-
Notifications
You must be signed in to change notification settings - Fork 6k
January security release notes #44213
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
Merged
Changes from 1 commit
Commits
Show all changes
6 commits
Select commit
Hold shift + click to select a range
189153e
January securty release notes
TaraOverfield fc77269
Update docs/framework/release-notes/release-notes.md
TaraOverfield e5240a6
Update docs/framework/toc.yml
TaraOverfield b355f12
Remove release date from release notes
TaraOverfield d83320e
remove loc specific link of en-us
TaraOverfield 4cca90e
Use relative links
gewarren File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
93 changes: 93 additions & 0 deletions
93
docs/framework/release-notes/2025/01-14-january-cumulative-update.md
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,93 @@ | ||
| --- | ||
| title: January 2025 cumulative update | ||
| description: Learn about the improvements in the .NET Framework January 2025 cumulative update. | ||
| ms.date: 01/14/2025 | ||
| --- | ||
| # January 2025 cumulative update | ||
|
|
||
| _Released January 14, 2025_ | ||
|
|
||
| ## Summary of what's new in this release | ||
|
|
||
| - [Security improvements](#security-improvements) | ||
| - [Quality and reliability improvements](#quality-and-reliability-improvements) | ||
|
|
||
| ### Security improvements | ||
|
|
||
| #### CVE-2025-21176 – Remote Code Execution vulnerability | ||
|
|
||
| This security update addresses a remote code execution vulnerability detailed in [CVE 2025-21146](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21176). | ||
|
|
||
| ### Quality and reliability improvements | ||
|
|
||
| #### CLR | ||
|
|
||
| Address crashes that can occur due to certain interactions between multi-module assembly native image usage and OS code integrity enforcement policy updates. (*Applies to: .NET Framework 4.8, 4.8.1.*) | ||
|
|
||
| ## Known issues in this release | ||
|
|
||
| This release contains no known issues. | ||
|
|
||
| ## Summary tables | ||
|
|
||
| The following table outlines the updates in this release. | ||
|
|
||
| | Product version | Cumulative update | | ||
| | --- | --- | | ||
| | **Windows 11, version 24H2** | | | ||
| | .NET Framework 3.5, 4.8.1 | [5049622](https://support.microsoft.com/kb/5049622) | | ||
| | **Microsoft server operating system, version 24H2** | | | ||
| | .NET Framework 3.5, 4.8.1 | [5049622](https://support.microsoft.com/kb/5049622) | | ||
| | **Microsoft server operating system, version 23H2** | | | ||
| | .NET Framework 3.5, 4.8.1 | [5049620](https://support.microsoft.com/kb/5049620) | | ||
| | **Windows 11, version 22H2 and Windows 11, version 23H2** | | | ||
| | .NET Framework 3.5, 4.8.1 | [5049624](https://support.microsoft.com/kb/5049624) | | ||
| | **Microsoft server operating system, version 22H2** | **[5050190](https://support.microsoft.com/kb/5050190)** | | ||
| | .NET Framework 3.5, 4.8 | [5049617](https://support.microsoft.com/kb/5049617) | | ||
| | .NET Framework 3.5, 4.8.1 | [5049625](https://support.microsoft.com/kb/5049625) | | ||
| | **Microsoft server operating system, version 21H2** | **[5050187](https://support.microsoft.com/kb/5050187)** | | ||
| | .NET Framework 3.5, 4.8 | [5049617](https://support.microsoft.com/kb/5049617) | | ||
| | .NET Framework 3.5, 4.8.1 | [5049625](https://support.microsoft.com/kb/5049625) | | ||
| | **Windows 10, version 22H2** | **[5050188](https://support.microsoft.com/kb/5050188)** | | ||
| | .NET Framework 3.5, 4.8 | [5049613](https://support.microsoft.com/kb/5049613) | | ||
| | .NET Framework 3.5, 4.8.1 | [5049621](https://support.microsoft.com/kb/5049621) | | ||
| | **Windows 10, version 21H2** | **[5050416](https://support.microsoft.com/kb/5050416)** | | ||
| | .NET Framework 3.5, 4.8 | [5049613](https://support.microsoft.com/kb/5049613) | | ||
