Salini Agarwal, Author at .NET Blog https://devblogs.microsoft.com/dotnet/author/salagarw/ Free. Cross-platform. Open source. A developer platform for building all your apps. Wed, 27 Mar 2024 01:24:16 +0000 en-US hourly 1 https://devblogs.microsoft.com/dotnet/wp-content/uploads/sites/10/2024/10/Microsoft-favicon-48x48.jpg Salini Agarwal, Author at .NET Blog https://devblogs.microsoft.com/dotnet/author/salagarw/ 32 32 .NET Framework – March 2024 Cumulative Update Preview https://devblogs.microsoft.com/dotnet/dotnet-framework-march-2024-cumulative-update-preview/ https://devblogs.microsoft.com/dotnet/dotnet-framework-march-2024-cumulative-update-preview/#comments <![CDATA[Salini Agarwal]]> Wed, 27 Mar 2024 01:23:30 +0000 <![CDATA[.NET]]> <![CDATA[.NET Framework]]> <![CDATA[Maintenance & Updates]]> <![CDATA[.net framework]]> https://devblogs.microsoft.com/dotnet/?p=51181 <![CDATA[

March 2024 Cumulative Update Preview Updates for .NET Framework

The post .NET Framework – March 2024 Cumulative Update Preview appeared first on .NET Blog.

]]> <![CDATA[

Today, we are releasing the March 2024 Cumulative Update Preview Updates for .NET Framework.

Quality and Reliability

This release contains the following quality and reliability improvements.

.NET Runtime
  • Addresses an issue when thread pool recycled lists become unresponsive on multi-CPU-group computers.
  • Addresses an issue where Interlocked.Read from 32-bit apps are much slower on some computers.
.NET Libraries
  • Addresses a performance issue in ASP.NET applications after installing the January 2024 .NET Framework update.
.NET Compilers
  • Addresses an issue when using the native C# compiler (csc.exe) to compile code making calls to COM interop assemblies.

Getting the Update

The Cumulative Update Preview is available via Windows Update and Microsoft Update Catalog.

Customers using Windows 11, version 22H2 and Windows 11, version 23H2, you will now find .NET Framework updates on the Settings > Windows Update > Advanced options > Optional updates page.

Advanced system administrators can also take use of the below direct Microsoft Update Catalog download links to .NET Framework-specific updates. Before applying these updates, please ensure that you carefully review the .NET Framework version applicability, to ensure that you only install updates on systems where they apply.

The following table is for Windows 10+ versions.

Product Version Cumulative Update
Windows 11, version 23H2
.NET Framework 3.5, 4.8.1 Catalog 5036035
Windows 11, version 22H2
.NET Framework 3.5, 4.8.1 Catalog 5036581
Windows 10, version 22H2 5036580
.NET Framework 3.5, 4.8 Catalog 5036036
.NET Framework 3.5, 4.8.1 Catalog 5036034

The operating system row lists a KB which will be used for update offering purposes. When the operating system KB is offered, the applicability logic will determine the specific .NET Framework update(s) will be installed. Updates for individual .NET Framework versions will be installed based on the version of .NET Framework that is already present on the device. Because of this the operating system KB is not expected to be listed as installed updates on the device. The expected update to be installed are the .NET Framework specific version updates listed in the table above.

 

Previous Monthly Rollups

The last few .NET Framework Monthly updates are listed below for your convenience:

The post .NET Framework – March 2024 Cumulative Update Preview appeared first on .NET Blog.

]]> https://devblogs.microsoft.com/dotnet/dotnet-framework-march-2024-cumulative-update-preview/feed/ 1 .NET Framework February 2024 Security and Quality Rollup Updates https://devblogs.microsoft.com/dotnet/dotnet-framework-february-2024-security-and-quality-rollup-updates/ <![CDATA[Salini Agarwal]]> Wed, 14 Feb 2024 21:25:19 +0000 <![CDATA[.NET]]> <![CDATA[.NET Framework]]> <![CDATA[Maintenance & Updates]]> <![CDATA[.net framework]]> https://devblogs.microsoft.com/dotnet/?p=50510 <![CDATA[

February 2024 Security and Quality Rollup Updates for .NET Framework

The post .NET Framework February 2024 Security and Quality Rollup Updates appeared first on .NET Blog.

]]> <![CDATA[

Yesterday, we released the February 2024 Security and Quality Rollup Updates for .NET Framework.

Security

The February Security and Quality Rollup Update does not contain any new security fixes. See January 2024 Security and Quality Rollup for the latest security updates.

Quality and Reliability

This release contains the following quality and reliability improvements.

ASP.NET
  • Addresses an issue with “System.ArgumentException: Illegal characters in path” in some ASP.Net MVC requests.
.NET Libraries
  • Addresses an issue where version of the OSS zlib library is out of date.

Getting the Update

The Security and Quality Rollup is available via Windows Update, Windows Server Update Services, and Microsoft Update Catalog. The Security Only Update is available via Windows Server Update Services and Microsoft Update Catalog.

