Microsoft Addresses Accidental Regression With .NET 6.0.19 And .NET 7.0.8

Microsoft released the second update for .NET within a week. Here is what they had to fix.

Table of contents

Key Points

Another update for .NET 6 and 7 are published by Microsoft only a week apart.
This rollout addresses issues with importing X.509 Certificates after an accidental regression by Microsoft in the last .NET version (.NET 6.0.18 and .NET 7.0.7).

Microsoft has released the second update for both .NET 6 and .NET 7 for June 2023. These are Out Of Band (OOB) updates, which have been published to address a regression in the earlier release this month: .NET 6.0.18 and .NET 7.0.7.

After receiving feedback from the users, where the users experienced issues with how .NET Framework runtime imports X.509 Certificates, Microsoft rolled out another version for the aforementioned .NET versions in the same month.

Continue reading below to learn more about why Microsoft had to urgently roll out a non-security update for .NET.

This page covers

What’s new in .NET 6.0.19 and 7.0.8

The last updates (.NET 6.0.18 & 7.0.7) added constraints to PFX certificate loading to fix a DoS vulnerability (CVE-2023-29331). However, this led to the issue of users being unable to import PKCS12 blobs whose private keys are protected by a null password.

Users were observing a CryptographicException being thrown by the X509Certificate constructor on those runtimes. However, Microsoft claims that this regression was unintentional.

Now, to fix this issue, you must install the latest .NET versions, which are either .NET 6.0.19 or .NET 7.0.8.

You can read more about it in this KB5028608 OOB update.

Below you’ll find the direct download links for .NET 6.0.19 and 7.0.8 SDKs, Runtimes, and ASP.NET Cores.

Download .NET 6.0.19

More .NET 6 download options are on the given link.

Download .NET 7.0.8

Runtime

Download .NET 7.0.8 Desktop Runtime for Windows x64

Download .NET 7.0.8 Desktop Runtime for Windows x86

Download .NET 7.0.8 Desktop Runtime for Windows ARM64

Download .NET 7.0.8 Runtime for macOS x64

Download .NET 7.0.8 Runtime for macOS ARM64

Download .NET 7.0.8 Runtime Binaries for Linux Arm32

Download .NET 7.0.8 Runtime Binaries for Linux Arm64

Download .NET 7.0.8 Runtime Binaries for Linux Arm32 Alpine

Download .NET 7.0.8 Runtime Binaries for Linux Arm64 Alpine

Download .NET 7.0.8 Runtime Binaries for Linux x64

Download .NET 7.0.8 Runtime Binaries for Linux x64 Alpine

SDK

Download .NET SDK 7.0.305 for Windows x64

Download .NET SDK 7.0.305 for Windows x86

Download .NET SDK 7.0.305 for Windows ARM64

Download .NET SDK 7.0.305 for macOS x64

Download .NET SDK 7.0.305 for macOS ARM64

Download .NET SDK 7.0.305 Binaries for Linux Arm32

Download .NET SDK 7.0.305 Binaries for Linux Arm64

Download .NET SDK 7.0.305 Binaries for Linux Arm32 Alpine

Download .NET SDK 7.0.305 Binaries for Linux Arm64 Alpine

Download .NET SDK 7.0.305 Binaries for Linux x64

Download .NET SDK 7.0.305 Binaries for Linux x64 Alpine

ASP.NET Core

Download ASP.NET Core Runtime 7.0.8 Hosting Bundle for Windows

Download ASP.NET Core Runtime 7.0.8 for Windows x64

Download ASP.NET Core Runtime 7.0.8 for Windows x86

Download ASP.NET Core Runtime 7.0.8 Binaries for Windows ARM64

Download ASP.NET Core Runtime 7.0.8 Binaries for macOS x64

Download ASP.NET Core Runtime 7.0.8 Binaries for macOS ARM64

Download ASP.NET Core Runtime 7.0.8 Binaries for Linux Arm32

Download ASP.NET Core Runtime 7.0.8 Binaries for Linux Arm64

Download ASP.NET Core Runtime 7.0.8 Binaries for Linux Arm32 Alpine

Download ASP.NET Core Runtime 7.0.8 Binaries for Linux Arm64 Alpine

Download ASP.NET Core Runtime 7.0.8 Binaries for Linux x64

Download ASP.NET Core Runtime 7.0.8 Binaries for Linux x64 Alpine

More .NET 7 download options are on the given link.

How to install .NET

To install .NET, you must begin by downloading the right .NET version for you from the links above and then running it to begin the installation process. Here is how:

Once you have installed the newer .NET version, all your applications will run using the new build as the previous version will be replaced.

Execute the downloaded installation package and click Install.

Begin .NET installation

The wizard will now begin the installation process
Close the wizard once the installation is complete.

Close the NET installer

You have now installed the .NET. You may check which .NET version is running by typing in the following command in Command Prompt:

wmic product get description | findstr /C:.NET

How to uninstall .NET

If you wish to remove a .NET version from your computer, you can simply uninstall it like any other regular application. Here are the steps:

Press the Windows Key + R shortcut keys to open the Run Command box.
Type in “appwiz.cpl” and press Enter to open the Programs and Features applet.

