[update 13/3/12 – added 5719]
[update Oct & Nov 2011 – various additions as I find them]
[update 23/9/11 added MS11-044 and MS11-028]
[update 31/5/11 added .5669]
[update 7/4/11 added a load of fixes that I didn’t have listed]
[update 29/12/9 added lots of post SP2 hotfixes, MS09-061 versions and added the note on dual-branch servicing]
[update 8/10/9 added Windows 7 versions and the post-3.5 SP1 app compat update]
[update 5/11/8 added .NET 3.5 SP1, various hotfixes and additional note about "what is the CLR"]
[update 20/11/7 added .NET 2.0 SP1]
[update 15/11/7 added 4 new recent fixes]

Following on from my post about ASP.NET 2.0 fixes, summarised below are the Common Language Runtime (CLR) 2.0 major releases and hotfixes, in version number order.  Additional note (5/11/8): the CLR is not synonymous with the .NET Framework as a whole. The CLR is the core runtime engine, including the JIT compiler, metadata management, threadpool, garbage collector etc. The .NET Framework includes the CLR, the base class libraries (BCL), ASP.NET, WCF, WPF and lots more.  The below list only relates to CLR fixes.

ASP.NET is a hungry consumer of the CLR services such as threadpool, garbage collection etc. Therefore many of the problems we see customers experience in production ASP.NET applications are the result of issues in the CLR - many of which we have already fixed. So it is always worth considering what patches you currently have installed when something weird happens.

Please read the caveats at the start of the ASP.NET 2.0 fixes post before proceeding.

Following .NET Framework 2.0 SP2, the capability for .NET Framework 2.0 fix packages to carry two different types of fix was introduced. This is referred to as dual branch servicing and is described in this article:

Dual Branch Servicing for the .NET Framework 2.0 Service Pack 2, the .NET Framework 3.0 Service Pack 2, and the .NET Framework 3.5 Service Pack 1

The first occasion I am aware of this capability actually being used is in the MS09-061 release. Therefore it is no longer the case that if the version of mscorwks.dll that you have on your system is higher than the one mentioned in a particular hotfix article that you automatically have the fix described in that article. It depends on what you had on your system prior to installing the dual-branch hotfix package. If you already had a hotfix version of those files installed you would get the LDR version. If you didn’t then you would get the GDR version.

 

Version
2.0.50727.
xxxx		 KB Description
5719 2669522 FIX: Access violation when you use the ICryptoTransform.TransformFinalBlock API to perform a cryptographic operation in a .NET Framework 3.5-based application
5692 2598773 FIX: "Fatal Execution Engine Error" when you call the String.EndWith method in the .NET Framework 2.0 if the string parameter of the method begins with an expansion character
5681 2572075 MS11-078: Description of the security update for the .NET Framework 2.0 SP2 for Windows Vista SP2 and Windows Server 2008 SP2: October 11, 2011
(LDR Version)
5669 2545756 FIX: New Rupee symbol is not displayed when you run a .NET Framework 2.0-based application to obtain the symbol if the user locale is not an Indian locale
5662 2518864

2518869		 MS11-044: Description of the security update for the .NET Framework 3.5 Service Pack 1 and .NET Framework 2.0 Service Pack 2 on Windows XP Service Pack 3 and on Windows Server 2003 Service Pack 2: June 14, 2011

and

MS11-044: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and on Windows Server 2008 R2 Service Pack 1: June 14, 2011

