.NET Framework Version or .NET Runtime version ? What are the security considerations

Question

Hi Folks,

We are building one of our application on .NET framework 4.6.1. Courtesy of Windows Update, this application is already running on .NET Framework 4.8.

The concern here is, .NET Framework version 4.6.1 has reached end of support on April 26, 2022 and after this date, no updates including security fixes or technical support is available.

Question: Does this pose any security risk for our application, in a case, if we continue building it on .NET Framework 4.6.1 and running it on .NET Framework Runtime 4.8.

Please advise and share the relevant links, if possible. Thanks

Regards,

U Shaikh

Answer 1

the .net 4.* framework is an update in place. as long as the computer hosting the application, is getting updates, you are good. because you are building on 4.6.1, that is minimum runtime version supported.

that said, I'd update the project to 4.8. you can then support c# 7.3, remove the bcl project dependencies, and move many of the projects to the new project format.

Answer 2

Hi @U Shaikh ,

The Security and Quality is for the .NET Framework runtime.

As long as the operating system is still supported, the .NET Framework runtime keeps the latest Security and Quality updates.

Best Regards.
Jiachen Li
----------
If the answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.