Microsoft Update Catalog

You can get the update via the Microsoft Update Catalog. For Windows 10, NET Framework 4.8 updates are available via Windows Update, Windows Server Update Services, Microsoft Update Catalog. Updates for other versions of .NET Framework are part of the Windows 10 Monthly Cumulative Update.

Note: Customers that rely on Windows Update and Windows Server Update Services will automatically receive the .NET Framework version-specific updates. Advanced system administrators can also take use of the below direct Microsoft Update Catalog download links to .NET Framework-specific updates. Before applying these updates, please ensure that you carefully review the .NET Framework version applicability, to ensure that you only install updates on systems where they apply.

The following table is for Windows 10 and Windows Server 2016+ versions.

Product Version Cumulative Update
Microsoft server operating system, version 23H2
.NET Framework 3.5, 4.8.1 Catalog 5034626
Windows 11, version 22H2 and Windows 11, version 23H2
.NET Framework 3.5, 4.8.1 Catalog 5034467
Windows 11, version 21H2 5034686
.NET Framework 3.5, 4.8 Catalog 5034625
.NET Framework 3.5, 4.8.1 Catalog 5034612
Microsoft server operating system, version 22H2 5034923
.NET Framework 3.5, 4.8 Catalog 5034613
.NET Framework 3.5, 4.8.1 Catalog 5034611
Microsoft server operating system version 21H2 5034682
.NET Framework 3.5, 4.8 Catalog 5034613
.NET Framework 3.5, 4.8.1 Catalog 5034611
Windows 10, version 22H2 5034685
.NET Framework 3.5, 4.8 Catalog 5034468
.NET Framework 3.5, 4.8.1 Catalog 5034466
Windows 10, version 21H2 5034684
.NET Framework 3.5, 4.8 Catalog 5034468
.NET Framework 3.5, 4.8.1 Catalog 5034466
Windows 10 1809 (October 2018 Update) and Windows Server 2019 5034683
.NET Framework 3.5, 4.7.2 Catalog 5034619
.NET Framework 3.5, 4.8 Catalog 5034624
Windows 10 1607 (Anniversary Update) and Windows Server 2016
.NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2 Catalog 5034767
.NET Framework 4.8 Catalog 5034614

The following table is for earlier Windows and Windows Server versions.

Product Version Security and Quality Rollup
Windows Server 2008 5034690
.NET Framework 2.0, 3.0 Catalog 5033898
.NET Framework 3.5 Catalog 5034008
.NET Framework 4.6.2 Catalog 5034620
Windows Server 2008 R2 5034687
.NET Framework 3.5.1 Catalog 5033899
.NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 Catalog 5034620
.NET Framework 4.8 Catalog 5034615
Windows Server 2012 R2 5034689
.NET Framework 3.5 Catalog 5033900
.NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 Catalog 5034622
.NET Framework 4.8 Catalog 5034617
Windows Server 2012 5034688
.NET Framework 3.5 Catalog 5033897
.NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 Catalog 5034621
.NET Framework 4.8 Catalog 5034616

The operating system row lists a KB which will be used for update offering purposes. When the operating system KB is offered, the applicability logic will determine the specific .NET Framework update(s) will be installed. Updates for individual .NET Framework versions will be installed based on the version of .NET Framework that is already present on the device. Because of this the operating system KB is not expected to be listed as installed updates on the device. The expected update to be installed are the .NET Framework specific version updates listed in the table above.

 

Previous Monthly Rollups

The last few .NET Framework Monthly updates are listed below for your convenience:

The post .NET Framework February 2024 Security and Quality Rollup Updates appeared first on .NET Blog.

]]> .NET Framework January 2024 Cumulative Update Preview https://devblogs.microsoft.com/dotnet/dotnet-framework-january-2024-cumulative-update-preview/ https://devblogs.microsoft.com/dotnet/dotnet-framework-january-2024-cumulative-update-preview/#comments <![CDATA[Salini Agarwal]]> Tue, 23 Jan 2024 22:41:45 +0000 <![CDATA[.NET]]> <![CDATA[.NET Framework]]> <![CDATA[ASP.NET]]> <![CDATA[Maintenance & Updates]]> <![CDATA[.net framework]]> https://devblogs.microsoft.com/dotnet/?p=50185 <![CDATA[

January 2024 Cumulative Update Preview Updates for .NET Framework.

The post .NET Framework January 2024 Cumulative Update Preview appeared first on .NET Blog.

]]> <![CDATA[

Today, we are releasing the January 2024 Cumulative Update Preview Updates for .NET Framework.

Quality and Reliability

This release contains the following quality and reliability improvements.

ASP.NET
  • Addresses an issue with “System.ArgumentException: Illegal characters in path” in some ASP.Net MVC requests.
.NET Libraries
  • Addresses an issue where version of the OSS zlib library is out of date.

Getting the Update

The Cumulative Update Preview is available via Windows Update and Microsoft Update Catalog.

Customers using Windows 11, version 22H2 and Windows 11, version 23H2, you will now find .NET Framework updates on the Settings > Windows Update > Advanced options > Optional updates page.

Advanced system administrators can also take use of the below direct Microsoft Update Catalog download links to .NET Framework-specific updates. Before applying these updates, please ensure that you carefully review the .NET Framework version applicability, to ensure that you only install updates on systems where they apply.

