.NET Framework July 2022 Security and Quality Rollup Updates
We are releasing the July 2022 Security and Quality Rollup Updates for .NET Framework.
This security update addresses an issue where the .NET Framework releases June 14, 2022-Security and Quality Rollup for .NET Framework 3.5 for Windows 8.1, RT 8.1, and Windows Server 2012 R2 (KB5013638) and Security and Quality Rollup for .NET Framework 3.5 for Windows 8.1, RT 8.1, and Windows Server 2012 R2 (KB5012139) were not cumulative and did not contain some previously released security updates. This security update includes all previous released security updates. There are no new security improvements being released in this update.
Getting the Update
The Security and Quality Rollup is available via Windows Update, Windows Server Update Services, and Microsoft Update Catalog.
Microsoft Update Catalog
You can get the update via the Microsoft Update Catalog. For Windows 10, NET Framework 4.8 updates are available via Windows Update, Windows Server Update Services, Microsoft Update Catalog. Updates for other versions of .NET Framework are part of the Windows 10 Monthly Cumulative Update.
Note: Customers that rely on Windows Update and Windows Server Update Services will automatically receive the .NET Framework version-specific updates. Advanced system administrators can also take use of the below direct Microsoft Update Catalog download links to .NET Framework-specific updates. Before applying these updates, please ensure that you carefully review the .NET Framework version applicability, to ensure that you only install updates on systems where they apply.
The following table is for earlier Windows and Windows Server versions.
|Product Version||Security and Quality Rollup|
|Windows 8.1, Windows RT 8.1 and Windows Server 2012 R2||5016568|
|.NET Framework 3.5||Catalog||5016268|
|.NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2||Catalog||5014637|
|.NET Framework 4.8||Catalog||5014633|
Previous Monthly Rollups
The last few .NET Framework Monthly updates are listed below for your convenience:
- .NET Framework June 2022 Security and Quality Rollup Updates
- .NET Framework May 2022 Cumulative Update
- .NET Framework May 2022 Security and Quality Rollup
- .NET Framework April 2022 Cumulative Update
Why is only KB5016268 classified as a security update, while KB5014633 and kB5014637 isn’t?
Also, you forgot to add them to the MSRC guide: https://msrc.microsoft.com/update-guide/releaseNote/2022-Jul
They should be part of the July release as they are security-related.
In May and June Security and Quality Rollup Updates for .NET Framework 3.5 were not cumulative and did not contain some previously released security updates for 3.5. This security update includes all previous released security updates. For .NET Framework 4.7.2 and 4.8 were cumulative and so the KB articles are not marked as security.
Thank you for sharing that some of our documentation is not updated. You are correct, this should have been included in the July release. We will work with the MSRC team to get the MSRC guide updated soon.
Good Evening Salini,
Could you please help resolve a patching question myself and colleges have had about .Net Framework patches?
I currently work in a production center where we test each of the patches before they are released to like devices across the enterprise. We have Windows 10 clients and Windows 2012 R2, 2016 and 2019 servers in production. My question is if you install the cumulative Windows os patch, do you also need to install the cumulative .Net Framework patch? Example: if I install the Windows 2012 R2 cumulative os patch (KB5015874), do i also need to install the cumulative Windows 2012 R2 .Net Framework patch (KB5016568).
Also, in patch documentation, is there a resource that will list which patches are included in a single cumulative patch?
Any assistance would be greatly appreciated.
In most cases .NET Framework updates are not included in the Windows rollup. For the configurations you share if you are using .NET Framework 3.5 or .NET Framework 4.7.2 on Server 2016 the Windows rollup is sufficient to receive updates. For all other configurations you share you will need both the Windows rollup and the .NET Framework rollup to bring your devices up-to-date.
The .NET Blog is updated each release and is a great place to check for the latest .NET Framework cumulative patches to be listed.