Yesterday, we are released the January 2022 Security and Quality Rollup Updates for .NET Framework.
CVE-2022-21911 – .NET Framework Denial of Service
This security update addresses an issue where an unauthenticated attacker could cause a denial of service on an affected system.
Quality and Reliability
This release contains the following quality and reliability improvements.
nder certain error cases caused due to NullReferenceException thrown while populating SqlParameter values using customer provided delegates, the SqlClient driver may not cleanup the state of connection state. The connection in bad state, can make its way into the connection pool and may be picked up for reuse causing unexpected failures on the connection. If such a condition is recognized, an AppContext Switch “Switch.System.Data.SqlClient.CleanupParserOnAllFailures”, may be enabled to clean up connections on any kind of failures even while running into errors with delegates.
Addresses a failure to correctly timeout a failed request when making an asynchronous WCF call over HTTP. If the service has sent a partial response message and fails to send the remainder of the response, the client may not fail the call after the configured timeout.
Addresses an issue where WPF does not respond to touch if the WPF window was activated by a touch manipulation (e.g. swiping a listbox).
Adds a mitigation for an issue involving tearing, flickering, or incorrect composition of visual content under high GPU-load conditions.
Addresses an issue where the extra information associated with a WM_KEYDOWN message is discarded before the handlers for the PreviewKeyDown or KeyDown events can retrieve it via GetMessageExtraInfo.
Addresses an issue where AutomationElement.FindFirst or FindAll do not search the subtree of an hwnd whose UIA_WindowVisibilityOverridden property is set to 1.
Addresses an issue where a binding on TextBox.Text with UpdateSourceTrigger=PropertyChanged produces incorrect results when the Microsoft Quick IME is used.
1 Windows Communication Foundation (WCF)
2 Windows Presentation Foundation (WPF)
@@End ‘Quality and Reliability’ [email protected]@
The Security and Quality Rollup is available via Windows Update, Windows Server Update Services, and Microsoft Update Catalog. The Security Only Update is available via Windows Server Update Services and Microsoft Update Catalog.
You can get the update via the Microsoft Update Catalog. For Windows 10, NET Framework 4.8 updates are available via Windows Update, Windows Server Update Services, Microsoft Update Catalog. Updates for other versions of .NET Framework are part of the Windows 10 Monthly Cumulative Update.
**Note**: Customers that rely on Windows Update and Windows Server Update Services will automatically receive the .NET Framework version-specific updates. Advanced system administrators can also take use of the below direct Microsoft Update Catalog download links to .NET Framework-specific updates. Before applying these updates, please ensure that you carefully review the .NET Framework version applicability, to ensure that you only install updates on systems where they apply.
The following table is for Windows 10 and Windows Server 2016+ versions.
Microsoft server operating systems version 21H2
Windows 10 21H2
Windows 10 21H1
Windows 10, version 20H2 and Windows Server, version 20H2
Windows 10 1909
Windows 10 1809 (October 2018 Update) and Windows Server 2019
Windows 10 1607 (Anniversary Update) and Windows Server 2016
Windows 10 1507
The following table is for earlier Windows and Windows Server versions.
Security and Quality Rollup
Security Only Update
Windows 8.1, Windows RT 8.1 and Windows Server 2012 R2
Windows Server 2012
Windows 7 SP1 and Windows Server 2008 R2 SP1
Windows Server 2008
Previous Monthly Rollups
The last few .NET Framework Monthly updates are listed below for your convenience:
.NET Framework November 2021 Cumulative Update
.NET Framework October 2021 Security and Quality Rollup
.NET Framework August 2021 Security and Quality Rollup
.NET Framework July 2021 Cumulative Update Preview
The post .NET Framework January 2022 Security and Quality Rollup Updates appeared first on .NET Blog.