Windows 10: .NET Framework October 2019 Security and Quality Rollup for Windows 10 Win Update

Brink · Oct 9, 2019

Today, we are releasing the October 2019 Security and Quality Rollup and Cumulative Updates for .NET Framework.

Security

No new security fixes. See September 2019 Security and Quality Rollup for the latest security updates.

Quality and Reliability

This release contains the following quality and reliability improvements.

BCL1

Addresses an issue that affects thread contention that occurs in BinaryFormatter.GetTypeInformation by using ConcurrentDictionary to handle multi-thread access.

CLR2

Addresses an issue that might cause handle leaks to occur in scenarios that repeatedly load and unload Mscoree.dll.

Addresses rare cases that incorrectly cause process termination instead of delivering the expected NullReferenceException result.

WPF3

Addresses an issue that affects a WPF ComboBox (or any Selector) within a DataGrid cell that can try to change its selection properties (SelectedIndex, SelectedItem, SelectedValue) when the cell’s data item is re-virtualized or removed from the underlying collection. This can occur if the Selector’s ItemSource property is data bound through the cell’s DataContext setting. Depending on the virtualization mode and the bindings that are declared for the selection properties, the symptoms can include unexpected changes (to null) of the data item’s properties, and unexpected displays (as null) of other data items that re-use the UI that was previously attached to the re-virtualized item.

Addresses an issue in which a WPF TextBox or RichTextBox element that has spell checking enabled crashes and returns an “ExecutionEngineException” error in some situations, including inserting text near a hyperlink.

Addresses an issue that affects Per-Monitor Aware WPF applications that host System-Aware or Unaware child windows and that run on .NET Framework 4.8. This .NET version occasionally crashes and returns a “System.Collections.Generic.KeyNotFoundException” exception.

1 Base Class Library (BCL)
2 Common Language Runtime (CLR)
3 Windows Presentation Foundation (WPF)

Getting the Update

The Security and Quality Rollup is available via Windows Update, Windows Server Update Services, and Microsoft Update Catalog.

Microsoft Update Catalog

You can get the update via the Microsoft Update Catalog. For Windows 10, NET Framework 4.8 updates are available via Windows Update, Windows Server Update Services, Microsoft Update Catalog. Updates for other versions of .NET Framework are part of the Windows 10 Monthly Cumulative Update.

Note: Customers that rely on Windows Update and Windows Server Update Services will automatically receive the .NET Framework version-specific updates. Advanced system administrators can also take use of the below direct Microsoft Update Catalog download links to .NET Framework-specific updates. Before applying these updates, please ensure that you carefully review the .NET Framework version applicability, to ensure that you only install updates on systems where they apply. The following table is for Windows 10 and Windows Server 2016+ versions.

Product Version Cumulative Update Windows 10 1903 and Windows Server, version 1903 Catalog 4524100 .NET Framework 3.5, 4.8 Catalog 4515871 Windows 10 1809 (October 2018 Update) Windows Server 2019 Catalog 4524099 .NET Framework 3.5, 4.7.2 Catalog 4515855 .NET Framework 3.5, 4.8 Catalog 4515843 Windows 10 1803 (April 2018 Update) .NET Framework 3.5, 4.7.2 Catalog 4520008 .NET Framework 4.8 Catalog 4524098 Windows 10 1709 (Fall Creators Update) .NET Framework 3.5, 4.7.1, 4.7.2 Catalog 4520004 .NET Framework 4.8 Catalog 4524097 Windows 10 1703 (Creators Update) .NET Framework 3.5, 4.7, 4.7.1, 4.7.2 Catalog 4520010 .NET Framework 4.8 Catalog 4524096 Windows 10 1607 (Anniversary Update) Windows Server 2016 .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2 Catalog 4519998 .NET Framework 4.8 Catalog 4524095
Click to expand...

Read more: https://devblogs.microsoft.com/dotne...uality-rollup/

See also: Cumulative Update KB4524100 .NET Framework 3.5, 4.8 Windows 10 Oct. 8

:)

Brink · Oct 9, 2019

.NET Framework July 2017 Security and Quality Rollup

Today, we are releasing a new Security and Quality Rollup and Security Only Update for the .NET Framework. Today’s update applies to Windows 10 and Windows Server 2016.

Security
Microsoft Common Vulnerabilities and Exposures CVE-2017-8585

A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application.

A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET application.

The update addresses the vulnerability by correcting how the .NET web application handles web requests.

More info: Microsoft Common Vulnerabilities and Exposures CVE-2017-0248.

Quality and Reliability
There are no quality and reliability changes this month.