(LDR version)
5656 2504603 FIX: SQL Server process that uses the.NET Framework 2.0 does not make any progress during a garbage collection while CPU usage is high
5653 2446704 MS11-028: Description of the security update for the .NET Framework 3.5 Service Pack 1 and the .NET Framework 2.0 Service Pack 2 on Windows Server 2003 and Windows XP: April 12, 2011
(LDR version)
5651 2315412 FIX: Access violation may occur when you run a .NET Framework 2.0 SP2-based application that calls a mixed assembly that is domain-neutral
5446 2518869 MS11-044: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and on Windows Server 2008 R2 Service Pack 1: June 14, 2011
(GDR version on Windows 7 SP1 and Windows Server 2008 R2 SP1)
5444 2446710 MS11-028: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and on Windows Server 2008 R2 Service Pack 1: April 12, 2011
(GDR version)
5066 2461007 System.ObjectDisposedException may occur when you run a .NET Framework 2.0-based application on a server that has the Chinese (Simplified) or Chinese (Traditional) language pack installed
5060 2450950 Error 0x80070002 in the CoCreateInstance function when you use registration-free COM activation to load a COM object in a .NET Framework 2.0 SP2-based or .NET Framework 3.5 SP1- based application
5058 2260913 FIX: Updating the .NET Framework may fail and some files in the GAC may be deleted
5021 2282372 "Loading this assembly would produce a different grant set from other instances” error message when you run a .NET Framework 2.0-based application on a computer that is running a 64-bit version of Windows
5018 983590 MS10-060: Description of the security update for the Microsoft .NET Framework 3.5 in Windows 7 and in Windows Server 2008 R2: August 10, 2010
(LDR Version)
5008
(download)		 981574 The splash screen stays open longer than usual when you try to start Excel on a computer that has the .NET Framework 3.5 SP1 installed
4952 983590 MS10-060: Description of the security update for the Microsoft .NET Framework 3.5 in Windows 7 and in Windows Server 2008 R2: August 10, 2010
(GDR Version)
4927 n/a Windows 7 and Windows Server 2008 R2 RTM
4918 n/a Windows 7 RC1
4474 2276255 FIX: An application that is based on the .NET Framework 2.0 stops responding on a computer that has more than 32 processors, and the .NET Framework 2.0 Service Pack 2 or the .NET Framework 3.5 Service Pack 1 is installed
4455 983583 MS10-060: Description of the security update for the .NET Framework 3.5 Service Pack 1 and .NET Framework 2.0 Service Pack 2 on Windows Server 2003 and Windows XP: August 10, 2010
(LDR Version)
4454 983589 MS10-060: Description of the security update for the .NET Framework 2.0 Service Pack 2 and the .NET Framework 3.5 Service Pack 1 on Windows Vista Service Pack 2 and on Windows Server 2008 Service Pack 2: August 10, 2010
4448 981266 Referenced assemblies of a .NET Framework 2.0-based 32-bit application are loaded multiple times
4447 982318 FIX: A .NET Framework 2.0-based application that uses Remoting objects crashes and closes unexpectedly
4446 981878 FIX: A dump file is not generated for a .NET Framework 2.0-based application after the application closes
4431
(download)		 979744 A .NET Framework 2.0-based Multi-AppDomain application stops responding when you run the application
4428 978254 FIX: The CLR cannot start the Dr. Watson tool to report errors or to generate dump files when a .NET Framework 2.0-based application process runs in an impersonated user context
4428 978249 FIX: You receive a FatalExecutionEngineError exception when a domain neutral assembly is unloaded and a debugger that uses Just My Code detaches from a .NET Framework 2.0-based process
4417 976898 FIX: After you use the ThreadPool.SetMinThreads method in the Microsoft .NET Framework 3.5, threads maintained by the thread pool do not work as expected
4413 976569 Description of the .NET Framework 2.0 SP2 forward compatibility update for Windows XP and for Windows Server 2003
4408
(download)		 975954 FIX: When you run a .NET Framework 2.0-based application, a System.AccessViolationException exception occurs, or a dead-lock occurs on two threads in an application domain
4400 974470 MS09-061: Description of the security update for the Microsoft .NET Framework 2.0 Service Pack 2 on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: October 13, 2009
4216 2572075 MS11-078: Description of the security update for the .NET Framework 2.0 SP2 for Windows Vista SP2 and Windows Server 2008 SP2: October 11, 2011
(GDR Version)
4214 2518866 MS11-044: Description of the security update for the .NET Framework 3.5 Service Pack 1, Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: June 14, 2011
