Windows 10: January 2017 Update for ASP.NET Core 1.1

Brink · Jan 30, 2017

We just released an update for ASP.NET Core 1.1 due to Microsoft Security Advisory 4010983. The advisory is for a vulnerability in ASP.NET Core MVC 1.1.0 that could allow denial of service. All of the information you need is in the advisory. A short summary is provided below.

Red Hat customers should consult the Red Hat advisory for the same issue.

How to Obtain the Update

The update is in the Microsoft.AspNetCore.Mvc.Core package. You need to upgrade your project to use version 1.1.1 (or later) of the package and then re-publish your application.

See below for examples of project file updates, for project.json and csproj formats. Note the updated Microsoft.AspNetCore.Mvc.Core package version.

Project.json

The dependencies section of an updated project.json file would look like the following (in its most minimal form).

Code: "dependencies": { "Microsoft.NETCore.App": { "version": "1.1.0", "type": "platform" }, "Microsoft.AspNetCore": "1.1.0", "Microsoft.AspNetCore.Mvc.Core": "1.1.1", }
Click to expand...

CSProj

An updated csproj file would look like the following (in its most minimal form):

Code: <Project Sdk="Microsoft.NET.Sdk.Web"> <PropertyGroup> <TargetFramework>netcoreapp1.1</TargetFramework> </PropertyGroup> <PropertyGroup> <PackageTargetFallback>$(PackageTargetFallback);portable-net45+win8+wp8+wpa81;</PackageTargetFallback> </PropertyGroup> <ItemGroup> <PackageReference Include="Microsoft.AspNetCore" Version="1.1.0" /> <PackageReference Include="Microsoft.AspNetCore.Mvc.Core" Version="1.1.1" /> </ItemGroup> </Project>[/quote] [/quote]
Source: January 2017 Update for ASP.NET Core 1.1 | .NET Blog

:)

NICK ADSL UK [MVP] · Jan 30, 2017

Microsoft Security Bulletin(s) for January 2018

January 2018 Security Updates
Release Date: January 09, 2018
The January security release consists of security updates for the following software:
Internet Explorer
Microsoft Edge
Microsoft Windows
Microsoft Office and Microsoft Office Services and Web Apps
SQL Server
ChakraCore
.NET Framework
.NET Core
ASP.NET Core
Adobe Flash
Please note the following information regarding the security updates:
Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog.
Starting in March 2017, a delta package will be available on the Microsoft Update Catalog for Windows 10 version 1607 and newer. This delta package contains just the delta changes between the previous month and the current release.
Updates for Windows RT 8.1 and Microsoft Office RT software are only available via Windows Update.
In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
After May 9, 2017, customers running Windows 10 version 1507 will no longer receive security and quality updates, with the exception of the Windows 10 2015 LTSB and the Windows 10 IoT Enterprise 2015 LTSB editions. Microsoft recommends that customers with
devices running other editions of Windows 10 version 1507 that are no longer supported update these devices to the latest version of Windows 10. For more information see Microsoft Knowledge Base Article 4015562.
Known Issues 4056890 4056891 4056892 4056893 4056888 4056895 4056898 4056894 4056897 4056896 4056899

{{windowTitle}}

Gerry C J Cornell · Jan 30, 2017

Failed to install KB3213986 and KB3206632

Matt

Has the computer not checked for updates since 26 January 2017?

Windows 10: January 2017 Update for ASP.NET Core 1.1

January 2017 Update for ASP.NET Core 1.1

January 2017 Update for ASP.NET Core 1.1

January 2017 Update for ASP.NET Core 1.1 - Similar Threads - January 2017 Update

.NET Core January 2020 Updates - 2.1.15, 3.0.2, and 3.1.1

Announcing .NET Core 3.1 Preview 1

Announcing .NET Core 3.0 Release Candidate 1

.NET Core January 2019 Updates - 2.1.7 and 2.2.1

Activation reset January 1

.NET Core January 2018 Update

Updating Visual Studio 2017 RC – .NET Core Tooling improvements

TFS 2017 Update 1 RC2

Announcing .NET Core, .NET Native and NuGet Updates in VS 2017 RC