Getting the Update
The Security and Quality Rollup is available via Windows Update, Windows Server Update Services and Microsoft Update Catalog. The Security Only Update is not available for Windows 10. The updates for Windows 10 are integrated with the Windows 10 Monthly Update.

You can learn more about the releases from the table below.

[table][tr]Windows Version .NET Version Rollup KB Security-only KB [/tr] [tr][td]Windows 10 Update 1703 (Creators Update)[/td] [td].NET Framework 3.5 and 4.7[/td] [td]4025342[/td] [td]N/A[/td] [/tr] [tr][td]Windows 10 Update 1607 (Anniversary Update) Windows Server 2016[/td] [td].NET Framework 3.5, 4.6.2 and 4.7[/td] [td]4025339[/td] [td]N/A[/td] [/tr] [tr][td]Windows 10 Update 1511[/td] [td].NET Framework 3.5 and 4.6.1[/td] [td]4025344[/td] [td]N/A[/td] [/tr] [tr][td]Windows 10 Update 1507[/td] [td].NET Framework 3.5 and 4.6[/td] [td]4025338[/td] [td]N/A[/td] [/tr] [/table]

Docker Images
The following Docker images have been updated with today’s release.
You must explicitly re-pull images to update your local Docker image cache, for example with docker pull microsoft/dotnet-framework:4.7. The Docker client does not pull updated base images automatically.

.NET Framework
The .NET Framework Docker images have been updated to include the .NET Framework July Security and Quality Rollup and have been rebased on top of the latest microsoft/windowsservercore base image (released today).

microsoft/dotnet-framework

Note: The update to the microsoft/wcf and microsoft/aspnet images are still pending.

.NET Core
The .NET Core Docker images have been updated to rebase on top of the latest microsoft/nanoserver base image (released today). .NET Core has not been updated.

microsoft/aspnetcore

microsoft/aspnetcore-build

microsoft/dotnet

Previous Monthly Rollups
The last few .NET Framework Monthly updates are listed below for your convenience:

June 2017 Cumulative Quality Update for Windows 10

May 2017 Cumulative Quality Update for Windows 10

May 2017 Security and Quality Rollup

April 2017 Security and Quality Rollup

Previously released security and quality updates are included in today’s release. You can read the .NET Framework Monthly Rollups Explainedto learn more about how the .NET Framework is updated.
Click to expand...

Source: .NET Framework July 2017 Security and Quality Rollup | .NET Blog

Brink · Oct 9, 2019

.NET Framework June 2018 Security and Quality Rollup

Today, we are releasing the June 2018 Security and Quality Rollup.

Security

No new security fixes. See .NET Framework May 2018 Security and Quality Rollup for the latest security updates.

Quality and Reliability

This release contains the following quality and reliability improvements.

CLR

Fix the binary serialization compatibility issue for CultureAwareComparer class [620693]

Note: Additional information on these improvements is not available. The VSTS bug number provided with each improvement is a unique ID that you can give Microsoft Customer Support, include in StackOverflow commentsor use in web searches.

Getting the Update

The Security and Quality Rollup is available via Windows Update, Windows Server Update Services, and Microsoft Update Catalog.

Microsoft Update Catalog

You can get the update via the Microsoft Update Catalog. For Windows 10, .NET Framework updates are part of the Windows 10 Monthly Rollup.

[table][tr]Product Version Security and Quality Rollup KB [/tr] [tr][td]Windows 10 1709 (Fall Creators Update)[/td] [td]Catalog 4284819[/td] [/tr] [tr][td].NET Framework 3.5[/td] [td]4284819[/td] [/tr] [tr][td].NET Framework 4.7.1[/td] [td]4284819[/td] [/tr] [tr][td]Windows 10 1703 (Creators Update)[/td] [td]Catalog 4284874[/td] [/tr] [tr][td].NET Framework 3.5[/td] [td]4284874[/td] [/tr] [tr][td].NET Framework 4.7, 4.7.1[/td] [td]4284874[/td] [/tr] [tr][td]Windows 10 1607 (Anniversary Update) Windows Server 2016[/td] [td]Catalog 4284880[/td] [/tr] [tr][td].NET Framework 3.5[/td] [td]4284880[/td] [/tr] [tr][td].NET Framework 4.6.2, 4.7, 4.7.1[/td] [td]4284880[/td] [/tr] [/table]
Click to expand...

Source: .NET Framework June 2018 Security and Quality Rollup | .NET Blog

Brink · Oct 9, 2019

.NET Framework October 2017 Security and Quality Rollup

Today, we are releasing the October 2017 Security and Quality Rollup.