(GDR Version)
4206 983589 MS10-060: Description of the security update for the .NET Framework 2.0 Service Pack 2 and the .NET Framework 3.5 Service Pack 1 on Windows Vista Service Pack 2 and on Windows Server 2008 Service Pack 2: August 10, 2010
(GDR Version)
4200 974470 MS09-061: Description of the security update for the Microsoft .NET Framework 2.0 Service Pack 2 on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: October 13, 2009
4062 974417 MS09-061: Description of the security update for the Microsoft .NET Framework 2.0 Service Pack 2 and the Microsoft .NET Framework 3.5 Service Pack 1: October 13, 2009
(LDR version)
4062 974065 FIX: A System.InsufficientMemoryException exception occurs when you are running a .NET Framework 2.0-based application
4062 974372 FIX: The top of the call stack shows the mscorwks!WKS::gc_heap::mark_object_simple function after an exception occurs in a .NET Framework 2.0-based application
4060 974168 FIX: An access violation occurs when you pass structs as parameters through remoting or reflection in 64-bit applications in the .NET Framework 3.5 SP1 or the .NET Framework 2.0 SP2
4051 972259 FIX: The threads of a .NET Framework 2.0 SP2-based program pause for a very long time when concurrent garbage collection is enabled
4051 972848 FIX: A minidump file generation is slow and the size of the file is larger than expected when the information that the file collects is not of the MiniDumpWithFullMemory type in the .NET Framework 2.0
4044 970924 FIX: The performance of applications that use the CreateType method decrease as you add more type objects to a dynamic assembly module in the .NET Framework 2.0 SP2
4043 971988 FIX: The CPU usage increases significantly when you run a .NET Framework 2.0-based Multi-AppDomain application that uses objects whose finalizers start ThreadPool methods
4036 971030 FIX: An access violation occurs when you run a .NET Framework 2.0-based application that has a virtual call the IList<T>, IEnumerable<T>, or ICollection<T> interface in an LCG method
4034 970510 FIX: A TypeLoadException exception occurs when you run a .NET Framework 3.5 SP1-based application
4022 968760 A managed application has a high number of thread handles and of event handles in the Microsoft .NET Framework 2.0
4018 968249 FIX: An incorrect instance size is generated when you use the Type Library Exporter to generate a type library from a CLR assembly in the .NET Framework 2.0 Service Pack 2
4016 967812 A hotfix is available that updates some properties in the System.Globalization.RegionInfo class for Slovakia, for Slovenia, and for Turkey
4013 967615 FIX: A .NET Framework 2.0 SP2-based application or a .NET Framework 3.5 SP1-based application does not correctly dispose of safe handle objects that were created by the WindowsIdentity object
4005 963676 FIX: The CLR fails with a fatal execution engine error, and a crash occurs when you run an application by using the .NET Framework 2.0 Service Pack 2
4001 961881 FIX: An access violation occurs when you start an application that runs on the CLR
4001 961870 FIX: A memory leak occurs when you run an application that requires the CLR to load a mixed-mode assembly in the .NET Framework 2.0 Service Pack 2
4001 961885 FIX: You receive an Access Violation error when you run a CLR application that calls the XslCompiledTransform.Transform method
3623 2518864 MS11-044: Description of the security update for the .NET Framework 3.5 Service Pack 1 and .NET Framework 2.0 Service Pack 2 on Windows XP Service Pack 3 and on Windows Server 2003 Service Pack 2: June 14, 2011
(GDR version)
3620 2446704 MS11-028: Description of the security update for the .NET Framework 3.5 Service Pack 1 and the .NET Framework 2.0 Service Pack 2 on Windows Server 2003 and Windows XP: April 12, 2011
(GDR version)
3615 983583 MS10-060: Description of the security update for the .NET Framework 3.5 Service Pack 1 and .NET Framework 2.0 Service Pack 2 on Windows Server 2003 and Windows XP: August 10, 2010
(GDR Version)
3615 983588 MS10-060: Description of the security update for the .NET Framework 2.0 Service Pack 2 and the .NET Framework 3.5 Service Pack 1 on Windows Vista Service Pack 1 and on Windows Server 2008: August 10, 2010
3607 976569 Description of the .NET Framework 2.0 SP2 forward compatibility update for Windows XP and for Windows Server 2003
(GDR version)
3603 974417 MS09-061: Description of the security update for the Microsoft .NET Framework 2.0 Service Pack 2 and the Microsoft .NET Framework 3.5 Service Pack 1: October 13, 2009
(GDR version)
3082 958481 List of the issues that are addressed by the Application Compatibility Update for the .NET Framework 2.0 SP2

