.NET Framework October 2022 Security and Quality Rollup

Salini Agarwal

Today, we are releasing the October 2022 Security and Quality Rollup Updates for .NET Framework.

Security

For Windows 11, version 22H2 and Microsoft server operating system, version 22H2 the October Security and Quality Rollup Update is cumulative and contains all previously released security improvements. For all other windows versions the October Security and Quality Rollup Update does not contain any new security fixes. See September 2022 Security and Quality Rollup for the latest security updates.

Quality and Reliability

This release contains the following quality and reliability improvements.

WPF¹

• Addresses an issue of WPF apps not working with “Text Cursor Indicator” enabled when using RichTextBox.
• Addresses an issue to allow users to adjust column width for Datagrid and Gridview controls using keybord.
• Addresses an issue where opening a tooltip causes an ArgumentOutOfRangeException, when the app has changed the floating-point control word.
• Addresses an issue where invoking a synchronization Wait on the UI thread can lead to a render-thread failure, due to unexpected re-entrancy.
• Addresses issues arising in TreeView (or ListBox/DataGrid with grouping enabled) when changing the underlying collection(s) while also collapsing or expanding TreeView nodes. Scrolling actions, especially “short” actions like LineUp or MouseWheelUp, can result in poor outcomes: hangs, crashes, unexpected scrolling, gaps in the display, etc.
• Addresses an issue where DWM failures can cause WPF’s render thread to fail. An app can opt-in to the behavior of ignoring all DwmFlush errors by setting a regkey in HKCU\Software\Microsoft\Avalon.Graphics\IgnoreDwmFlushErrors or HKLM\Software\Microsoft\Avalon.Graphics\IgnoreDwmFlushErrors whose name is the full path to the .exe that wants to opt-in, and whose DWORD value is 1.

Winforms

• Enabled Narrator to focus on System.Windows.Forms.DataGridView control even if it’s empty.
• Improved keyboard navigation in ToolStrip ComboBox and TextBox items.
• Improved color contrast in System.Windows.Forms.DataGridView control’s link cells.

Workflow

• Addresses an issue when users interact with the Workflow Designer, they might encounter incorrectly disabled context menu items when right clicking on a variable in the component variables list.

.NET Runtime

• Adjusted GC Heap Hard Limit configuration, as well as processor interpretation for .NET Framework container scenarios.
• Improved reliability of managed debugging on arm64.
• Improved security of code identified by internal compliance scans.
• Improved deterministic output capability in ilasm.exe.

Networking

• Addresses an issue when Ssl negotiation can hang indefinitely when client certificates are used when TLS 1.3 is negotiated. Before the change renegotiation (PostHandshakeAuthentiction) would fail and SslStream or HttpWebRequest would observe timeout. Possible workaround is disabling TLS 1.3 either via Switch.System.Net.DontEnableTls13 AppContext or via OS registry.

¹ Windows Presentation Foundation (WPF)

Getting the Update

The Security and Quality Rollup is available via Windows Update, Windows Server Update Services, and Microsoft Update Catalog.

Note: Customers that rely on Windows Update and Windows Server Update Services will automatically receive the .NET Framework version-specific updates. Advanced system administrators can also take use of the below direct Microsoft Update Catalog download links to .NET Framework-specific updates. Before applying these updates, please ensure that you carefully review the .NET Framework version applicability, to ensure that you only install updates on systems where they apply.

The following table is for Windows 10, version 1607 and Windows Server 2016 versions and newer operating systems.

The following table is for earlier Windows and Windows Server versions.

Previous Monthly Rollups

The last few .NET Framework Monthly updates are listed below for your convenience:

• .NET Framework September 2022 Cumulative Update Preview
• .NET Framework September 2022 Security and Quality Rollup
• .NET Framework August 2022 Cumulative Update Preview Updates
• .NET Framework August 2022 Security and Quality Rollup Updates

Salini Agarwal

Follow