Skip to content

Commit 16023fb

Browse files
TaraOverfieldTaraOverfield
authored
Merge pull request #43019 from dotnet/TaraO-11B-24
Release 11B November security and quality rollup release
2 parents 17361f3 + 6529b73 commit 16023fb

File tree

2 files changed

+101
-0
lines changed

2 files changed

+101
-0
lines changed

‎docs/framework/release-notes/2024/11-12-november-security-and-quality-rollup.md

Lines changed: 99 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,99 @@
1+
---
2+
title: November 2024 security and quality rollup
3+
description: Learn about the improvements in the .NET Framework November 2024 security and quality rollup.
4+
ms.date: 11/12/2024
5+
---
6+
# November 2024 security and quality rollup
7+
8+
_Released November 12, 2024_
9+
10+
## Summary of what's new in this release
11+
12+
- [Security improvements](#security-improvements)
13+
- [Quality and reliability improvements](#quality-and-reliability-improvements)
14+
15+
### Security improvements
16+
17+
#### Security Feature Bypass vulnerability
18+
19+
This security update addresses a security feature bypass vulnerability when using SecUtility.RandomByte (*Applies to: .NET Framework 4.8, 4.8.1.*)
20+
21+
#### Information Disclosure vulnerability
22+
23+
This security update addresses an information disclosure vulnerability with the performance counter (*Applies to: .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8, 4.8.1.*)
24+
25+
### Quality and reliability improvements
26+
27+
#### ASP.NET
28+
29+
Addresses an issue where "The type initializer for 'System.Web.UI.Util' threw an exception." error with design-time compilation in Visual Studio for .NET Framework ASP.NET projects. (*Applies to: .NET Framework 4.8, 4.8.1.*)
30+
31+
#### CLR
32+
33+
Addresses an issue where, in rare cases, an infinite loop could occur when a thread enters CLR for the first time. (*Applies to: .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8, 4.8.1.*)
34+
35+
Addresses an issue where incorrect interface call devirtualization could occur when JIT optimizations are enabled. (*Applies to: .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8, 4.8.1.*)
36+
37+
Addresses an issue with out of memory exceptions during garbage collection while running applications running under job limits (*Applies to: .NET Framework 4.8, 4.8.1.*)
38+
39+
#### .NET fundamentals
40+
41+
Addresses an issue with .NET API UserPrincipal.GetAuthorizationGroups to retrieve the Membership of a particular user (*Applies to: .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8, 4.8.1.*)
42+
43+
## Known issues
44+
45+
This release contains no known issues.
46+
47+
## Summary tables
48+
49+
The following table outlines the updates in this release.
50+
51+
| Product version | Cumulative update |
52+
| --- | --- |
53+
| **Windows 11, version 24H2** | |
54+
| .NET Framework 3.5, 4.8.1 | [5045045934](https://support.microsoft.com/kb/5045934) |
55+
| **Microsoft server operating system, version 23H2** | |
56+
| .NET Framework 3.5, 4.8.1 | [5046270](https://support.microsoft.com/kb/5046270) |
57+
| **Windows 11, version 22H2 and Windows 11, version 23H2** | |
58+
| .NET Framework 3.5, 4.8.1 | [5045935](https://support.microsoft.com/kb/5045935) |
59+
| **Microsoft server operating system, version 22H2** | **[5046539](https://support.microsoft.com/kb/5046539)** |
60+
| .NET Framework 3.5, 4.8 | [5046265](https://support.microsoft.com/kb/5046265) |
61+
| .NET Framework 3.5, 4.8.1 | [5046264](https://support.microsoft.com/kb/5046264) |
62+
| **Microsoft server operating system, version 21H2** | **[5046547](https://support.microsoft.com/kb/5046547)** |
63+
| .NET Framework 3.5, 4.8 | [5046265](https://support.microsoft.com/kb/5046265) |
64+
| .NET Framework 3.5, 4.8.1 | [5046264](https://support.microsoft.com/kb/5046264) |
65+
