Last week, I blogged about an ASP.NET security vulnerability that affected TFS: http://blogs.msdn.com/b/bharry/archive/2010/09/23/security-vulnerability.aspx
Yesterday, the ASP.NET team released a patch to fix the vulnerability: http://weblogs.asp.net/scottgu/archive/2010/09/28/asp-net-security-update-now-available.aspx
You can install the ...