techresearch7777777 1,981 Reputation points

2023-04-12T19:06:37.92+00:00

Sorry posted in wrong section.
MathewWade 0 Reputation points

2023-04-13T04:23:01.4566667+00:00

.NET is a framework for building applications. .NET Framework is the original implementation, .NET Core is a cross-platform, lightweight implementation, and ASP.NET Core is a web framework built on top of .NET Core. Security updates are necessary and can be applied through regular updates and following secure coding practices.

Answer 1

Tianyu Sun-MSFT 34,441 Microsoft External Staff

Hello @techresearch7777777 ,

Welcome to Microsoft Q&A forum.

What are the differences between Microsoft .NET, .NET Core, ASP .NET Core Security Updates…

So, they are different Security Update for Microsoft .NET(.NET), Microsoft .NET Core(.NET Core) and Microsoft ASP .NET Core(ASP .NET Core).

.NET vs .NET Core

See this doc: What’s new in .NET 5 => We dropped "Core" from the name to emphasize that this is the main implementation of .NET going forward…

So, earlier versions are named like .NET Core but the versions higher than .NET Core 3.1 are named like .NET(dropped "Core" | from .NET 5).

.NET Core/.NET vs ASP .NET Core

ASP .NET Core is a cross-platform, high-performance, open-source framework for building modern, cloud-enabled, Internet-connected apps, it runs on .NET Core/.NET. Typically, ASP .NET Core is the web framework for building web applications/services…

How to address the listed above?

Normally, the Security Update packages can be found and downloaded from Windows Update Catalog, like .NET Core Security Update and .NET Security Update. However, there are many Security Update packages, Does the "security scan" show the specific Security Update number, version or description?

BTW, sometimes, you need to update Windows OS, install or update .NET Core/.NET to install the Security Updates.

Sincerely,

Tianyu

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

techresearch7777777 1,981 Reputation points

2023-04-12T18:59:32.54+00:00

Edited to move to Comment section.
techresearch7777777 1,981 Reputation points

2023-04-12T19:08:20.1133333+00:00

Sorry, I posted my follow up question in wrong section in "Answer"...where I meant to be in "Comment" section to your Answer as: Thanks Tianyu for your reply, much appreciated. In example...if I were to download/apply Microsoft .NET Security Update for April 2023...would that cover all others previous months Security Updates including Microsoft .NET Core and ASP.NET Core I listed earlier (one time manually download/apply)...or would I have to do those separately (multiple manually downloads/apply) ? Also does the regular monthly Windows Updates include these by default or I'd have to manually download/apply. Sincerely.
Tianyu Sun-MSFT 34,441 Reputation points Microsoft External Staff

2023-04-13T10:39:40.0866667+00:00

Hi @techresearch7777777 ,

For example, "Package Details" show related information about "This update has been replaced by the following updates: … " and "This update replaces the following updates: … "

Also does the regular monthly Windows Updates include these by default or...

I'm not 100% sure, I suggest double confirm this with Windows Team(add Windows related tags or post a new ticket on Windows Community).

Regards,

Tianyu
techresearch7777777 1,981 Reputation points

2023-04-13T17:30:26.1266667+00:00

Thanks Tianyu. Here's what the security scan shows: EOL/Obsolete Software: Microsoft .Net Core Version 3.1 Detected EOL/Obsolete Software: Microsoft .Net Core Version 5 Detected EOL/Obsolete Software: Microsoft .Net Core Version 5 Detected Microsoft .NET Core and ASP.NET Core Security Update for August 2021 Microsoft .NET Core Security Update March 2021 Microsoft .NET Security Update for May 2022 Microsoft .NET Security Update for March 2022 Microsoft .NET Security Update for February 2022 Microsoft ASP.NET Core Security Update for December 2021 Microsoft .NET Core Security Update for October 2021 Microsoft .NET Core Security Update June 2021 Which patches (and web link location) would need to be downloaded to address all 11 rows listed above? And if possible the minimal amount to download since later Month Year dates overrides previous versions to avoid extra unnecessary downloads. Sincerely.
Tianyu Sun-MSFT 34,441 Reputation points Microsoft External Staff

2023-04-17T12:28:30.93+00:00

Hi @techresearch7777777 ,

I suggest update Windows Server OS first, and then rescan the OS(if possible) to check if some specific security updates are not installed. Install them separately by searching and downloading from Microsoft Update Catalog.

Since the security scan doesn’t show the detailed information of the security update package, minimal amount of the download is hard to confirm, you may need to install several packages and I suggest start to install from the latest one.

Sincerely,

Tianyu
techresearch7777777 1,981 Reputation points

2023-07-25T20:09:12.45+00:00

Thanks Tianyu, sorry it's been a while. If not included in the Windows Updates where can I download (including latest Microsoft .NET Security Update as you mentioned would cover all older versions) and any other updates or latest version to install to address what's showing up in our security scan report?

We have Windows Server 2016
Tianyu Sun-MSFT 34,441 Reputation points Microsoft External Staff

2023-07-26T06:34:46.54+00:00

Hi @techresearch7777777 ,

Most security updates are included in Windows Updates, in case some are missing, you may find them in Microsoft Update Catalog.

The date in title shows which is the later one and which is the previous one. You can choose a proper one to install.

Share via

Differences between Microsoft .NET, .NET Core, ASP.NET Core Security Updates ?

1 answer

Your answer