The following table is for Windows 10+ versions.

Product Version Cumulative Update
Windows 11, version 23H2
.NET Framework 3.5, 4.8.1 Catalog 5034467
Windows 11, version 22H2
.NET Framework 3.5, 4.8.1 Catalog 5034467
Windows 10, version 22H2 5034582
.NET Framework 3.5, 4.8 Catalog 5034468
.NET Framework 3.5, 4.8.1 Catalog 5034466

The operating system row lists a KB which will be used for update offering purposes. When the operating system KB is offered, the applicability logic will determine the specific .NET Framework update(s) will be installed. Updates for individual .NET Framework versions will be installed based on the version of .NET Framework that is already present on the device. Because of this the operating system KB is not expected to be listed as installed updates on the device. The expected update to be installed are the .NET Framework specific version updates listed in the table above.

Previous Monthly Rollups

The last few .NET Framework Monthly updates are listed below for your convenience:

The post .NET Framework January 2024 Cumulative Update Preview appeared first on .NET Blog.

]]> https://devblogs.microsoft.com/dotnet/dotnet-framework-january-2024-cumulative-update-preview/feed/ 2 .NET Framework January 2024 Security and Quality Rollup https://devblogs.microsoft.com/dotnet/dotnet-framework-january-2024-security-and-quality-rollup/ https://devblogs.microsoft.com/dotnet/dotnet-framework-january-2024-security-and-quality-rollup/#comments <![CDATA[Salini Agarwal]]> Tue, 09 Jan 2024 22:14:26 +0000 <![CDATA[.NET]]> <![CDATA[.NET Framework]]> <![CDATA[Maintenance & Updates]]> <![CDATA[.net framework]]> https://devblogs.microsoft.com/dotnet/?p=49928 <![CDATA[

January 2024 Security and Quality Rollup Updates for .NET Framework

The post .NET Framework January 2024 Security and Quality Rollup appeared first on .NET Blog.

]]> <![CDATA[

[Revised 01/24/2024] To add missing product versions of Windows Server 2012 and Windows Server 2012 R2.

[Revised 01/16/2024] To fix the typo and link for CVE.

Today, we are releasing the January 2024 Security and Quality Rollup Updates for .NET Framework.

Security

CVE-2023-36042 – .NET Framework Denial of Service Vulnerability

This security update addresses a security feature bypass vulnerability detailed in CVE 2023-36042.

CVE-2024-0056 – .NET Framework Security Feature Bypass Vulnerability

This security update addresses a security feature bypass vulnerability detailed in CVE 2024-0056.

CVE-2024-0057 – .NET Framework Security Feature Vulnerability

This security update addresses an elevation of privilege vulnerability detailed in CVE 2024-0057.

CVE-2024-21312 – .NET Framework Denial of Service Vulnerability

This security update addresses a denial of service vulnerability detailed in CVE 2024-21312.

.NET Framework Remote Code Execution Vulnerability

This security update addresses a remote code execution vulnerability to HTTP .NET remoting server channel chain.

Quality and Reliability

There are no new Quality and Reliability Improvements in this update.

Getting the Update

The Security and Quality Rollup is available via Windows Update, Windows Server Update Services, and Microsoft Update Catalog. The Security Only Update is available via Windows Server Update Services and Microsoft Update Catalog.

Microsoft Update Catalog

You can get the update via the Microsoft Update Catalog. For Windows 10, NET Framework 4.8 updates are available via Windows Update, Windows Server Update Services, Microsoft Update Catalog. Updates for other versions of .NET Framework are part of the Windows 10 Monthly Cumulative Update.

**Note**: Customers that rely on Windows Update and Windows Server Update Services will automatically receive the .NET Framework version-specific updates. Advanced system administrators can also take use of the below direct Microsoft Update Catalog download links to .NET Framework-specific updates. Before applying these updates, please ensure that you carefully review the .NET Framework version applicability, to ensure that you only install updates on systems where they apply.

The following table is for Windows 10 and Windows Server 2016+ versions.

Product Version Cumulative Update
Microsoft server operating system, version 23H2
.NET Framework 3.5, 4.8.1 Catalog 5033917
Windows 11, version 22H2 and Windows 11, version 23H2
.NET Framework 3.5, 4.8.1 Catalog 5033920
Windows 11, version 21H2 5034276
.NET Framework 3.5, 4.8 Catalog 5033912
.NET Framework 3.5, 4.8.1 Catalog 5033919
Microsoft server operating system, version 22H2 5034272
.NET Framework 3.5, 4.8 Catalog 5033914
.NET Framework 3.5, 4.8.1 Catalog 5033922
Microsoft server operating system version 21H2 5034272
.NET Framework 3.5, 4.8 Catalog 5033914
.NET Framework 3.5, 4.8.1 Catalog 5033922
Windows 10, version 22H2 5034275
.NET Framework 3.5, 4.8 Catalog 5033909
.NET Framework 3.5, 4.8.1 Catalog 5033918
Windows 10, version 21H2 5034274
.NET Framework 3.5, 4.8 Catalog 5033909
.NET Framework 3.5, 4.8.1 Catalog 5033918
Windows 10 1809 and Windows Server 2019 5034273
.NET Framework 3.5, 4.7.2 Catalog 5033904
.NET Framework 3.5, 4.8 Catalog 5033911
Windows 10 1607 and Windows Server 2016
.NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2 Catalog 5034119
.NET Framework 4.8 Catalog 5033910
Windows 10 1507
.NET Framework 3.5, 4.6, 4.6.2 Catalog 5034134

The following table is for earlier Windows and Windows Server versions.