(on Windows XP, Windows Server 2003 and Windows 2000)
3074 958481 List of the issues that are addressed by the Application Compatibility Update for the .NET Framework 2.0 SP2

(on Windows Vista and Windows Server 2008)
3071 958129 FIX: Error message when you click Debug and attach Visual Studio 2008 as the debugger: "A buffer overrun has occurred in mscorsvw.exe which has corrupted the program's internal state"
3068 957543
FIX: An application that serializes and deserializes a generic class that has at least one static member fails on a computer that is running the .NET Framework 3.5 Service Pack 1
3068 957542
FIX: On a computer that is running the .NET Framework 3.5 Service Pack 1, the JIT compiler and the Native Image Generator (Ngen.exe) that use the Mscorjit.dll file may generate incorrect code
3068 957541
FIX: On a computer that has the .NET Framework 3.5 Service Pack 1 installed, an exception is thrown when an application calls the GetOptionalCustomModifiers method or the GetRequiredCustomModifiers method on a ParameterInfo object of a generic interface
3053 951847 Microsoft .NET Framework 3.5 Service Pack 1
1882 983582 MS10-060: Description of the security update for the .NET Framework 3.5 on Windows Server 2003 and Windows XP: August 10, 2010
1882 983587 MS10-060: Description of the security update for the .NET Framework 2.0 Service Pack 1 and the .NET Framework 3.5 on Windows Vista Service Pack 1 and Windows Server 2008: August 10, 2010
1873 974291 MS09-061: Description of the security update for the Microsoft .NET Framework 2.0 Service Pack 1 on Windows Vista Service Pack 1 and Windows Server 2008: October 13, 2009
1823 950986 FIX: In the .NET Framework 2.0 Service Pack 1, the ModuleBuilder.GetTypeToken method returns an incorrect token
1812 947148 FIX: Incorrect methods are called when you call some COM APIs that are included in a .NET Framework 2.0-based 64-bit application
1434 n/a Windows Vista and Windows Server 2008
1433 945757 Microsoft .NET Framework 2.0 SP1 (included with .NET Framework 3.5)
1003 974468 MS09-061: Description of the security update for the Microsoft .NET Framework 2.0 on Windows Vista 32-bit edition and Windows Vista 64-bit edition: October 13, 2009
983 946927 FIX: An installation may fail with error 1935 when an .msi file tries to install many policy files on a computer that has the .NET Framework 2.0 installed

939

943412

You may experience delays when an operating system shuts down if the computer is running a managed service together with the .NET Framework 2.0

930

942708

FIX: You may receive a "SerializationException" exception when you use a class that implements the "INotifyPropertyChanged" interface in an application that is built on the .NET Framework 2.0

926

942084

FIX: Error message if you use the "CspParameters" class to programmatically set a password in an application that is built on the .NET Framework 2.0: "Incorrect PIN"

