{"id":10116,"date":"2017-04-11T11:27:22","date_gmt":"2017-04-11T18:27:22","guid":{"rendered":"https:\/\/blogs.msdn.microsoft.com\/dotnet\/?p=10116"},"modified":"2021-09-30T10:20:39","modified_gmt":"2021-09-30T17:20:39","slug":"net-framework-april-2017-monthly-rollup","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/dotnet\/net-framework-april-2017-monthly-rollup\/","title":{"rendered":".NET Framework April 2017 Security and Quality Rollup"},"content":{"rendered":"

Update (2017\/05\/15):<\/strong>\u00a0Added Windows 10 entries to KB table.<\/span><\/p>\n

Update (2017\/05\/09):<\/strong> Known issue information added for the release.<\/span><\/p>\n

Update (2017\/04\/20):<\/strong> Known issue information added for the release.<\/p>\n

Today, we are releasing a new Security and Quality Rollup and Security Only Update for the .NET Framework. You can read the\u00a0April 2017 Security Updates Release Notes<\/a> to learn about all changes being released today.<\/p>\n

Known issue with the release:\u00a0\u201cPrivilege not held\u201d error with PowerShell \u201cstop-computer\u201d command: Workaround after April 2017 security updates from CVE-2017-0160<\/a>.<\/p>\n

<\/a>Security<\/h2>\n

Microsoft Common Vulnerabilities and Exposures CVE17-0160<\/a><\/p>\n

A remote code execution vulnerability exists when the Microsoft .NET Framework fails to properly validate input before loading libraries. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. To exploit the vulnerability, an attacker would first need to access the local system with the ability to execute a malicious application. The security update addresses the vulnerability by correcting how .NET validates input on library load.<\/p>\n

Note: You can also search for the security update\u00a0at Security TechCenter<\/a>. Search for “CVE”\u00a017-0160<\/strong>.<\/p>\n

<\/a>Quality and Reliability<\/h2>\n

There are no quality and reliability changes this month.<\/p>\n

<\/a>Getting the Update<\/h2>\n

The Security and Quality Rollup is available via Windows Update, Windows Server Update Services and Microsoft Update Catalog. The Security Only Update is available via Windows Server Update Services and Microsoft Update Catalog. The Windows 10 updates<\/a> are integrated with the Windows 10 Monthly Update, available via Windows Update.<\/p>\n

Docker Images<\/h3>\n

The Windows ServerCore<\/a>,\u00a0IIS<\/a>,\u00a0.NET Framework<\/a>, and ASP.NET<\/a>\u00a0Docker images have been updated to include the Monthly Rollup. Pulling the latest image will update your local Docker image cache.<\/p>\n

