Hello from Germany, I was just wondering if installations of SilverLight 4 will also be upgraded to 5.1.20125.0 with MS13-022? The only reference I could find was in http://support.microsoft.com/kb/2814124 namely under: Known issues with this security update The detection and installation logic for this update does not verify compatibility of Microsoft Silverlight for the version of Internet Explorer that is installed on the system. For example, the update could be offered to a system that has Silverlight 4 for Windows XP running in Internet Explorer 6. After the update is successfully installed, Silverlight 4 will be upgraded to Silverlight 5 (version 5.1.20125.0). However, Silverlight 5 is incompatible with Internet Explorer 6. I deployed MS13-022 in march via WSUS and I would be delighted to move SilverLight 4 and older to 5 with this update. Does anybody have a concrete evidence maybe with a link to MSDN or TechNet? Thank you in advance for your help! Cheers Rene

Hi, The security update addresses the vulnerability by upgrading previous versions of Silverlight to Silverlight version 5.1.20125.0, which is the first version of Silverlight 5 that is not affected by the vulnerability. For more information about the vulnerability, see the Frequently Asked Questions (FAQ) subsection under the next section, Vulnerability Information. More information, please see: Microsoft Security Bulletin MS13-022 - Critical http://technet.microsoft.com/en-us/security/bulletin/ms13-022Tracy Cai TechNet Community Support

Hi Tracy, thank you for your response and yes I understood this. My question was will it upgrade versions 4 of SilverLight because as you stated: "by upgrading previous versions of Silverlight to Silverlight version 5.1.20125.0" What does previous versions mean? I am asking because before this patch there was no upgrade way from 4 to 5, see here: http://social.msdn.microsoft.com/Forums/en-US/silverlightinstall/thread/849a38be-9742-4fa8-a799-fcf3756c9671/ http://social.msdn.microsoft.com/Forums/en-US/silverlightinstall/thread/f921dd51-a6fb-4e6a-8882-8c08457817f0/ Hope you have an answer for me :-) CU Rene

Hi, As the statement says, this security update only addresses the vulnerability rather than upgrade. Tracy Cai TechNet Community Support

Hi Tracy, I would welcome an upgrade possibility and if I look at the installation numbers in WSUS it looks as if it upgrades version 4 to 5. MS13-022 explicitely states: Builds of Microsoft Silverlight previous to 5.1.20125.0 are affected. So all versions of Silverligth 4 are also affected! In clear words I want to get rid of SilverLight 4 pronto and woithout having to uninstall 4 prior to installing SilverLight 5 in one WSUS Deployment. Hope somebody can answer me this question. Thanks and cheers Rene

Hello everybody, after finding some time I answered this question myself. If you want to migrate from SilverLight 4.x to the most recent version just install MS13-022. This is the first SilverLight Update which can migrate from 4 to 5. I tried this on x86 and x64 Windows Enterprise editions in our company. As I have the MS13-022 in our WSUS deployment since march 2013 and after final testing of migrating from 4 to 5 I have close to 16000 clients running on Silverlight version 5.1.20125.0. I don't care if Silverlight version 5.1.20125.0 won't work with IE6 because we don't have IE6 in our company. Problem solved and one issue less in battling security problems :-) Have a great weekend @all Cheers Rene