.NET Framework July 2022 Security and Quality Rollup Updates

Salini Agarwal

We are releasing the July 2022 Security and Quality Rollup Updates for .NET Framework.

Security

This security update addresses an issue where the .NET Framework releases June 14, 2022-Security and Quality Rollup for .NET Framework 3.5 for Windows 8.1, RT 8.1, and Windows Server 2012 R2 (KB5013638) and Security and Quality Rollup for .NET Framework 3.5 for Windows 8.1, RT 8.1, and Windows Server 2012 R2 (KB5012139) were not cumulative and did not contain some previously released security updates.  This security update includes all previous released security updates.  There are no new security improvements being released in this update.

Getting the Update

The Security and Quality Rollup is available via Windows Update, Windows Server Update Services, and Microsoft Update Catalog.

Microsoft Update Catalog

You can get the update via the Microsoft Update Catalog. For Windows 10, NET Framework 4.8 updates are available via Windows Update, Windows Server Update Services, Microsoft Update Catalog. Updates for other versions of .NET Framework are part of the Windows 10 Monthly Cumulative Update.

Note: Customers that rely on Windows Update and Windows Server Update Services will automatically receive the .NET Framework version-specific updates. Advanced system administrators can also take use of the below direct Microsoft Update Catalog download links to .NET Framework-specific updates. Before applying these updates, please ensure that you carefully review the .NET Framework version applicability, to ensure that you only install updates on systems where they apply.

The following table is for earlier Windows and Windows Server versions.

Product Version Security and Quality Rollup
Windows 8.1, Windows RT 8.1 and Windows Server 2012 R2 5016568
.NET Framework 3.5 Catalog 5016268
.NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 Catalog 5014637
.NET Framework 4.8 Catalog 5014633

 

Previous Monthly Rollups

The last few .NET Framework Monthly updates are listed below for your convenience:

4 comments

Discussion is closed. Login to edit/delete existing comments.

  • Martin Horvath 0

    Hi,

    Why is only KB5016268 classified as a security update, while KB5014633 and kB5014637 isn’t?
    Also, you forgot to add them to the MSRC guide: https://msrc.microsoft.com/update-guide/releaseNote/2022-Jul
    They should be part of the July release as they are security-related.

    • Salini AgarwalMicrosoft employee 0

      Hi Martin,

      In May and June Security and Quality Rollup Updates for .NET Framework 3.5 were not cumulative and did not contain some previously released security updates for 3.5. This security update includes all previous released security updates. For .NET Framework 4.7.2 and 4.8 were cumulative and so the KB articles are not marked as security.

      Thank you for sharing that some of our documentation is not updated. You are correct, this should have been included in the July release. We will work with the MSRC team to get the MSRC guide updated soon.

  • Douglas petway 0

    Good Evening Salini,

    Could you please help resolve a patching question myself and colleges have had about .Net Framework patches?

    I currently work in a production center where we test each of the patches before they are released to like devices across the enterprise. We have Windows 10 clients and Windows 2012 R2, 2016 and 2019 servers in production. My question is if you install the cumulative Windows os patch, do you also need to install the cumulative .Net Framework patch? Example: if I install the Windows 2012 R2 cumulative os patch (KB5015874), do i also need to install the cumulative Windows 2012 R2 .Net Framework patch (KB5016568).

    Also, in patch documentation, is there a resource that will list which patches are included in a single cumulative patch?

    Any assistance would be greatly appreciated.

    Thank You!

    Doug P

    • Salini AgarwalMicrosoft employee 0

      Hi Doug,

      In most cases .NET Framework updates are not included in the Windows rollup. For the configurations you share if you are using .NET Framework 3.5 or .NET Framework 4.7.2 on Server 2016 the Windows rollup is sufficient to receive updates. For all other configurations you share you will need both the Windows rollup and the .NET Framework rollup to bring your devices up-to-date.

      The .NET Blog is updated each release and is a great place to check for the latest .NET Framework cumulative patches to be listed.

Feedback usabilla icon