926

942027

FIX: You may notice that the memory load is very high when you run an application that is built on the .NET Framework 2.0
915 940900 FIX: You receive the NullReferenceException exception when you call the String.IsNullOrEmpty function in an application that is built on the .NET Framework 2.0
888 935904 FIX: You receive the System.IndexOutOfRangeException exception error when you use a native image on an x64-based computer in the Microsoft .NET Framework 2.0
885 937780 FIX: Error message when you use a smart card CSP together with the "RSACryptoServiceProvider.SignData" method in the .NET Framework 2.0
879 936757 FIX: A deadlock may occur when two threads call a fusion API to access the same assembly in the .NET Framework 2.0
878 936798 FIX: You may experience slow performance when you call certain X509Certificate2 constructors on a computer that is running the .NET Framework 2.0
876 936707 FIX: A .NET Framework 2.0 managed application that has an Authenticode signature takes longer than usual to start
873 936233 FIX: You may not obtain the correct value from the logical operation stack when you use the System.Diagnostics.Trace.CorrelationManager.LogicalOperationStack property in the .NET Framework 2.0
832 928365 Description of the security update for the .NET Framework 2.0 for Windows Server 2003, Windows XP, and Windows 2000: July 10, 2007
832 929916 Description of the security update for the .NET Framework 2.0 for Windows Vista: July 10, 2007
827 935678 FIX: You receive an E_INVALIDARG exception when you call the IDispatchEx::GetDispID method on a managed COM component in the Microsoft .NET Framework 2.0
821 934334 FIX: A memory leak occurs when a managed application uses a platform invoke call to call an unmanaged function in the .NET Framework 2.0
821 934593 FIX: Random values may be written to the float parameters of some functions in a custom application that you create by using the .NET Framework 2.0
821 934603 FIX: A method does not throw a custom exception type in the .NET Framework 2.0
796 931338 FIX: Error message when you use DEVPATH environment variables in a .NET Framework 2.0 ASP.NET Web application: "Could not load file or assembly '<AssemblyName>' or one of its dependencies"
789 930771 FIX: The managed heap becomes corrupted when you run a program that is built by using the Microsoft .NET Framework 2.0
762   Microsoft .NET Framework 2.0 included with Windows Vista
255 929688 FIX: A NullReferenceException error occurs when you run a .NET Framework 2.0 program
255 929425 FIX: A memory leak may occur when you call a C DLL from a C# class that includes strings in the .NET Framework 2.0
250 929023 FIX: A FileNotFoundException exception may occur when you run a .NET Framework 2.0 application that uses no-touch deployment on a Web server that is URL case-sensitive
248 928382 FIX: Error message when you use the MSIL Assembler (Ilasm.exe) to compile a Visual Studio project: "Invalid TypeDefID of exported type"
247 928870 FIX: An exception is not handled correctly when you use a try-catch block to handle an exception from multi-threads in the .NET Framework 2.0
241 926997 FIX: Error message when a COM client calls a managed COM component to expose events in the .NET Framework 2.0: "0x80040201 - An event was unable to invoke any of the subscribers"
238 928569 FIX: The first CLR thread pool worker thread is never initialized for COM+ in an ASP.NET Web application that is configured to run under the .NET Framework 2.0
236 926595 FIX: Server garbage collector threads may enter an endless loop condition in the .NET Framework 2.0
235 926776 A hotfix rollup package is available that resolves the problems that are described in KB articles 913297, 913393, 918995, and 924895
232 927146 FIX: A .NET Framework 2.0-based application may experience an ArgumentNullException exception and may exit unexpectedly
229 926660 FIX: Error message when you run an application in the .NET Framework 2.0: "System.IO.FileNotFoundException"
226 926594 FIX: The ThreadPoolMgr::WorkerThreadStart process may become locked in a loop condition in a .NET Framework 2.0-based application, and CPU utilization may increase to 100 percent
226 926596 FIX: A Microsoft .NET Framework 2.0-based application may crash during the garbage collection process when you use the Native Image Generator tool and a generic method
208 924895 FIX: An application that is based on the .NET Framework 2.0 may crash unexpectedly
201 923781 FIX: You may encounter a System.NullReferenceException exception when you call a COM interface method in the .NET Framework 2.0