Product Version Security and Quality Rollup Security Only Update
Windows Server 2012 R2 5034279
.NET Framework 3.5 Catalog 5033900
.NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 Catalog 5033906
.NET Framework 4.8 Catalog 5033915
Windows Server 2012 5034278
.NET Framework 3.5 Catalog 5033897
.NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 Catalog 5033905
.NET Framework 4.8 Catalog 5033913
Windows Server 2008 5034280 5034270
.NET Framework 2.0, 3.0 Catalog 5033898 Catalog 5033945
.NET Framework 3.5 Catalog 5034008 Catalog 5033952
.NET Framework 4.6.2 Catalog 5033907 Catalog 5033947
Windows Server 2008 R2 5034277 5034269
.NET Framework 3.5.1 Catalog 5033899 Catalog 5033946
.NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 Catalog 5033907 Catalog 5033947
.NET Framework 4.8 Catalog 5033916 Catalog 5033948

The operating system row lists a KB which will be used for update offering purposes. When the operating system KB is offered, the applicability logic will determine the specific .NET Framework update(s) will be installed. Updates for individual .NET Framework versions will be installed based on the version of .NET Framework that is already present on the device. Because of this the operating system KB is not expected to be listed as installed updates on the device. The expected update to be installed are the .NET Framework specific version updates listed in the table above.

 

Previous Monthly Rollups

The last few .NET Framework Monthly updates are listed below for your convenience:

The post .NET Framework January 2024 Security and Quality Rollup appeared first on .NET Blog.

]]> https://devblogs.microsoft.com/dotnet/dotnet-framework-january-2024-security-and-quality-rollup/feed/ 7 .NET Framework October 2023 Security and Quality Rollup Updates https://devblogs.microsoft.com/dotnet/dotnet-framework-october-2023-security-and-quality-rollup-updates/ https://devblogs.microsoft.com/dotnet/dotnet-framework-october-2023-security-and-quality-rollup-updates/#comments <![CDATA[Salini Agarwal]]> Fri, 13 Oct 2023 17:05:00 +0000 <![CDATA[.NET]]> <![CDATA[.NET Framework]]> <![CDATA[Maintenance & Updates]]> <![CDATA[.net framework]]> https://devblogs.microsoft.com/dotnet/?p=48361 <![CDATA[

A recap of the latest Security and Quality Rollup for .NET Framework for October 2023.

The post .NET Framework October 2023 Security and Quality Rollup Updates appeared first on .NET Blog.

]]> <![CDATA[

This week we released the October 2023 Security and Quality Rollup Updates for .NET Framework.

Security

The October Security and Quality Rollup Update does not contain any new security fixes. See September 2023 Security and Quality Rollup for the latest security updates.

Quality and Reliability

This release contains the following quality and reliability improvements.

ASP.NET
  • Addresses an issue with “System.ArgumentException: Illegal characters in path” in some ASP.Net MVC requests.
SqlClient
  • Addresses an issue with SQL event source telemetry.

Getting the Update

The Security and Quality Rollup is available via Windows Update, Windows Server Update Services, and Microsoft Update Catalog.

**Note**: Customers that rely on Windows Update and Windows Server Update Services will automatically receive the .NET Framework version-specific updates. Advanced system administrators can also take use of the below direct Microsoft Update Catalog download links to .NET Framework-specific updates. Before applying these updates, please ensure that you carefully review the .NET Framework version applicability, to ensure that you only install updates on systems where they apply.

The following table is for Windows 10, version 1507 and Windows Server 2016 versions and newer operating systems.

Product Version Cumulative Update
Windows 11, version 22H2 5031323
.NET Framework 3.5, 4.8.1 Catalog 5030651
Windows 11, version 21H2 5031225
.NET Framework 3.5, 4.8 Catalog 5030842
.NET Framework 3.5, 4.8.1 Catalog 5030650
Microsoft server operating system, version 22H2 5031605
.NET Framework 3.5, 4.8 Catalog 5030999
.NET Framework 3.5, 4.8.1 Catalog 5030998
Microsoft server operating system version 21H2 5031221
.NET Framework 3.5, 4.8 Catalog 5030999
.NET Framework 3.5, 4.8.1 Catalog 5030998
Windows 10, version 22H2 5031224
.NET Framework 3.5, 4.8 Catalog 5030841
.NET Framework 3.5, 4.8.1 Catalog 5030649
Windows 10, version 21H2 5031223
.NET Framework 3.5, 4.8 Catalog 5030841
.NET Framework 3.5, 4.8.1 Catalog 5030649
Windows 10 1809 (October 2018 Update) and Windows Server 2019 5031222
.NET Framework 3.5, 4.7.2 Catalog 5031005
.NET Framework 3.5, 4.8 Catalog 5031010
Windows 10 1607 (Anniversary Update) and Windows Server 2016
.NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2 Catalog 5031362
.NET Framework 4.8 Catalog 5031000

The following table is for earlier Windows and Windows Server versions.