Open Programs & Features applet
Right-click the .NET component that you want to remove, then click “Uninstall” from the context menu.

Uninstall .NET from the Programs and Features applet

The uninstallation wizard will now launch.
Click “Uninstall” again.

Remove .NET version

When removed, click Close.

Close the .NET uninstallation wizard

The specific .NET version will now be removed from your computer.

Final verdict

If you already use the latest versions of .NET, then consider .NET 6.0.19 and .NET 7.0.8 non-optional updates. Since this release does not include any other security patches or improvements (apart from the one mentioned), then you should surely install it as it fixes an accidental regression by Microsoft.

.NET 6 Release History

Complete Version	Release Date	Significant Improvements	Announcement
6.0.25	14-Nov-23	Fixes elevation of privilege and security feature bypass vulnerabilities, includes updates to repos and other components	Microsoft announces .NET 6.0.25
6.0.24	24-Oct-23	– Addresses the security fixes that were missing in the last update	Microsoft announces .NET 6.0.24
6.0.23	10-Oct-23	-Addresses important security advisories -Updates to repos and other components	Microsoft announces .NET 6.0.23
6.0.22	12-Sep-23	-Addresses important security advisories -Updates to repos and other components	Microsoft announces .NET 6.0.22
6.0.21	8-Aug-23	-Addresses important security advisories -Updates to repos and other components	Microsoft announces .NET 6.0.21
6.0.19	22-Jun-23	– Addresses an issue with X.509 Certificates import	Microsoft announces .NET 6.0.19
6.0.18	13-Jun-23	– Several critical security advisories – Updates to repos and other components	Microsoft announces .NET 6.0.18
6.0.16	11-Apr-23	– Includes security advisory – Updates to repos	Microsoft announces .NET 6.0.16
6.0.15	14-Mar-23	– Non-security update with repository and library updates only	Microsoft announces .NET 6.0.15
6.0.14	14-Feb-23	-Addresses a .NET Remote Code Execution vulnerability (CVE-2023-21808) -Some repositories have been updated	Microsoft announces .NET 6.0.14
6.0.13	10-Jan-23	-Addresses a .NET Denial of Service vulnerability (CVE-2023-21538) -Repository updates and other fixes	Microsoft announces .NET 6.0.13
6.0.11	8-Nov-22	-Improvements to ASP .NET Core, SDK, and Runtime	Microsoft announces .NET 6.0.11
6.0.10	11-Oct-22	-Security advisory for developers -Improvements to CoreFX, ASP .NET Core, Runtime, and Templating	Microsoft announces .NET 6.0.10

.NET 6 version history

.NET 7 Release History

Complete Version	Release Date	Significant Improvements	Announcement
7.0.14	14-Nov-23	Fixes elevation of privilege and security feature bypass vulnerabilities, includes updates to repos and other components	Microsoft announces .NET 7.0.14
7.0.13	24-Oct-23	– Addresses the security fixes that were missing in the last update	Microsoft announces .NET 7.0.13
7.0.12	10-Oct-23	-Addresses important security advisories -Updates to repos and other components	Microsoft announces .NET 7.0.12
7.0.11	12-Sep-23	-Addresses important security advisories -Updates to repos and other components	Microsoft announces .NET 7.0.11
7.0.10	8-Aug-23	-Addresses important security advisories -Updates to repos and other components	Microsoft announces .NET 7.0.10
7.0.8	22-Jun-23	– Addresses an issue with X.509 Certificates import	Microsoft announces .NET 7.0.8
7.0.7	13-Jun-23	– Several critical security advisories -Updates to repos and other components	Microsoft announces .NET 7.0.7
7.0.5	11-Apr-23	– Security advisory -Updates to repos and other components	Microsoft announces .NET 7.0.5
7.0.4	14-Mar-23	-Repo updates only	Microsoft announces .NET 7.0.4
7.0.3	14-Feb-23	-Repo updates -Critical security updates	Microsoft announces .NET 7.0.3
7.0.2	10-Jan-23	-Repository updates and other non-security fixes	Microsoft announces .NET 7.0.2
7.0.1	13-Dec-22	-Patch for CVE-2022-41089; remote code execution vulnerability -Repository updates and other fixes	Microsoft announces .NET 7.0.1
7.0.0	8-Nov-22	-Performance improvements -Native ARM64 support -C# 11 and F# 7	Microsoft announces .NET 7.0.0

.NET 7 version history

Tags: .NET 6, .NET 7, Software Updates

Subhan Zafar

Subhan Zafar is an established IT professional with interests in Windows and Server infrastructure testing and research, and is currently working with Itechtics as a research consultant. He has studied Electrical Engineering and is also certified by Huawei (HCNA & HCNP Routing and Switching).

See all posts from Subhan Zafar

Microsoft Addresses Accidental Regression With .NET 6.0.19 And .NET 7.0.8

This page covers

What’s new in .NET 6.0.19 and 7.0.8

Download .NET 6.0.19

Runtime

SDK

ASP.NET Core

Download .NET 7.0.8

Runtime

SDK

ASP.NET Core

How to install .NET

How to uninstall .NET

Final verdict

.NET 6 Release History

.NET 7 Release History

Subhan Zafar

Leave the first comment (Cancel Reply)