Downloading KBs from Microsoft Update Catalog<\/h3>\n

See the table below to learn about\u00a0version applicability and more detailed release-specific information.\u00a0See\u00a0.NET Framework Monthly Rollups Explained<\/a>\u00a0for an explanation on how to use this table to download patches from Microsoft Update Catalog.<\/p>\n\n\n\n\n\n<\/tr>\n\n\n\n<\/tr>\n\n\n\n<\/tr>\n\n\n\n<\/tr>\n\n\n\n<\/tr>\n\n\n\n\n\n<\/tr>\n\n\n\n\n\n<\/tr>\n\n\n\n\n\n<\/tr>\n\n\n\n
Product Version<\/th>\nSecurity and Quality Rollup KB<\/th>\nSecurity Rollup KB<\/th>\n<\/tr>\n<\/thead>\n
Windows 10 Creators Update<\/strong><\/td>\nCatalog<\/a>\n4015583<\/a><\/strong><\/td>\nN\/A<\/td>\n<\/tr>\n
.NET Framework 4.7<\/td>\n4015583<\/a><\/td>\n<\/td>\n<\/tr>\n
.NET Framework 3.5<\/td>\n4015583<\/a><\/td>\n<\/td>\n<\/tr>\n
Windows 10 Anniversary Update\nWindows Server 2016<\/strong><\/td>\nCatalog<\/a>\n4015217<\/a><\/strong><\/td>\nN\/A<\/td>\n<\/tr>\n
.NET Framework 4.6.2<\/td>\n4015217<\/a><\/td>\n<\/td>\n<\/tr>\n
.NET Framework 3.5<\/td>\n4015217<\/a><\/td>\n<\/td>\n<\/tr>\n
Windows 10 1511<\/strong><\/td>\nCatalog<\/a>\n4015219<\/a><\/strong><\/td>\nN\/A<\/td>\n<\/tr>\n
.NET Framework 4.6.1<\/td>\n4015219<\/a><\/td>\n<\/td>\n<\/tr>\n
.NET Framework 3.5<\/td>\n4015219<\/a><\/td>\n<\/td>\n<\/tr>\n
Windows 10 1507<\/strong><\/td>\nCatalog<\/a>\n4015221<\/a><\/strong><\/td>\nN\/A<\/td>\n<\/tr>\n
.NET Framework 4.6<\/td>\n4015221<\/a><\/td>\n<\/td>\n<\/tr>\n
.NET Framework 3.5<\/td>\n4015221<\/a><\/td>\n<\/td>\n<\/tr>\n
Windows 8.1\nWindows Server 2012 R2<\/strong><\/td>\nCatalog<\/a>\n4014983<\/a><\/strong><\/td>\nCatalog<\/a>\n4014987<\/a><\/strong><\/td>\n<\/tr>\n
.NET Framework 4.6.2<\/td>\n4014546<\/a><\/td>\n4014550<\/a><\/td>\n<\/tr>\n
.NET Framework 4.6, 4.6.1<\/td>\n4014551<\/a><\/td>\n4014556<\/a><\/td>\n<\/tr>\n
.NET Framework 4.5.2<\/td>\n4014555<\/a><\/td>\n4014562<\/a><\/td>\n<\/tr>\n
.NET Framework 3.5<\/td>\n4014567<\/a><\/td>\n4014574<\/a><\/td>\n<\/tr>\n
Windows Server 2012<\/strong><\/td>\nCatalog<\/a>\n4014982<\/a><\/strong><\/td>\nCatalog<\/a>\n4014986<\/a><\/strong><\/td>\n<\/tr>\n
.NET Framework 4.6.2<\/td>\n4014545<\/a><\/td>\n4014549<\/a><\/td>\n<\/tr>\n
.NET Framework 4.6, 4.6.1<\/td>\n4014548<\/a><\/td>\n4014560<\/a><\/td>\n<\/tr>\n
.NET Framework 4.5.2<\/td>\n4014557<\/a><\/td>\n4014564<\/a><\/td>\n<\/tr>\n
.NET Framework 3.5<\/td>\n4014563<\/a><\/td>\n4014572<\/a><\/td>\n<\/tr>\n
Windows 7\nWindows Server 2008 R2<\/strong><\/td>\nCatalog<\/a>\n4014981<\/a><\/strong><\/td>\nCatalog<\/a>\n4014985<\/a><\/strong><\/td>\n<\/tr>\n
.NET Framework 4.6.2<\/td>\n4014547<\/a><\/td>\n4014552<\/a><\/td>\n<\/tr>\n
.NET Framework 4.6, 4.6.1<\/td>\n4014553<\/a><\/td>\n4014558<\/a><\/td>\n<\/tr>\n
.NET Framework 4.5.2<\/td>\n4014559<\/a><\/td>\n4014566<\/a><\/td>\n<\/tr>\n
.NET Framework 3.5.1<\/td>\n4014565<\/a><\/td>\n4014573<\/a><\/td>\n<\/tr>\n
Windows Vista\nWindows Server 2008<\/strong><\/td>\nCatalog<\/a>\n4014984<\/a><\/strong><\/td>\nCatalog<\/a>\n4014988<\/a><\/strong><\/td>\n<\/tr>\n
.NET Framework 4.6<\/td>\n4014553<\/a><\/td>\n4014558<\/a><\/td>\n<\/tr>\n
.NET Framework 4.5.2<\/td>\n4014559<\/a><\/td>\n4014566<\/a><\/td>\n<\/tr>\n
.NET Framework 2.0<\/td>\n4014561<\/a><\/td>\n4014571<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

See .NET Framework Deployment tables<\/a> for detailed deployment information on the release.<\/p>\n

Known Issues<\/h2>\n

The April 2017 Monthly Update contained a bug that caused the PowerShell Stop-Computer command to stop correctly functioning<\/a>. This bug has since been fixed. You can get the fix in the following ways:<\/p>\n

Using Windows 10<\/strong><\/p>\n