Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I can imagine a scenario where Microsoft will create a security patch for some versions of .NET and not others. This might occur in occasions it's too expensive to regression test and back port all the changes.

Are there any examples of some security fixes created for one framework and not another?

This information would be used to access risk of legacy .NET applications that have not been migrated to the latest and most supported version of the .NET framework.

share|improve this question
    
If I recall correctly, yes it possible that a vendor will decide to roll out a security fix for one version and delay for an older version. I don't know if this has happened specifically for .NET framework. –  Kapish M Jun 13 '12 at 13:06
add comment

1 Answer

up vote 3 down vote accepted

If you visit http://support.microsoft.com/lifecycle/search/default.aspx?sort=pn&alpha=.net+framework you'll see Microsoft's support lifecycle for the .NET framework.

As you can see, many of the older versions are no longer supported, so Microsoft do not promise they will issue security patches for them, and you should no longer use them.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.