Product Version Security and Quality Rollup
Windows Server 2012 5031227
.NET Framework 3.5 Catalog 5030160
.NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 Catalog 5031007
.NET Framework 4.8 Catalog 5031002
Windows Server 2012 R2 5031228
.NET Framework 3.5 Catalog 5029915
.NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 Catalog 5031008
.NET Framework 4.8 Catalog 5031003
Windows Embedded 7 and Windows Server 2008 R2 SP1 5031226
.NET Framework 3.5.1 Catalog 5029938
.NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 Catalog 5031006
.NET Framework 4.8 Catalog 5031001
Windows Server 2008 5031229
.NET Framework 2.0, 3.0 Catalog 5029937
.NET Framework 4.6.2 Catalog 5031006

 

Previous Monthly Rollups

The last few .NET Framework Monthly updates are listed below for your convenience:

The post .NET Framework October 2023 Security and Quality Rollup Updates appeared first on .NET Blog.

]]> https://devblogs.microsoft.com/dotnet/dotnet-framework-october-2023-security-and-quality-rollup-updates/feed/ 2 .NET Framework September 2023 Cumulative Update Preview https://devblogs.microsoft.com/dotnet/dotnet-framework-september-2023-cumulative-update-preview/ https://devblogs.microsoft.com/dotnet/dotnet-framework-september-2023-cumulative-update-preview/#comments <![CDATA[Salini Agarwal]]> Wed, 27 Sep 2023 16:51:19 +0000 <![CDATA[.NET]]> <![CDATA[.NET Framework]]> <![CDATA[Maintenance & Updates]]> <![CDATA[.net framework]]> https://devblogs.microsoft.com/dotnet/?p=47983 <![CDATA[

September 2023 Cumulative Update Preview for .NET Framework.

The post .NET Framework September 2023 Cumulative Update Preview appeared first on .NET Blog.

]]> <![CDATA[

Today, we are releasing the September 2023 Cumulative Update Preview for .NET Framework.

Quality and Reliability

This release contains the following quality and reliability improvements.

ASP.NET
  • Addresses an issue with “System.ArgumentException: Illegal characters in path” in some ASP.Net MVC requests.
SqlClient
  • Addresses an issue with SQL event source telemetry.

Getting the Update

The Cumulative Update Preview is available via Windows Update and Microsoft Update Catalog.

Customers using Windows 11, version 22H2, you will now find .NET Framework updates on the Settings > Windows Update > Advanced options > Optional updates page.

Advanced system administrators can also take use of the below direct Microsoft Update Catalog download links to .NET Framework-specific updates. Before applying these updates, please ensure that you carefully review the .NET Framework version applicability, to ensure that you only install updates on systems where they apply.

The following table is for Windows 10+ versions.

Product Version Cumulative Update
Windows 11, version 22H2
.NET Framework 3.5, 4.8.1 Catalog 5030651
Windows 11, version 21H2 5031042
.NET Framework 3.5, 4.8 Catalog 5030842
.NET Framework 3.5, 4.8.1 Catalog 5030650
Windows 10, version 22H2 5031041
.NET Framework 3.5, 4.8 Catalog 5030841
.NET Framework 3.5, 4.8.1 Catalog 5030649

 

Previous Monthly Rollups

The last few .NET Framework Monthly updates are listed below for your convenience:

The post .NET Framework September 2023 Cumulative Update Preview appeared first on .NET Blog.

]]> https://devblogs.microsoft.com/dotnet/dotnet-framework-september-2023-cumulative-update-preview/feed/ 2 .NET Framework September 2023 Security and Quality Rollup Updates https://devblogs.microsoft.com/dotnet/dotnet-framework-september-2023-security-and-quality-rollup-updates/ <![CDATA[Salini Agarwal]]> Tue, 12 Sep 2023 20:28:49 +0000 <![CDATA[.NET]]> <![CDATA[.NET Framework]]> <![CDATA[Maintenance & Updates]]> <![CDATA[WPF]]> <![CDATA[.net framework]]> https://devblogs.microsoft.com/dotnet/?p=47537 <![CDATA[

September 2023 Security and Quality Rollup Updates for .NET Framework.

The post .NET Framework September 2023 Security and Quality Rollup Updates appeared first on .NET Blog.

]]> <![CDATA[

Today, we are releasing the September 2023 Security and Quality Rollup Updates for .NET Framework.

Security

CVE-2023-36796 – .NET Framework Remote Code Execution Vulnerability

This security update addresses a vulnerability in DiaSymReader.dll when reading a corrupted PDB file which can lead to Remote Code Execution.

CVE-2023-36792 – .NET Framework Remote Code Execution Vulnerability

This security update addresses a vulnerability in DiaSymReader.dll when reading a corrupted PDB file which can lead to Remote Code Execution.