The update applies to all supported Windows versions. It includes a known issue for Windows 10 1507 (see below).

Security

This release contains no new security updates.

Quality and Reliability

This release contains the following quality and reliability improvements.

WPF

WPF fails to load resources if two versions of the same assembly are loaded. [378607]

WPF consumes high % of CPU in Visual Studio when console session not active. [391184]

Visual Studio fails due to “Unable to load DLL ‘PenIMC.dll’” error. [452476]

Application crash due to call into DWrite. [453529]

TargetFrameworkName is null with mixed mode application. [425074]

Event leak with WPF application on touch screen monitors on Windows 10. [434946]

Rendering of WPF UI Elements is disabled in Windows Services. [497334]

Note: Additional information on these improvements is not available. The VSTS bug number provided with each improvement is a unique ID that you can give Microsoft Customer Support, include in StackOverflow commentsor use in web searches.

Getting the Update

The Security and Quality Rollup is available via Windows Update, Windows Server Update Services, Microsoft Update Catalog, and Docker.

Microsoft Update Catalog

You can get the update via the Microsoft Update Catalog. For Windows 10, .NET Framework updates are part of the Windows 10 Monthly Rollup.

[table][tr]Product Version Security and Quality Rollup KB [/tr] [tr][td]Windows 10 1703 (Creators Update)[/td] [td]Catalog 4041676[/td] [/tr] [tr][td]Windows 10 1607 (Anniversary Update)[/td] [td]Catalog 4041691[/td] [/tr] [tr][td]Windows 10 1507[/td] [td]Catalog 4042895[/td] [/tr] [tr][td]Windows 8.1 Windows RT 8.1 Windows Server 2012 R2[/td] [td]Catalog 4043767[/td] [/tr] [tr][td].NET Framework 4.6, 4.6.1, 4.6.2, 4.7[/td] [td]4043763[/td] [/tr] [tr][td].NET Framework 4.5.2[/td] [td]4040974[/td] [/tr] [tr][td].NET Framework 3.5[/td] [td]4040981[/td] [/tr] [tr][td]Windows Server 2012[/td] [td]Catalog 4043769[/td] [/tr] [tr][td].NET Framework 4.6, 4.6.1, 4.6.2, 4.7[/td] [td]4043762[/td] [/tr] [tr][td].NET Framework 4.5.2[/td] [td]4040975[/td] [/tr] [tr][td].NET Framework 3.5[/td] [td]4040979[/td] [/tr] [tr][td]Windows 7 Windows Server 2008 R2[/td] [td]Catalog 4043766[/td] [/tr] [tr][td].NET Framework 4.6, 4.6.1, 4.6.2, 4.7[/td] [td]4043764[/td] [/tr] [tr][td].NET Framework 4.5.2[/td] [td]4040977[/td] [/tr] [tr][td].NET Framework 3.5.1[/td] [td]4040980[/td] [/tr] [tr][td]Windows Server 2008[/td] [td]Catalog 4043768[/td] [/tr] [tr][td].NET Framework 4.6[/td] [td]4043764[/td] [/tr] [tr][td].NET Framework 4.5.2[/td] [td]4040977[/td] [/tr] [tr][td].NET Framework 2.0[/td] [td]4040978[/td] [/tr] [/table]

Docker Images

Docker images has not yet been updated as part of today’s release. They will be updated soon. This post will be updated at that time.

Known Issues

WPF crashes after the October 2017 Security and Monthly Quality Rollup is applied on Windows 10 version 1507 that has Microsoft .NET Framework 4.6.2 installed.

Click to expand...

Source: .NET Framework October 2017 Security and Quality Rollup | .NET Blog

Windows 10: .NET Framework October 2019 Security and Quality Rollup for Windows 10 Win Update

.NET Framework October 2019 Security and Quality Rollup for Windows 10 Win Update

.NET Framework October 2019 Security and Quality Rollup for Windows 10 Win Update

.NET Framework October 2019 Security and Quality Rollup for Windows 10 Win Update

.NET Framework October 2019 Security and Quality Rollup for Windows 10 Win Update - Similar Threads - NET Framework October

.NET Framework June 2019 Preview of Quality Rollup

.NET Framework February 2019 Preview of Quality Rollup

.NET Framework January 2019 Preview of Quality Rollup

.NET Framework October 2018 Preview of Quality Rollup

.NET Framework October 2018 Security and Quality Rollup

.NET Framework September 2018 Security and Quality Rollup

.NET Framework June 2018 Security and Quality Rollup

.NET Framework January 2018 Security and Quality Rollup

.NET Framework October 2017 Security and Quality Rollup