{"id":603,"date":"2012-10-09T14:10:54","date_gmt":"2012-10-09T14:10:54","guid":{"rendered":"https:\/\/blogs.msdn.microsoft.com\/odatateam\/2012\/10\/09\/important-security-advisory-2749655-affects-wcf-ds\/"},"modified":"2012-10-09T14:10:54","modified_gmt":"2012-10-09T14:10:54","slug":"important-security-advisory-2749655-affects-wcf-ds","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/odata\/important-security-advisory-2749655-affects-wcf-ds\/","title":{"rendered":"Important: Security Advisory 2749655 affects WCF DS"},"content":{"rendered":"<h3>What is the advisory?<\/h3>\n<p>Microsoft just released <a href=\"https:\/\/technet.microsoft.com\/en-us\/security\/advisory\/2749655\" target=\"_blank\">Security Advisory 2749655<\/a>, which addresses \u201can issue involving specific digital certificates that were generated by Microsoft without the proper timestamp attributes.\u201d If you are using WCF Data Services 5.0.1 or have previously installed the WCF Data Services MSI from the download center, you may run into this issue.<\/p>\n<h3>Does this issue create a security vulnerability?<\/h3>\n<p>The advisory notes that \u201cthis is not a security issue\u201d, meaning that this issue is not creating a vulnerability. However, there could be a combination of factors which might cause a WCF Data Service to stop working, or cause our installer to fail to install. Microsoft recommends that you \u201capply the KB 2749655 update and any rereleased updates addressing this issue immediately\u201d.<\/p>\n<h3>I installed WCF Data Services 5.0 or 5.0.1. What do I need to do?<\/h3>\n<p>There are up to three actions WCF Data Services customers should take:<\/p>\n<ol>\n<li>We recommend that you <a href=\"http:\/\/support.microsoft.com\/kb\/2749655\" target=\"_blank\">install the KB referenced above<\/a><\/li>\n<li>If you installed the WCF Data Services 5.0 MSI before Sept 26, 2012, you should <a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=29306\" target=\"_blank\">download and install the replacement version of this MSI<\/a><\/li>\n<li>If you have a dependency on the WCF Data Services NuGet package, we recommend that you upgrade to 5.0.2; this should not make any functional difference since we only expect people will run into problems on install\/uninstall, however updating these DLLs would ensure that you have validly signed DLLs<\/li>\n<\/ol>\n<p>Our NuGet packages are:<\/p>\n<ul>\n<li><a href=\"https:\/\/nuget.org\/packages\/Microsoft.Data.Services.Client\/5.0.2\">Microsoft.Data.Services.Client<\/a> (WCF Data Services Client) <\/li>\n<li><a href=\"http:\/\/nuget.org\/packages\/Microsoft.Data.Services\/5.0.2\">Microsoft.Data.Services<\/a> (WCF Data Services Server) <\/li>\n<li><a href=\"http:\/\/nuget.org\/packages\/Microsoft.Data.OData\/5.0.2\">Microsoft.Data.OData<\/a> (ODataLib) <\/li>\n<li><a href=\"http:\/\/nuget.org\/packages\/Microsoft.Data.Edm\/5.0.2\">Microsoft.Data.Edm<\/a> (EdmLib) <\/li>\n<li><a href=\"http:\/\/nuget.org\/packages\/System.Spatial\/5.0.2\">System.Spatial<\/a> (System.Spatial)<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>What is the advisory? Microsoft just released Security Advisory 2749655, which addresses \u201can issue involving specific digital certificates that were generated by Microsoft without the proper timestamp attributes.\u201d If you are using WCF Data Services 5.0.1 or have previously installed the WCF Data Services MSI from the download center, you may run into this issue. [&hellip;]<\/p>\n","protected":false},"author":512,"featured_media":3253,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[78],"class_list":["post-603","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-odata","tag-wcf-data-services"],"acf":[],"blog_post_summary":"<p>What is the advisory? Microsoft just released Security Advisory 2749655, which addresses \u201can issue involving specific digital certificates that were generated by Microsoft without the proper timestamp attributes.\u201d If you are using WCF Data Services 5.0.1 or have previously installed the WCF Data Services MSI from the download center, you may run into this issue. [&hellip;]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/odata\/wp-json\/wp\/v2\/posts\/603","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/odata\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/odata\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/odata\/wp-json\/wp\/v2\/users\/512"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/odata\/wp-json\/wp\/v2\/comments?post=603"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/odata\/wp-json\/wp\/v2\/posts\/603\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/odata\/wp-json\/wp\/v2\/media\/3253"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/odata\/wp-json\/wp\/v2\/media?parent=603"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/odata\/wp-json\/wp\/v2\/categories?post=603"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/odata\/wp-json\/wp\/v2\/tags?post=603"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}