CVE-2023-36793 – .NET Framework Remote Code Execution Vulnerability

This security update addresses a vulnerability in DiaSymReader.dll when reading a corrupted PDB file which can lead to Remote Code Execution.

CVE-2023-36794 – .NET Framework Remote Code Execution Vulnerability

This security update addresses a vulnerability in DiaSymReader.dll when reading a corrupted PDB file which can lead to Remote Code Execution.

CVE-2023-36788 – .NET Framework Remote Code Execution Vulnerability

This security update addresses a vulnerability in the WPF XAML parser where an unsandboxed parser can lead to remote code execution.

Quality and Reliability

This release contains the following quality and reliability improvements.

Windows Presentation Foundation (WPF)
  • Addresses an issue where the layout of collapsed panels are affected by CollectionChanged event.
Runtime
  • Addresses an issue where unpredictable crashes which could occur in multi-appdomain scenarios running on arm64.
  • Addresses an issue where AnchorInfo was miscalculated hen controls scaled on higher DPI settings and thus location may be calculated incorrect.
ASP.NET
  • Addresses an issue in the AspNetEnforceViewStateMac regkey logic.

Getting the Update

The Security and Quality Rollup is available via Windows Update, Windows Server Update Services, and Microsoft Update Catalog.

Note: Customers that rely on Windows Update and Windows Server Update Services will automatically receive the .NET Framework version-specific updates. Advanced system administrators can also take use of the below direct Microsoft Update Catalog download links to .NET Framework-specific updates. Before applying these updates, please ensure that you carefully review the .NET Framework version applicability, to ensure that you only install updates on systems where they apply.

The following table is for Windows 10, version 1507 and Windows Server 2016 versions and newer operating systems.

The following table is for Windows 10 and Windows Server 2016+ versions.

Product Version Cumulative Update
Windows 11, version 22H2 5031217
.NET Framework 3.5, 4.8.1 Catalog 5029921
Windows 11, version 21H2 5030181
.NET Framework 3.5, 4.8 Catalog 5029926
.NET Framework 3.5, 4.8.1 Catalog 5029920
Microsoft server operating system, version 22H2 5030177
.NET Framework 3.5, 4.8 Catalog 5029928
Microsoft server operating system version 21H2 5030186
.NET Framework 3.5, 4.8 Catalog 5029928
.NET Framework 3.5, 4.8.1 Catalog 5029922
Windows 10, version 22H2 5030180
.NET Framework 3.5, 4.8 Catalog 5029923
.NET Framework 3.5, 4.8.1 Catalog 5029919
Windows 10, version 21H2 5030179
.NET Framework 3.5, 4.8 Catalog 5029923
.NET Framework 3.5, 4.8.1 Catalog 5029919
Windows 10 1809 (October 2018 Update) and Windows Server 2019 5030178
.NET Framework 3.5, 4.7.2 Catalog 5029931
.NET Framework 3.5, 4.8 Catalog 5029925
Windows 10 1607 (Anniversary Update) and Windows Server 2016
.NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2 Catalog 5030213
.NET Framework 4.8 Catalog 5029924
Windows 10 1507
.NET Framework 3.5, 4.6, 4.6.2 Catalog 5030220

The following table is for earlier Windows and Windows Server versions.

Product Version Security and Quality Rollup Security Only Update
Windows Server 2012 R2 5030184 5030175
.NET Framework 3.5 Catalog 5029915 Catalog 5029940
.NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 Catalog 5029916 Catalog 5029941
.NET Framework 4.8 Catalog 5029917 Catalog 5029942
Windows Server 2012 5030183 5030174
.NET Framework 3.5 Catalog 5030160 Catalog 5030030
.NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 Catalog 5029932 Catalog 5029945
.NET Framework 4.8 Catalog 5029927 Catalog 5029943
Windows Embedded 7 and Windows Server 2008 R2 SP1 5030182 5030173
.NET Framework 3.5.1 Catalog 5029938 Catalog 5029948
.NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 Catalog 5029933 Catalog 5029946
.NET Framework 4.8 Catalog 5029929 Catalog 5029944
Windows Server 2008 5030185 5030176
.NET Framework 2.0, 3.0 Catalog 5029937 Catalog 5029947
.NET Framework 4.6.2 Catalog 5029933 Catalog 5029946

 

Previous Monthly Rollups

The last few .NET Framework Monthly updates are listed below for your convenience:

The post .NET Framework September 2023 Security and Quality Rollup Updates appeared first on .NET Blog.

]]> .NET Framework August 2023 Cumulative Update Preview https://devblogs.microsoft.com/dotnet/dotnet-framework-august-2023-cumulative-update-preview/ https://devblogs.microsoft.com/dotnet/dotnet-framework-august-2023-cumulative-update-preview/#comments <![CDATA[Salini Agarwal]]> Wed, 23 Aug 2023 17:44:00 +0000 <![CDATA[.NET]]> <![CDATA[.NET Framework]]> <![CDATA[Maintenance & Updates]]> <![CDATA[.net framework]]> https://devblogs.microsoft.com/dotnet/?p=46970 <![CDATA[

August 2023 Cumulative Update Preview Updates for .NET Framework

The post .NET Framework August 2023 Cumulative Update Preview appeared first on .NET Blog.