| | .NET Framework 3.5, 4.8.1 | [5049621](https://support.microsoft.com/kb/5049621) | | ||
| | **Windows 10 1809 and Windows Server 2019** | **[5050182](https://support.microsoft.com/kb/5050182)** | | ||
| | .NET Framework 3.5, 4.7.2 | [5049608](https://support.microsoft.com/kb/5049608) | | ||
| | .NET Framework 3.5, 4.8 | [5049615](https://support.microsoft.com/kb/5049615) | | ||
| | **Windows 10 1607 and Windows Server 2016** | | | ||
| | .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2 | [5049993](https://support.microsoft.com/kb/5049993) | | ||
| | .NET Framework 4.8 | [5049614](https://support.microsoft.com/kb/5049614) | | ||
|
|
||
| The following table is for earlier Windows and Windows Server versions for Security and Quality Rollup updates. | ||
|
|
||
| | Product version | Security and quality rollup | | ||
| | --- | --- | | ||
| | **Windows Server 2012 R2** | **[5050185](https://support.microsoft.com/kb/5050185)** | | ||
| | .NET Framework 3.5 | [5044012](https://support.microsoft.com/kb/5044012) | | ||
| | .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 | [5049610](https://support.microsoft.com/kb/5049610) | | ||
| | .NET Framework 4.8 | [5049614](https://support.microsoft.com/kb/5049614) | | ||
| | **Windows Server 2012** | **[5050184](https://support.microsoft.com/kb/5050184)** | | ||
| | .NET Framework 3.5 | [5044009](https://support.microsoft.com/kb/5044009) | | ||
| | .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 | [55049609](https://support.microsoft.com/kb/5049610) | | ||
| | .NET Framework 4.8 | [5049618](https://support.microsoft.com/kb/5049618) | | ||
| | **Windows Server 2008 R2** | **[5046543](https://support.microsoft.com/kb/5046543)** | | ||
| | .NET Framework 3.5.1 | [5044011](https://support.microsoft.com/kb/5044011) | | ||
| | .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 | [5049611](https://support.microsoft.com/kb/5049611)| | ||
| | .NET Framework 4.8 |[5049619](https://support.microsoft.com/kb/5049619) | | ||
| | **Windows Server 2008** | **[5050186](https://support.microsoft.com/kb/5050186)** | | ||
| | .NET Framework 2.0, 3.0 | [5044010](https://support.microsoft.com/kb/5044010) | | ||
| | .NET Framework 3.5 SP1 | [5040673](https://support.microsoft.com/kb/5040673) | | ||
| | .NET Framework 4.6.2 | [5049611](https://support.microsoft.com/kb/5049611) | | ||
|
|
||
| | Product version | Security Only Update | | ||
| | --- | --- | | ||
| | **Windows Server 2008 R2** | **[5050180](https://support.microsoft.com/kb/5050180)** | | ||
| | .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 | [5049627](https://support.microsoft.com/kb/5049627)| | ||
| | .NET Framework 4.8 |[5049628](https://support.microsoft.com/kb/5049628) | | ||
| | **Windows Server 2008** | **[5050181](https://support.microsoft.com/kb/5050181)** | | ||
| | .NET Framework 4.6.2 | [5049627](https://support.microsoft.com/kb/5049627) | | ||
|
|
||
| The operating system rows list a KB that's used for update-offering purposes. When the operating system KB is offered, the applicability logic determines the specific .NET Framework updates that will be installed. Updates for individual .NET Framework versions are installed based on the version of .NET Framework that's already present on the device. Because of this, the operating system KB is not expected to be listed as an installed update on the device. The expected updates to be installed are the .NET Framework specific version updates listed in the preceding table. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,33 @@ | ||
| --- | ||
| title: .NET Framework release information | ||
| description: Improvements in the .NET Framework servicing cumulative updates. | ||
| ms.date: 01/14/2025 | ||
| --- | ||
| # .NET Framework Release Notes | ||
|
|
||
| _Released January 14, 2025_ | ||
|
|
||
| ## Summary of what's new in this release | ||
|
|
||
TaraOverfield marked this conversation as resolved.
