.NET Framework January 2019 Security and Quality Rollup

Tara Overfield

Tara

Today, we are releasing the January 2019 Security and Quality Rollup.

Security

CVE-2019-0545 – Windows Security Feature Bypass Vulnerability

This security update resolves a vulnerability in Microsoft .NET Framework that may cause an information disclosure that allows bypassing Cross-origin Resource Sharing (CORS) configurations. An attacker who successfully exploits the vulnerability could retrieve from a web application content that’s normally restricted. This security update addresses the vulnerability by enforcing CORS configuration to prevent its bypass.

CVE-2019-0545

Getting the Update

The Security and Quality Rollup is available via Windows Update, Windows Server Update Services, Microsoft Update Catalog, and Docker.

Microsoft Update Catalog

You can get the update via the Microsoft Update Catalog. For Windows 10, .NET Framework updates are part of the Windows 10 Monthly Rollup.

The following table is for Windows 10 and Windows Server 2016+ versions.

Product VersionSecurity and Quality Rollup KB
Windows 10 1809 (October 2018 Update) Windows Server 2019 Catalog 4480056
.NET Framework 3.5, 4.7.24480056
Windows 10 1803 (April 2018 Update)Catalog 4480966
.NET Framework 3.5, 4.7.24480966
Windows 10 1709 (Fall Creators Update)Catalog 4480978
.NET Framework 3.5, 4.7.1, 4.7.24480978
Windows 10 1703 (Creators Update)Catalog 4480973
.NET Framework 3.5, 4.7, 4.7.1, 4.7.24480973
Windows 10 1607 (Anniversary Update) Windows Server 2016Catalog 4480961
.NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2<4480961
Windows 10 1507Catalog 4480962
.NET Framework 3.5, 4.6, 4.6.1, 4.6.2<4480962

The following table is for earlier Windows and Windows Server versions.

 

Product VersionSecurity and Quality Rollup KBSecurity Only Update KB
Windows 8.1 Windows RT 8.1 Windows Server 2012 R2Catalog 4481485Catalog 4481484
.NET Framework 3.5Catalog 4480064Catalog 4480086
.NET Framework 4.5.2Catalog 4480057Catalog 4480074
.NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2Catalog 4480054Catalog 4480071
Windows Server 2012Catalog 4481482Catalog 4481483
.NET Framework 3.5Catalog 4480061Catalog 4480083
.NET Framework 4.5.2Catalog 4480058Catalog 4480075
.NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2Catalog 4480051 Catalog 4480070
Windows 7 SP1 Windows Server 2008 R2 SP1Catalog 4481480Catalog 4481481
.NET Framework 3.5.1Catalog 4480063Catalog 4480085
.NET Framework 4.5.2Catalog 4480059Catalog 4480076
.NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2Catalog 4480055Catalog 4480072
Windows Server 2008Catalog 4481486Catalog 4481487
.NET Framework 2.0, 3.0Catalog 4480062Catalog 4480084
.NET Framework 4.5.2Catalog 4480059Catalog 4480076
.NET Framework 4.6Catalog 4480055Catalog 4480072

Docker Images

We are updating the following .NET Framework Docker images for today’s release:

Note: Look at the “Tags” view in each repository to see the updated Docker image tags.

Note: Significant changes have been made with Docker images recently. Please look at .NET Docker Announcements for more information.

Previous Monthly Rollups

The last few .NET Framework Monthly updates are listed below for your convenience:

0 comments

Comments are closed. Login to edit/delete your existing comments