]]> <![CDATA[

Today, we are releasing the August 2023 Cumulative Update Preview Updates for .NET Framework.

Quality and Reliability

This release contains the following quality and reliability improvements.

WPF1
  • Addresses an issue where the layout of collapsed panels are affected by CollectionChanged event.
Runtime
  • Addresses an issue where unpredictable crashes which could occur in multi-appdomain scenarios running on arm64.
  • Addresses an issue where AnchorInfo was miscalculated hen controls scaled on higher DPI settings and thus location may be calculated incorrect.
ASP.NET
  • Addresses an issue in the AspNetEnforceViewStateMac regkey logic.

1 Windows Presentation Foundation (WPF)

Getting the Update

The Cumulative Update Preview is available via Windows Update and Microsoft Update Catalog.

Customers using Windows 11, version 22H2, you will now find .NET Framework updates on the Settings > Windows Update > Advanced options > Optional updates page.

Advanced system administrators can also take use of the below direct Microsoft Update Catalog download links to .NET Framework-specific updates. Before applying these updates, please ensure that you carefully review the .NET Framework version applicability, to ensure that you only install updates on systems where they apply.

The following table is for Windows 10+ versions.

Product Version Cumulative Update
Windows 11, version 22H2
.NET Framework 3.5, 4.8.1 Catalog 5029718
Windows 11, version 21H2 5029848
.NET Framework 3.5, 4.8 Catalog 5029715
.NET Framework 3.5, 4.8.1 Catalog 5029717
Windows 10, version 22H2 5029847
.NET Framework 3.5, 4.8 Catalog 5029714
.NET Framework 3.5, 4.8.1 Catalog 5029716

 

Previous Monthly Rollups

The last few .NET Framework Monthly updates are listed below for your convenience:

The post .NET Framework August 2023 Cumulative Update Preview appeared first on .NET Blog.

]]> https://devblogs.microsoft.com/dotnet/dotnet-framework-august-2023-cumulative-update-preview/feed/ 1 .NET Framework August 2023 Security and Quality Rollup Updates https://devblogs.microsoft.com/dotnet/dotnet-framework-august-2023-security-and-quality-rollup-updates/ https://devblogs.microsoft.com/dotnet/dotnet-framework-august-2023-security-and-quality-rollup-updates/#comments <![CDATA[Salini Agarwal]]> Tue, 08 Aug 2023 18:34:15 +0000 <![CDATA[.NET]]> <![CDATA[.NET Framework]]> <![CDATA[Maintenance & Updates]]> <![CDATA[WPF]]> <![CDATA[.net framework]]> https://devblogs.microsoft.com/dotnet/?p=46838 <![CDATA[

August 2023 Security and Quality Rollup Updates for .NET Framework

The post .NET Framework August 2023 Security and Quality Rollup Updates appeared first on .NET Blog.

]]> <![CDATA[

[08/14/2023] revised to update known issues.

[08/13/2023] revised to add known issues.

Today, we are releasing the August 2023 Security and Quality Rollup Updates for .NET Framework.

Security

CVE-2023-36899– .NET Framework Remote Code Execution Vulnerability

This security update addresses a vulnerability in applications on IIS using their parent application’s Application Pool which can lead to privilege escalation or other security bypasses.

CVE-2023-36873– .NET Framework Spoofing Vulnerability

This security update addresses a vulnerability where unauthenticated remote attacker can sign ClickOnce deployments without a valid code signing certificate.

Quality and Reliability

This release contains the following quality and reliability improvements.

WPF1
  • Addresses an issue where XPS documents using LinkTarget aren’t rendering properly.
Networking
  • Addresses an issue where using proxy with continuous load may lead to memory leak resulting in high memory usage, or potentially OutOfMemoryException.

1 Windows Presentation Foundation (WPF)

Known issue:

Product Version Symptom Resolution
Windows 11, version 22H2 After installing windows KB5028244, applications which were deployed using ClickOnce might begin to prompt for installation even when the ClickOnce apps are already installed and marked as “trusted”. To mitigate the issue, apply the resolution from Windows 10, version 22H2 resolved issues.
Windows 11, version 21H2 After installing windows KB5029244, applications which were deployed using ClickOnce might begin to prompt for installation even when the ClickOnce apps are already installed and marked as “trusted”. To mitigate the issue, apply the resolution from Windows 10, version 21H2 resolved issues.

Getting the Update

The Security and Quality Rollup is available via Windows Update, Windows Server Update Services, and Microsoft Update Catalog.

Note: Customers that rely on Windows Update and Windows Server Update Services will automatically receive the .NET Framework version-specific updates. Advanced system administrators can also take use of the below direct Microsoft Update Catalog download links to .NET Framework-specific updates. Before applying these updates, please ensure that you carefully review the .NET Framework version applicability, to ensure that you only install updates on systems where they apply.

The following table is for Windows 10, version 1507 and Windows Server 2016 versions and newer operating systems.

