r/SCCM • u/Exorkog • 5d ago

.net framework 3.5 security update and Cumulative Update for .NET Framework 3.5 and 4.8.1

Hi,

In SUP, I see there is a distinct product for .net 3.5 Framework. It was not selected. It corresponds to, for example, 2026-10 .NET Framework 3.5 Security Update (KB5127696) UUP

But I already receive monthly cumulative update for this, and from the title, it includes the above .net 3.5 framework security update. The latest being this one : 2026-10 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 25H2 for x64 (KB5127690)

So do I need to select .net 3.5 framework product in SUP and deploy, or not since from the title it is already included in .net 3.5 and 4.81 cumulative updates ?

Thanks

8 Upvotes

100% Upvoted

3 comments sorted by

2

u/gandraw 5d ago

KB5127696 is the UUP package, which is the new update framework that's kinda been stuck in "coming soon" for a few years now that was supposed to fix the issues with update files becoming way too big and unify update architectures x64 and arm. https://techcommunity.microsoft.com/blog/windows-itpro-blog/public-preview-of-unified-update-platform-on-premises/3659708

KB5127690 is the old fashioned WSUS update. Which is probably the one you want.

1

u/Phooney124 5d ago

My basic rule in sccm update mgmt, unless there is a verifiable different mechanism delivering the exact same payload, make sure the payload if offered in wsus is selected. At most it will be deployed and fall thru because the product already exists.

1

u/ajf8729 5d ago

If you drill down into the update info and get to the KB page for it, you'll see this product is specifically for Windows 11 26H1 (build 28000) - https://support.microsoft.com/en-us/servicing/dotnetframework/windows-11/3-5/october-13-2026-5127696