ASP.NET 5 supports servicing of runtime components (DNX) and packages through Microsoft Update, which will deliver updates to patch any vulnerabilities when they are discovered. This document provides an overview of how to setup your Windows Server correctly to receive updates.
At the time of loading an asset, DNX will check against an index file in the
Servicing directory to determine whether it should load a patched version instead of what it would normally load. The index file is updated by Microsoft Update during servicing to point to the location of the patched version of the asset on disk, which will reside in the
Servicing directory. The index file defaults to
%PROGRAMFILES%\Microsoft DNX\Servicing, but you can change this by setting the
DNX_SERVICING environment variable to a different path.