Product Version Cumulative Update
Windows 11, version 22H2
.NET Framework 3.5, 4.8.1 Catalog 5028948
Windows 11, version 21H2 5029650
.NET Framework 3.5, 4.8 Catalog 5028954
.NET Framework 3.5, 4.8.1 Catalog 5028947
Microsoft server operating system, version 22H2 5029646
.NET Framework 3.5, 4.8 Catalog 5028956
Microsoft server operating system version 21H2 5029655
.NET Framework 3.5, 4.8 Catalog 5028956
.NET Framework 3.5, 4.8.1 Catalog 5028950
Windows 10, version 22H2 5029649
.NET Framework 3.5, 4.8 Catalog 5028951
.NET Framework 3.5, 4.8.1 Catalog 5028946
Windows 10, version 21H2 5029648
.NET Framework 3.5, 4.8 Catalog 5028951
.NET Framework 3.5, 4.8.1 Catalog 5028946
Windows 10 1809 (October 2018 Update) and Windows Server 2019 5029647
.NET Framework 3.5, 4.7.2 Catalog 5028960
.NET Framework 3.5, 4.8 Catalog 5028953
Windows 10 1607 (Anniversary Update) and Windows Server 2016
.NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2 Catalog 5029242
.NET Framework 4.8 Catalog 5028952
Windows 10 1507
.NET Framework 3.5, 4.6, 4.6.2 Catalog 5029259

The following table is for earlier Windows and Windows Server versions.

Product Version Security and Quality Rollup Security Only Update
Windows Server 2012 R2 5029653 5029568
.NET Framework 3.5 Catalog 5028970 Catalog 5028982
.NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 Catalog 5028962 Catalog 5028977
.NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 Catalog 5029312 Catalog 5028977
.NET Framework 4.8 Catalog 5028957 Catalog 5028974
Windows Server 2012 5029652 5029567
.NET Framework 3.5 Catalog 5028967 Catalog 5028979
.NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 Catalog 5028961 Catalog 5028976
.NET Framework 4.8 Catalog 5028955 Catalog 5028973
Windows Embedded 7 and Windows Server 2008 R2 SP1 5029651 5029566
.NET Framework 3.5.1 Catalog 5028969 Catalog 5028981
.NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 Catalog 5028963 Catalog 5028978
.NET Framework 4.8 Catalog 5028958 Catalog 5028975
Windows Server 2008 5029654 5029569
.NET Framework 2.0, 3.0 Catalog 5028968 Catalog 5028980
.NET Framework 4.6.2 Catalog 5028963 Catalog 5028978

 

Previous Monthly Rollups

The last few .NET Framework Monthly updates are listed below for your convenience:

The post .NET Framework August 2023 Security and Quality Rollup Updates appeared first on .NET Blog.

]]> https://devblogs.microsoft.com/dotnet/dotnet-framework-august-2023-security-and-quality-rollup-updates/feed/ 6 .NET Framework July 2023 Cumulative Update Preview https://devblogs.microsoft.com/dotnet/dotnet-framework-july-2023-cumulative-update-preview/ <![CDATA[Salini Agarwal]]> Tue, 25 Jul 2023 18:05:00 +0000 <![CDATA[.NET]]> <![CDATA[.NET Framework]]> <![CDATA[Maintenance & Updates]]> <![CDATA[.net framework]]> https://devblogs.microsoft.com/dotnet/?p=46656 <![CDATA[

July 2023 Cumulative Update Preview Updates for .NET Framework

The post .NET Framework July 2023 Cumulative Update Preview appeared first on .NET Blog.

]]> <![CDATA[

[07/26/2023] revised to add windows 11 version 22H2

Today, we are releasing the July 2023 Cumulative Update Preview for .NET Framework.

Quality and Reliability

This release contains the following quality and reliability improvements.

WPF1
  • Addresses an issue where XPS documents using LinkTarget aren’t rendering properly.
Networking
  • Addresses an issue where using proxy with continuous load may lead to memory leak resulting in high memory usage, or potentially OutOfMemoryException.

1 Windows Presentation Foundation (WPF)

Getting the Update

The Cumulative Update Preview is available via Windows Update and Microsoft Update Catalog.

Customers using Windows 11, version 22H2, you will now find .NET Framework updates on the Settings > Windows Update > Advanced options > Optional updates page.

Advanced system administrators can also take use of the below direct Microsoft Update Catalog download links to .NET Framework-specific updates. Before applying these updates, please ensure that you carefully review the .NET Framework version applicability, to ensure that you only install updates on systems where they apply.

The following table is for Windows 10+ versions.

Product Version Cumulative Update
Windows 11, version 22H2
.NET Framework 3.5, 4.8.1 Catalog 5028017
Windows 11, version 21H2 5028415
.NET Framework 3.5, 4.8 Catalog 5028014
.NET Framework 3.5, 4.8.1 Catalog 5028016
Windows 10, version 22H2 5028412
.NET Framework 3.5, 4.8 Catalog 5028013
.NET Framework 3.5, 4.8.1 Catalog 5028015

 

Previous Monthly Rollups

The last few .NET Framework Monthly updates are listed below for your convenience:

The post .NET Framework July 2023 Cumulative Update Preview appeared first on .NET Blog.

]]>