198 924289 FIX: The application process may unexpectedly stop when you run a managed application that is based on the .NET Framework 2.0, or the server may shut down when you run managed code in SQL Server 2005
190 923326 FIX: The call stack is missing frames when you debug a .NET Framework 2.0 application that uses COM interoperability
187 923319 FIX: Error message when you compile MSIL code into an executable program in the .NET Framework 2.0: "IndexOutOfRangeException"
187 923325 FIX: When you use the Native Image Generator (Ngen.exe) in the .NET Framework 2.0, the size of the stack frames increases significantly
186 923299 FIX: Sos.dll leaks memory when you use an external debugger tool to debug an application in the .NET Framework 2.0
168 921118 FIX: Error message when you try to compile a large intermediate language file by using the Ilasm.exe tool in the .NET Framework 2.0: "Duplicate global label '_MF_LIT_530223'"
166 917868 FIX: An exception is not raised to the managed caller when you implement a custom marshaler in a .NET Framework 2.0 application
166 918426 FIX: A Visual C# 2005 project may take significantly longer to compile after you port the project from Visual C# .NET 2003
166 921217 FIX: A deadlock may occur when you use COM interop cross-context interface marshaling in the .NET Framework 2.0
158 919514 FIX: When you use the MSIL Assembler in the .NET Framework 2.0 to generate a PE file from the MSIL code, the PE file may close unexpectedly, and you may receive an access violation error message
109 918642 FIX: A .NET Framework 2.0-based application may require read/write permissions to a registry key even though the application only has to read the registry key
104 918254 FIX: A .NET Framework 2.0-based application may not be able to associate a private key with an X509Cetificate2 object
103 917507 FIX: JIT compilation may take much longer when you run a .NET Framework 2.0 application on a 64-bit computer
101 918102 FIX: The common language runtime throws ThreadAbortException exceptions when you call the Thread.Abort method to stop an ASP.NET request in the .NET Framework 2.0
100 917559 FIX: The debugger moves to the next .line directive when you set a breakpoint on a statement and the statement is related to a .line directive that does not contain a column range in the .NET Framework 2.0
98 917882 FIX: A synchronized method that has security callouts may not save a return value after control returns to the calling function in an application that is built by using the 64-bit version of the .NET Framework 2.0
94 917495 FIX: You may receive an OutOfMemoryException exception when you run a .NET Framework 2.0-based application
94 917493 FIX: Internet Explorer may freeze when you click a link to start a .NET Framework 2.0 client application in Internet Explorer and another file download is already in progress
87 915430 FIX: Not all paths that are specified in the DEVPATH environment variable will be considered by the .NET binding infrastructure (fusion) in the .NET Framework 2.0
87 917316 FIX: A regeneration of the 32nd Ngen image may not trigger a recompilation of the Ngen image when you use the Native Image Generator in managed code on a computer that is running the .NET Framework 2.0
86 915980 FIX: You may receive a "security exception" error message on a Windows 2000-based or Windows Server 2003-based computer that is running an ASP.NET 2.0-based application
86 915980 FIX: You may receive a "security exception" error message on a Windows 2000-based or Windows Server 2003-based computer that is running an ASP.NET 2.0-based application
74 915088 FIX: The .NET Framework 2.0 Thread.IsThreadPoolThread property always returns a value of false, and the SQL Server 2005 Reporting Services log file grows uncontrollably
71 913469 FIX: An application that is built on the Microsoft .NET Framework 2.0 may stop responding when you run the application on a 64-bit computer
63 913384 FIX: A .NET Framework 2.0 application that runs under a user account context when no user profile is associated with the user account context may crash, or you may receive an access violation error message 
63 913382 FIX: Windows Error Reporting crashes when the Sos.dll file is loaded in memory in the .NET Framework 2.0
56 912891 FIX: When you run a 64-bit application that was built by using the .NET Framework, you may notice that the application uses more memory than a similar 32-bit application
52 912365 FIX: An assembly that uses the System.Data.SqlXml namespace may be dynamically rebased and reloaded after you use the Native Image Generator (Ngen.exe) tool in the .NET Framework 2.0
42   Microsoft .NET Framework 2.0

That's it for now!

Doug