Applies to:
Microsoft .NET Framework 3.5.1
Note:Â Revised on Jun 20, 2023 to add resolution to known issue.
REMINDER Windows 7, Windows Server 2008 R2, Windows Embedded Standard 7, and Windows Embedded POS Ready 7 have reached the end of mainstream support and are now in extended security update (ESU) support. Windows Thin PC has reached the end of mainstream support; however, ESU support is not available.　
Starting in July 2020, there will no longer be optional, non-security releases (known as "C" releases) for this operating system. Operating systems in extended support have only cumulative monthly security updates (known as the "B" or Update Tuesday release).
Verify that you have installed the required updates listed in the How to get this update section before installing this update.　
Customers who have purchased the Extended Security Update (ESU) for on-premises versions of these operating systems must follow the procedures in KB4522133 to continue receiving security updates after extended support ends on January 14, 2020.　For more information on ESU and which editions are supported, see KB4497181.
Because ESU is available as a separate SKU for each of the years in which they are offered (2020, 2021, and 2022)—and because ESU can only be purchased in specific 12-month periods —you must purchase the third year of ESU coverage separately and activate a new key on each applicable device for your devices to continue receiving security updates in 2022.
If your organization did not purchase the third year of ESU coverage, you must purchase Year 1, Year 2, and Year 3 ESU for your applicable Windows 7 SP1 or Windows Server 2008 R2 SP1 devices before you install and activate the Year 3 MAK keys to receive updates. The steps to install, activate, and deploy ESUs are the same for first, second, and third year coverage. For more information, see Obtaining Extended Security Updates for eligible Windows devices for the Volume Licensing process and Purchasing Windows 7 ESUs as a Cloud Solution Provider for the CSP process. For embedded devices, contact your original equipment manufacturer (OEM).
For more information, see the ESU blog.
The December 13, 2022 update for Windows 7 SP1 and Windows Server 2008 R2 SP1 includes cumulative reliability improvements in .NET Framework 3.5.1. We recommend that you apply this update as part of your regular maintenance routines. Verify that you have installed the required updates listed in the How to get this update section before installing this update.
Summary
This security update addresses a vulnerability where restricted mode is triggered for the parsing of XPS files, preventing gadget chains which could allow remote code execution on an affected system. For more information please see CVE-2022-41089.
Additional information about this update
The following articles contain additional information about this update as it relates to individual product versions.
-
5021079 Description of the Security Only Update for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 SP1 and Windows Server 2008 R2 SP1 (KB5021079)
Known issues in this update
|
Symptom |
After installing this update, WPF apps may have a change in behavior. For more information about this issue, see KB5022083 |
|
Workaround |
To mitigate this issue, see KB5022083. |
|
Resolution |
This issue has been resolved in the June 13, 2023 Security and Quality Rollup and Cumulative Update. If you used any workaround or mitigations for this issue, they are no longer needed, and we recommend you remove them. To remove workaround review the workaround or alternative workaround which was applied for instructions. The workaround should be removed prior to installing the June update. |
How to obtain and install the update
Before installing this update
Prerequisite:
To apply this update, you must have .NET Framework 3.5.1 installed.
You must install the updates listed below and restart your device before installing the latest Rollup. Installing these updates improves the reliability of the update process and mitigates potential issues while installing the Rollup and applying Microsoft security fixes.
-
The March 12, 2019 servicing stack update (SSU) (KB4490628). To get the standalone package for this SSU, search for it in the Microsoft Update Catalog. This update is required to install updates that are only SHA-2 signed.
-
The latest SHA-2 update (KB4474419) released September 10, 2019. If you are using Windows Update, the latest SHA-2 update will be offered to you automatically. This update is required to install updates that are only SHA-2 signed. For more information on SHA-2 updates, see 2019 SHA-2 Code Signing Support requirement for Windows and WSUS.
-
The Extended Security Updates (ESU) Licensing Preparation Package (KB4538483) released February 11, 2020. The ESU licensing preparation package will be offered to you from WSUS. To get the standalone package for ESU licensing preparation package, search for it in the Microsoft Update Catalog.
Install this update
|
Release Channel |
Available |
Next Step |
|
Microsoft Update Catalog |
Yes |
To get the standalone package for this update, go to the Microsoft Update Catalog website. |
|
Windows Server Update Services (WSUS) |
Yes |
This individual .NET Framework product update will be installed, as applicable, by applying the operating system update. For more information about operating system updates see additional information about this update section. |
Restart requirement
You may need to restart the computer after you apply this update if any affected files are being used. We recommend that you exit all .NET Framework-based applications before you apply this update.
Update deployment information
For deployment details for this security update, go to the following article in the Microsoft Knowledge Base:
20221213 Security update deployment information: December 13, 2022
Update removal information
Note We do not recommend that you remove any security update. To remove this update, use the Programs and Features item in Control Panel.
Update restart information
This update does not require a system restart after you apply it unless files that are being updated are locked or are being used.
