[German]Microsoft has surprisingly released an unscheduled out-of-band update for .NET Framework on January 31, 2023. This should fix problems with XPS documents, which were caused by security updates from December 2022 in .NET Framework – I had reported in the blog. The update must be installed separately. The workarounds issued in December 2022 should then no longer be necessary.
Advertising
.NET updates and XPS issues
I had reported in the December 13, 2022 blog post .NET updates (Dec. 13, 2022) fixes vulnerability CVE-2022-41089, but causing issues that Microsoft had released a security update for the .NET framework (.NET 7.0.1, .NET 6.0.12 and .NET Core 3.1.32 ) as of December 13, 2022. This closes a remote code execution vulnerability CVE-2022-41089.
However, because this update caused isisues due to WPF applications has changed its behavior after installing this update. Microsoft has published support article KB5022083 about this glitch. It says that XPS documents that use structural or semantic elements such as a table structure, storyboards, or hyperlinks may not display correctly in WPF-based readers. I had outlined the workarounds in the December 13, 2022 blog post blog post .NET updates (Dec. 13, 2022) fixes vulnerability CVE-2022-41089, but causing issues . The following .NET versions are affected:
- .NET Framework 2.0, 3.0, 3.5, 3.5.1, if the December 13, 2022 security update is installed.
- .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2, if the December 13, 2022 security update is installed.
- .NET Framework 4.8 if the December 13, 2022 security update is installed.
- .NET Framework 4.8.1, if the December 13, 2022 security update is installed.
- .NET Core 3.1, with the Windows Desktop runtime version 3.1.32.
- .NET 6, with Windows Desktop runtime version 6.0.12 or later.
- .NET 7, with Windows desktop runtime version 7.0.1 or later.
It hits a couple of .NET based applications (especially German DATEV tax software users, see my German blog post .Net Update vom 13. Dez. 2022 verursacht Druckprobleme bei DATEV-Briefköpfen mit Grafiken).
Out-of-band update fixes XPS issues
As of January 31, 2023, Microsoft has published in its Message Center the article Take action: OOB update to address issues with XPS documents in WPF-based readers, which refers to the out-of-band update (via Bleeping Computer). It states:
Microsoft is releasing out-of-band (OOB) updates for some versions of .Net Framework today, January 31, 2023. This update fixes a known issue that can cause XPS documents that use structural or semantic elements such as table structure, storyboards, or hyperlinks to not display correctly in WPF-based readers.
The standalone packages for these out-of-band (OOB) updates are available in the Microsoft Update Catalog. The Microsoft document here lists the following updates:
Advertising
Windows 11, version 22H2
.NET Framework 4.8.1: Catalog, 5023327
Windows 11, version 21H2: Catalog, 5023367
.NET Framework 4.8: Catalog, 5023323
.NET Framework 4.8.1: Catalog, 5023320
Windows Server 2022; target="_blank"Catalog, 5023368
.NET Framework 4.8: Catalog, 5023324
.NET Framework 4.8.1: Catalog, 5023321
Azure Stack HCI, version 22H2
.NET Framework 4.8: Catalog, 5023324
Azure Stack HCI, version 21H2
.NET Framework 4.8: Catalog, 5023324
Windows 10 Version 22H2: Catalog, 5023366
.NET Framework 4.8: Catalog, 5023322
.NET Framework 4.8.1: Catalog, 5023319
Windows 10 Version 21H2; Catalog, 5023365
.NET Framework 4.8: Catalog, 5023322
.NET Framework 4.8.1: Catalog, 5023319
Windows 10 Version 20H2: Catalog, 5023364
.NET Framework 4.8: Catalog, 5023322
.NET Framework 4.8.1: Catalog, 5023319
Windows 10 1809 (October 2018 Update) and Windows Server 2019: Catalog, 5023363
.NET Framework 4.7.2: Catalog, 5023333
.NET Framework 4.8: Catalog, 5023326
Windows 10 1607 (Anniversary Update) and Windows Server 2016: Catalog, 5023416
.NET Framework 4.7.2: Catalog, 5023332
.NET Framework 4.8: Catalog, 5023325
You can manually import these updates into Windows Server Update Services (WSUS) and Microsoft Endpoint Configuration Manager. For instructions for WSUS, see WSUS and the Catalog Site. For instructions for Configuration Manager, see Import updates from the Microsoft Update Catalog.
Notes: The updates are not available through Windows Update and are not installed automatically. For information about this issue and the out-of-band updates that fix it, see KB5022083 Change in how WPF-based applications render XPS documents.
Similar articles
Microsoft Office Updates (December 6, 2022)
Microsoft Security Update Summary (December 13, 2022)
Patchday: Windows 10-Updates (December 13, 2022)
Patchday: Windows 11/Server 2022-Updates (December 13, 2022)
Windows 7/Server 2008 R2; Windows 8.1/Server 2012 R2: Updates (December 13, 2022)
.NET updates (Dec. 13, 2022) fixes vulnerability CVE-2022-41089, but causing issues
