.NET Framework January 2019 Security and Quality Rollup

Tara Overfield

Tara

Today, we are releasing the January 2019 Security and Quality Rollup.

Security

CVE-2019-0545 – Windows Security Feature Bypass Vulnerability

This security update resolves a vulnerability in Microsoft .NET Framework that may cause an information disclosure that allows bypassing Cross-origin Resource Sharing (CORS) configurations. An attacker who successfully exploits the vulnerability could retrieve from a web application content that’s normally restricted. This security update addresses the vulnerability by enforcing CORS configuration to prevent its bypass.

CVE-2019-0545

Getting the Update

The Security and Quality Rollup is available via Windows Update, Windows Server Update Services, Microsoft Update Catalog, and Docker.

Microsoft Update Catalog

You can get the update via the Microsoft Update Catalog. For Windows 10, .NET Framework updates are part of the Windows 10 Monthly Rollup.

The following table is for Windows 10 and Windows Server 2016+ versions.

Product Version Security and Quality Rollup KB
Windows 10 1809 (October 2018 Update) Windows Server 2019 Catalog 4480056
.NET Framework 3.5, 4.7.2 4480056
Windows 10 1803 (April 2018 Update) Catalog 4480966
.NET Framework 3.5, 4.7.2 4480966
Windows 10 1709 (Fall Creators Update) Catalog 4480978
.NET Framework 3.5, 4.7.1, 4.7.2 4480978
Windows 10 1703 (Creators Update) Catalog 4480973
.NET Framework 3.5, 4.7, 4.7.1, 4.7.2 4480973
Windows 10 1607 (Anniversary Update) Windows Server 2016 Catalog 4480961
.NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2< 4480961
Windows 10 1507 Catalog 4480962
.NET Framework 3.5, 4.6, 4.6.1, 4.6.2< 4480962

The following table is for earlier Windows and Windows Server versions.

 

Product Version Security and Quality Rollup KB Security Only Update KB
Windows 8.1 Windows RT 8.1 Windows Server 2012 R2 Catalog 4481485 Catalog 4481484
.NET Framework 3.5 Catalog 4480064 Catalog 4480086
.NET Framework 4.5.2 Catalog 4480057 Catalog 4480074
.NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 Catalog 4480054 Catalog 4480071
Windows Server 2012 Catalog 4481482 Catalog 4481483
.NET Framework 3.5 Catalog 4480061 Catalog 4480083
.NET Framework 4.5.2 Catalog 4480058 Catalog 4480075
.NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 Catalog 4480051 Catalog 4480070
Windows 7 SP1 Windows Server 2008 R2 SP1 Catalog 4481480 Catalog 4481481
.NET Framework 3.5.1 Catalog 4480063 Catalog 4480085
.NET Framework 4.5.2 Catalog 4480059 Catalog 4480076
.NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 Catalog 4480055 Catalog 4480072
Windows Server 2008 Catalog 4481486 Catalog 4481487
.NET Framework 2.0, 3.0 Catalog 4480062 Catalog 4480084
.NET Framework 4.5.2 Catalog 4480059 Catalog 4480076
.NET Framework 4.6 Catalog 4480055 Catalog 4480072

Docker Images

We are updating the following .NET Framework Docker images for today’s release:

Note: Look at the “Tags” view in each repository to see the updated Docker image tags.

Note: Significant changes have been made with Docker images recently. Please look at .NET Docker Announcements for more information.

Previous Monthly Rollups

The last few .NET Framework Monthly updates are listed below for your convenience:

0 comments

Comments are closed. Login to edit/delete your existing comments