Show resolved
Hide resolved
|
||
| The .NET Framework updates include cumulative security and reliability improvements. We recommend that you apply updates as part of your regular maintenance routines. | ||
|
|
||
| .NET Framework will be supported with fixes and security updates for years to come as explained in more detail in our [lifecycle and support policy](https://learn.microsoft.com/en-us/lifecycle/products/microsoft-net-framework). You can acquire the latest most security version of .NET Framework, from Windows Update or by visiting Microsoft Update Catalog. | ||
gewarren marked this conversation as resolved.
Show resolved
Hide resolved
|
||
|
|
||
| .NET Framework cumulative update releases are discussed in detail in the following individual release notes: | ||
|
|
||
| * January 14, 2025 - [cumulative update](https://learn.microsoft.com/en-us/dotnet/framework/release-notes/2025/01-14-january-cumulative-update) **New Release** | ||
| * November 21, 2024 - [cumulative update preview](https://learn.microsoft.com/en-us/dotnet/framework/release-notes/2024/11-21-november-preview-cumulative-update) | ||
| * November 12, 2024 - [security and quality rollup](https://learn.microsoft.com/en-us/dotnet/framework/release-notes/2024/11-12-november-security-and-quality-rollup) | ||
| * Octber 22, 2024 - [cumulative update preview](https://learn.microsoft.com/en-us/dotnet/framework/release-notes/2024/10-22-october-preview-cumulative-update) | ||
| * October 8, 2024 - [security and quality rollup](https://learn.microsoft.com/en-us/dotnet/framework/release-notes/2024/10-08-october-security-and-quality-rollup) | ||
| * August 13, 2024 - [security and quality rollup](https://learn.microsoft.com/en-us/dotnet/framework/release-notes/2024/08-13-august-security-and-quality-rollup) | ||
| * July 25, 2024 - [cumulative update preview](https://learn.microsoft.com/en-us/dotnet/framework/release-notes/2024/07-25-july-preview-cumulative-update) | ||
| * July 9, 2024 - [security and quality rollup](https://learn.microsoft.com/en-us/dotnet/framework/release-notes/2024/07-09-july-security-and-quality-rollup) | ||
| * June 25, 2024 - [cumulative update preview](https://learn.microsoft.com/en-us/dotnet/framework/release-notes/2024/06-25-june-preview-cumulative-update) | ||
| * May 14, 2024 - [security and quality rollup](https://learn.microsoft.com/en-us/dotnet/framework/release-notes/2024/05-14-may-security-and-quality-rollup) | ||
| * April 23, 2024 - [cumulative update preview](https://learn.microsoft.com/en-us/dotnet/framework/release-notes/2024/04-23-april-preview-cumulative-update) | ||
| * April 9, 2024 - [security and quality rollup](https://learn.microsoft.com/en-us/dotnet/framework/release-notes/2024/04-09-april-security-and-quality-rollup) | ||
| * March 26, 2024 - [cumulative update preview](https://learn.microsoft.com/en-us/dotnet/framework/release-notes/2024/03-26-march-preview-cumulative-update) | ||
| * February 14, 2024 - [security and quality rollup](https://learn.microsoft.com/en-us/dotnet/framework/release-notes/2024/02-14-february-security-and-quality-rollup) | ||
| * January 23, 2024 - [cumulative update preview](https://learn.microsoft.com/en-us/dotnet/framework/release-notes/2024/01-23-january-preview-cumulative-update) | ||
| * January 9, 2024 - [security and quality rollup](https://learn.microsoft.com/en-us/dotnet/framework/release-notes/2024/01-09-january-security-and-quality-rollup) | ||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Uh oh!
There was an error while loading. Please reload this page.