| **Windows 10, version 22H2** | **[5046542](https://support.microsoft.com/kb/5046542)** |
66+
| .NET Framework 3.5, 4.8 | [5045936](https://support.microsoft.com/kb/5045936) |
67+
| .NET Framework 3.5, 4.8.1 | [5045933](https://support.microsoft.com/kb/5045933) |
68+
| **Windows 10, version 21H2** | **[5046541](https://support.microsoft.com/kb/5046541)** |
69+
| .NET Framework 3.5, 4.8 | [5045936](https://support.microsoft.com/kb/5045936) |
70+
| .NET Framework 3.5, 4.8.1 | [5045933](https://support.microsoft.com/kb/5045933) |
71+
| **Windows 10 1809 and Windows Server 2019** | **[5046540](https://support.microsoft.com/kb/5046540)** |
72+
| .NET Framework 3.5, 4.7.2 | [5046268](https://support.microsoft.com/kb/5046268) |
73+
| .NET Framework 3.5, 4.8 | [5046269](https://support.microsoft.com/kb/5046269) |
74+
| **Windows 10 1607 and Windows Server 2016** | |
75+
| .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2 | [5046612](https://support.microsoft.com/kb/5046612) |
76+
| .NET Framework 4.8 | [5046266](https://support.microsoft.com/kb/5046266) |
77+
78+
The following table is for earlier Windows and Windows Server versions for Security and Quality Rollup updates.  
79+
80+
| Product version | Security and quality rollup |
81+
| --- | --- |
82+
| **Windows Server 2012 R2** | **[5046545](https://support.microsoft.com/kb/5046545)** |
83+
| .NET Framework 3.5 | [5044012](https://support.microsoft.com/kb/5044012) |
84+
| .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 | [5046263](https://support.microsoft.com/kb/5046263) |
85+
| .NET Framework 4.8 | [5046260](https://support.microsoft.com/kb/5046260) |
86+
| **Windows Server 2012** | **[5046544](https://support.microsoft.com/kb/5046544)** |
87+
| .NET Framework 3.5 | [5044009](https://support.microsoft.com/kb/5044009) |
88+
| .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 | [5046262](https://support.microsoft.com/kb/5046262) |
89+
| .NET Framework 4.8 | [5046259](https://support.microsoft.com/kb/5046259) |
90+
| **Windows Server 2008 R2** | **[5046543](https://support.microsoft.com/kb/5046543)** |
91+
| .NET Framework 3.5.1 | [5044011](https://support.microsoft.com/kb/5044011) |
92+
| .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 | [5046261](https://support.microsoft.com/kb/5046261)|
93+
| .NET Framework 4.8 |[5046258](https://support.microsoft.com/kb/5046258) |
94+
| **Windows Server 2008** | **[5046546](https://support.microsoft.com/kb/5046546)** |
95+
| .NET Framework 2.0, 3.0 | [5044010](https://support.microsoft.com/kb/5044010) |
96+
| .NET Framework 3.5 SP1 | [5040673](https://support.microsoft.com/kb/5040673) |
97+
| .NET Framework 4.6.2 | [5046261](https://support.microsoft.com/kb/5046261) |
98+
99+
The operating system rows list a KB that's used for update-offering purposes. When the operating system KB is offered, the applicability logic determines the specific .NET Framework updates that will be installed. Updates for individual .NET Framework versions are installed based on the version of .NET Framework that's already present on the device. Because of this, the operating system KB is not expected to be listed as an installed update on the device. The expected updates to be installed are the .NET Framework specific version updates listed in the preceding table.

‎docs/framework/toc.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -697,6 +697,8 @@ items:
697697
href: release-notes/2024/10-08-october-security-and-quality-rollup.md
698698
- name: October 2024 cumulative update preview
699699
href: release-notes/2024/10-22-october-preview-cumulative-update.md
700+
- name: November 2024 security and quality rollup
701+
href: release-notes/2024/11-12-november-security-and-quality-rollup.md
700702
- name: What's new
701703
href: whats-new/index.md
702704
- name: What's new in accessibility

0 commit comments

Comments
 (0)