Page 1 of 1

Use 'security only updates' instead 'quality rollups'

PostPosted: 10.01.2017, 09:24
by IBU
Dear admin,

I would like to use the option "security only updates".
What is the selection of updates based on?
Is it determined dynamically using the last wsusscn2.cab file?
Can keep using the current WSUS Offline 10.9 and generate the offline installation media monthly using always the latest wsusscn2.cab file?
Will this approach work?
Thank you a lot for the explanation.

Regards,
ibu

Re: Use 'security only updates' instead 'quality rollups'

PostPosted: 10.01.2017, 14:25
by boco
It's based on community-/author-provided static lists (the -seconly.txt lists). An automatic determinion isn't possible, as the catalog contains both the full and seconly rollups, and both are of the "Critical" category.

While you can keep using 10.9, it's recommended to update to later versions because of improvements, bugfixes and potential new features. Additionally, a change in the list format could (in theory) render all older versions inoperable. Last but not least, MS changes links all the time and with old versions you need to take care of the lists by yourself.


tl;dr: The lists are community-based and verified. Update is recommended but not required.

Re: Use 'security only updates' instead 'quality rollups'

PostPosted: 11.01.2017, 15:08
by IBU
Hi Boco,

thanks a lot for the prompt and precise explanation.
I have noticed one more interesting behavior:

After selecting:
- Windows 7 / Server 2008 R2, Windows 8.1 / Server 2012 R2, Server 2008
- use 'security only updates' instead 'quality rollups'
- include C++ Runtime Libraries and .NET Frameworks

There are no security updates for .Net 4.5.2 in the directory "dotnet/x64-glb"
Is this on purpose?
According to MS, .NET v 4.5.2 is still supported.
There should be older Security-Only update for .NET 4.5.2 (post-October 2016) as well as earlier released security updates for .NET 4.5.2 (pre-October 2016).
Thanks again for the clarification!

Cheers,
IBU

Re: Use 'security only updates' instead 'quality rollups'

PostPosted: 12.01.2017, 10:33
by IBU
I will try to ask more direct and simple questions:

- does the option "Use 'security only updates' instead 'quality rollups' " apply only to Windows Updates or also to .NET Updates ?
- is the .NET framework 4.5.2 still covered by WSUS Offline 10.9 ?

Thank you in advance for your explanation.

PS: I appreciate the effort and service that this community provides as this tool is very useful !

Re: Use 'security only updates' instead 'quality rollups'

PostPosted: 12.01.2017, 16:53
by boco
- does the option "Use 'security only updates' instead 'quality rollups' " apply only to Windows Updates or also to .NET Updates ?
Yes, the seconly lists have the seconly updates for .NET listed.

Code: Select all
- is the .NET framework 4.5.2 still covered by WSUS Offline 10.9 ?
AFAIK, only 4.6.2 (and 4.6 for Vista). But, strangely, I still have one 4.5 update (KB3210139) in the updates directory.

Re: Use 'security only updates' instead 'quality rollups'

PostPosted: 13.01.2017, 13:30
by IBU
Hi Boco,

thank you again for the prompt and spot-on explanation.
Is it possible to include the Security-Only updates for .NET 4.5.2 framework in the next version of the WSUS Offline tool?
Those updates are still being regularly issued by MS, so it is pity to ignore them.
Thank you again!

Cheers,
Michal

Re: Use 'security only updates' instead 'quality rollups'

PostPosted: 16.03.2017, 05:22
by tpa2
I would also request that .NET framework 4.5.2 updates be an option to download. We have multiple machines with software that only supports version 4.5.2 .
Thank you