Windows 10: .NET Core January 2018 Update

Brink · Jan 9, 2018

Today, we are releasing the .NET Core January 2018 Update. This includes .NET Core 1.0.9, 1.1.6 and 2.0.5.

Please leave feedback on the release in the comments below or at dotnet/core #1199.

Security

CVE-2018-0786 – Security Feature Bypass in X509 Certificate Validation

Microsoft is aware of a security vulnerability in the public versions of .NET Core where an attacker could present a certificate that is marked invalid for a specific use, but a component uses it for that purpose. This action disregards the Enhanced Key Usage tagging.

The security update addresses the vulnerability by ensuring that .NET Core components completely validate certificates.

CVE-2018-0786

CVE-2018-0764 – Denial of Service when parsing XML documents

Microsoft is aware of a Denial of Service vulnerability in all public versions of .NET core due to improper processing of XML documents. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET application. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to a .NET Core application.

The update addresses the vulnerability by correcting how .NET core handles XML document processing.

CVE-2018-0764

Getting the Update

The .NET Core January 2017 Update is available from the .NET Core download page.

You can always download the latest version of .NET Core at .NET Downloads.

Docker Images

.NET Docker images have been updated for today’s release. The following repos have been updated.

microsoft/dotnet

microsoft/dotnet-samples

microsoft/aspnetcore/

microsoft/aspnetcore-build/

Note: Look at the “Tags” view in each repository to see the updated Docker image tags.

Note: You must re-pull base images in order to get updates. The Docker client does not pull updates automatically.
Click to expand...

Source: .NET Core January 2018 Update | .NET Blog

:)

Michael Grolle · Jan 9, 2018

Windows 10 update crashes my computer

To quote an article from Forbes:

The good news is Microsoft has pulled the updates. For reference they are:

January 3, 2018 - KB4056897 (Security-only update)

January 9, 2018 - KB4056894 (Monthly Rollup)

January 3, 2018 - KB4056888 (OS Build 10586.1356)

January 3, 2018 - KB4056892 (OS Build 16299.192)

January 3, 2018 - KB4056891 (OS Build 15063.850)

January 3, 2018 - KB4056890 (OS Build 14393.2007)

January 3, 2018 - KB4056898 (Security-only update)

January 3, 2018 - KB4056893 (OS Build 10240.17735)

January 9, 2018 - KB4056895 (Monthly Rollup)

This isn’t much good for users already impacted and unable to switch on their PCs (there is no word how they will be helped at present), but it does limit the potential for future damage.

SparkyNC-[xboxvenue] · Jan 9, 2018

January 3, 2018 Security Update for Windows (KB4056892)

Official acknowledgement and announcement from Microsoft regarding this problem:

https://support.microsoft.com/en-us...security-update-block-for-some-amd-based-devi

"To prevent AMD customers from getting into an unbootable state, Microsoft will temporarily pause sending the following Windows operating system updates to devices with impacted AMD processors at this time:

January 3, 2018—KB4056897 (Security-only update)

January 9, 2018—KB4056894 (Monthly Rollup)

January 3, 2018—KB4056888 (OS Build 10586.1356)

January 3, 2018—KB4056892 (OS Build 16299.192)

January 3, 2018—KB4056891 (OS Build 15063.850)

January 3, 2018—KB4056890 (OS Build 14393.2007)

January 3, 2018—KB4056898 (Security-only update)

January 3, 2018—KB4056893 (OS Build 10240.17735)

January 9, 2018—KB4056895 (Monthly Rollup)"

Windows 10: .NET Core January 2018 Update

.NET Core January 2018 Update

.NET Core January 2018 Update

.NET Core January 2018 Update - Similar Threads - NET Core January

.NET Core January 2020 Updates - 2.1.15, 3.0.2, and 3.1.1

.NET Core January 2019 Updates - 2.1.7 and 2.2.1

.NET Core October 2018 Update - NET Core 1.0 and 1.1

.NET Core October 2018 Update now released

.NET Core September 2018 Update now available

.NET Core August 2018 Update now released

Not receiving January 2018 updates.

.NET Framework January 2018 Security and Quality Rollup

January 2018 Office Update Release