Am I missing something here? Microsoft indicates KB4467242 (November 2018 Security and Quality Rollups for .NET Framework) as a Security update but their link gives no Security information: https://support.microsoft.com/en-us/help/4467242/november-2018-security-and-quality-rollups-for-net-framework-3-5-to-4
It also shows as a Recommended Update....on a targeted system.
The developers then indicate there is NOT a Security update included in this patch: https://blogs.msdn.microsoft.com/dotnet/2018/11/13/net-framework-november-2018-security-and-quality-rollup/
Talk about some gray area for compliance/audit situation.
Note: Kaseya has it listed as an Update (Optional - Software)
November's .NET 'security and quality roll-up' has no *new* security fixes, hence it's not classified as a security update.
That's what I came up with upon reading the developer notes. Try explaining that to auditors when they read "Security" in the title :) as most auditors are not that technical. Next months roll-up should take care of this.