File Information
File hash information
|
File name |
SHA256 hash |
|
Windows6.1-KB5020896-x64.msu |
F36B6CC2093D45DF2AC728D3E75CFB101680300A7266F096193093F6105AF35A |
|
Windows6.1-KB5020896-x86.msu |
0BF93238B64C02ACBD797360492DACC53373A4D27DC1C01DABDB677DC30908F6 |
|
File name |
File version |
File size |
Date |
Time |
Platform |
|
Presentationcore.dll |
3.0.6920.8953 |
4,006,400 |
26-Oct-2022 |
00:17 |
x64 |
|
Presentationfontcache.exe.config |
Not applicable |
161 |
23-Oct-2022 |
08:02 |
Not applicable |
|
Wpfgfx_v0300.dll |
3.0.6920.8953 |
2,259,360 |
26-Oct-2022 |
00:17 |
x64 |
|
System.printing.dll |
3.0.6920.8953 |
358,400 |
26-Oct-2022 |
00:17 |
x64 |
|
Penimc.dll |
3.0.6920.8953 |
88,976 |
26-Oct-2022 |
00:17 |
x64 |
|
Presentationframework.dll |
3.0.6920.8953 |
4,648,960 |
26-Oct-2022 |
00:17 |
x86 |
|
Presentationhostdll.dll |
3.0.6920.8953 |
175,512 |
26-Oct-2022 |
00:17 |
x64 |
|
Reachframework.dll |
3.0.6920.8953 |
536,576 |
26-Oct-2022 |
00:17 |
x86 |
|
Windowsbase.dll |
3.0.6920.8953 |
1,118,208 |
26-Oct-2022 |
00:17 |
x86 |
|
Presentationframework.dll |
3.0.6920.8953 |
5,292,032 |
26-Oct-2022 |
00:18 |
x86 |
|
Reachframework.dll |
3.0.6920.8953 |
536,576 |
26-Oct-2022 |
00:18 |
x86 |
|
Windowsbase.dll |
3.0.6920.8953 |
1,257,472 |
26-Oct-2022 |
00:18 |
x86 |
|
Presentationcore.dll |
3.0.6920.8953 |
4,222,976 |
26-Oct-2022 |
00:18 |
x86 |
|
Presentationfontcache.exe.config |
Not applicable |
161 |
23-Oct-2022 |
08:02 |
Not applicable |
|
Wpfgfx_v0300.dll |
3.0.6920.8953 |
1,741,200 |
26-Oct-2022 |
00:18 |
x86 |
|
System.printing.dll |
3.0.6920.8953 |
372,736 |
26-Oct-2022 |
00:18 |
x86 |
|
Penimc.dll |
3.0.6920.8953 |
72,096 |
26-Oct-2022 |
00:18 |
x86 |
|
Presentationframework.dll |
3.0.6920.8953 |
5,292,032 |
26-Oct-2022 |
00:18 |
x86 |
|
Presentationhostdll.dll |
3.0.6920.8953 |
134,544 |
26-Oct-2022 |
00:18 |
x86 |
|
Reachframework.dll |
3.0.6920.8953 |
536,576 |
26-Oct-2022 |
00:18 |
x86 |
|
Windowsbase.dll |
3.0.6920.8953 |
1,257,472 |
26-Oct-2022 |
00:18 |
x86 |
|
File name |
File version |
File size |
Date |
Time |
Platform |
|
Presentationframework.dll |
3.0.6920.8953 |
5,292,032 |
26-Oct-2022 |
00:18 |
x86 |
|
Reachframework.dll |
3.0.6920.8953 |
536,576 |
26-Oct-2022 |
00:18 |
x86 |
|
Windowsbase.dll |
3.0.6920.8953 |
1,257,472 |
26-Oct-2022 |
00:18 |
x86 |
|
Presentationcore.dll |
3.0.6920.8953 |
4,222,976 |
26-Oct-2022 |
00:18 |
x86 |
|
Presentationfontcache.exe.config |
Not applicable |
161 |
23-Oct-2022 |
08:02 |
Not applicable |
|
Wpfgfx_v0300.dll |
3.0.6920.8953 |
1,741,200 |
26-Oct-2022 |
00:18 |
x86 |
|
System.printing.dll |
3.0.6920.8953 |
372,736 |
26-Oct-2022 |
00:18 |
x86 |
|
Penimc.dll |
3.0.6920.8953 |
72,096 |
26-Oct-2022 |
00:18 |
x86 |
|
Presentationframework.dll |
3.0.6920.8953 |
5,292,032 |
26-Oct-2022 |
00:18 |
x86 |
|
Presentationhostdll.dll |
3.0.6920.8953 |
134,544 |
26-Oct-2022 |
00:18 |
x86 |
|
Reachframework.dll |
3.0.6920.8953 |
536,576 |
26-Oct-2022 |
00:18 |
x86 |
|
Windowsbase.dll |
3.0.6920.8953 |
1,257,472 |
26-Oct-2022 |
00:18 |
x86 |
Prerequisites
To apply this update, you must have .NET Framework 3.5.1 installed.
Restart requirement
You must restart the computer after you apply this update if any affected files are being used. We recommend that you exit all .NET Framework-based applications before you apply this update.
How to obtain help and support for this update
-
Help for installing updates: Windows Update FAQ
-
Protect yourself online and at home: Windows Security support
-
Local support according to your country: International Support
