Windows 10: Problem with latest .NET Core Security Update

Hunter Meriwether · Feb 19, 2021

I am writing a C++ app named TheBog in Visual Studio. Everything was fine until last Saturday 02/13/2021, when I downloaded the 2021-02 .NET Core 3.1.12 Security Update for x64 Client. Since then I've been unable to debug my app. It builds without errors, but as soon as it starts to deploy I get an output message saying, "Updating the layout...Copying files: Total 1 mb to layout...Copying file "C:\Users\meriweth\source\repos\TheBog\Debug\TheBog\TheBog.exe" to layout "TheBog.exe"..." Then the process just hangs with neither a crash nor error message, for at least the two hours I waited for things to sort out.
I have another app with nearly identical code that still works fine. It performs the same copying process in less than a second. When I compared the two files containing TheBog's object.exe code that is, the one whose path appears above, and its subfile AppX to the corresponding files in my well-behaved app, I noticed something which I suspect is important. For the well-behaved app, the time stamps are identical, suggesting that the object codes are updated whenever I run debug. For the prodigal app, the first object code is always current, but the one in the subfile is timestamped "02/13/2021". You saw that coming, right?
I've spent days thinking this is a file access problem, and I won't bore you with all of the unsuccesful fixes I've tried, including deleting the delinquent object code in the AppX folder, using administrator mode everywhere, changing file and folder permissions, and finally searching registry settings.

I've tried everything I can think of.

Can anybody help?

:)

Brink · Feb 20, 2021

.NET Core October 2018 Update - NET Core 1.0 and 1.1

Today, we are releasing the .NET Core October 2018 Update for 1.0 and 1.1. This update includes .NET Core 1.0.13, 1.1.10 and .NET Core SDK 1.1.11.

Security

CVE-2018-8292: .NET Core Information Disclosure Vulnerability

Microsoft is aware of a security feature bypass vulnerability that exists when .NET Core when HTTP authentication information is inadvertently exposed in an outbound request that encounters an HTTP redirect. An attacker who successfully exploited this vulnerability could use the information to further compromise the web application.

The update addresses the vulnerability by correcting how .NET Core applications handles HTTP redirects.

Getting the Update

The latest .NET Core updates are available on the .NET Core download page.

Today’s releases are listed as follows:

.NET Core 1.1.10

.NET Core 1.0.13

Docker Images

.NET Docker images have been updated for today’s release. The following repos have been updated.

microsoft/dotnet

Note: Look at the “Tags” view in each repository to see the updated Docker image tags.

Note: You must re-pull base images in order to get updates. The Docker client does not pull updates automatically.

Azure App Services deployment

Deployment to Azure App Services has begun and the West Central US region will be live this morning. Remaining regions will be updated over the next few days and deployment is expected to be complete by end of week.
Click to expand...

Source: .NET Core October 2018 Update - NET Core 1.0 and 1.1 | .NET Blog

Brink · Feb 20, 2021

.NET Core October 2018 Update - NET Core 1.0 and 1.1

Today, we are releasing the .NET Core October 2018 Update for 1.0 and 1.1. This update includes .NET Core 1.0.13, 1.1.10 and .NET Core SDK 1.1.11.

Security

CVE-2018-8292: .NET Core Information Disclosure Vulnerability

Microsoft is aware of a security feature bypass vulnerability that exists when .NET Core when HTTP authentication information is inadvertently exposed in an outbound request that encounters an HTTP redirect. An attacker who successfully exploited this vulnerability could use the information to further compromise the web application.

The update addresses the vulnerability by correcting how .NET Core applications handles HTTP redirects.

Getting the Update

The latest .NET Core updates are available on the .NET Core download page.

Today’s releases are listed as follows:

.NET Core 1.1.10

.NET Core 1.0.13

Docker Images

.NET Docker images have been updated for today’s release. The following repos have been updated.

microsoft/dotnet

Note: Look at the “Tags” view in each repository to see the updated Docker image tags.

Note: You must re-pull base images in order to get updates. The Docker client does not pull updates automatically.

Azure App Services deployment

Deployment to Azure App Services has begun and the West Central US region will be live this morning. Remaining regions will be updated over the next few days and deployment is expected to be complete by end of week.
Click to expand...

Source: .NET Core October 2018 Update - NET Core 1.0 and 1.1 | .NET Blog

Brink · Feb 20, 2021

.NET Core September 2020 Updates - 2.1.22 and 3.1.8

Today, we are releasing the .NET Core September 2020 Update. These updates contain security and reliability fixes. See the individual release notes for details on updated packages.

Security

CVE-2020-1045: ASP.NET Core Security Feature Bypass Vulnerability

Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.

The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker to set a second cookie with the name being percent encoded.

The security update addresses the vulnerability by fixing the way the ASP.NET Core cookie parser handles encoded names.

Getting the Update

.NET Core 3.1.8 and .NET Core SDK ( Download | Release Notes )

.NET Core 2.1.22 and .NET Core SDK ( Download | Release Notes )

See the .NET Core release notes for details on the release, including issues fixed and affected packages.

The latest .NET Core updates are available on the .NET Core download page.

Docker Images

.NET Docker images have been updated for today’s release. The following repos have been updated.

dotnet/core/sdk: .NET Core SDK

dotnet/core/aspnet: ASP.NET Core Runtime

dotnet/core/runtime: .NET Core Runtime

dotnet/core/runtime-deps: .NET Core Runtime Dependencies

dotnet/core/samples: .NET Core Samples

Note: You must pull updated .NET Core container images to get this update, with either docker pull or docker build --pull.

Visual Studio

This update will be included in a future update of Visual Studio.

Each version of Visual studio is only supported with a given version of the .NET Core SDK. Visual Studio version information is included in the .NET Core SDK download pages and release notes.If you are not using Visual Studio, we recommend using the latest SDK release.

Rahul Bhandari
Click to expand...

Source: https://devblogs.microsoft.com/dotne...eptember-2020/

Windows 10: Problem with latest .NET Core Security Update

Problem with latest .NET Core Security Update

Problem with latest .NET Core Security Update

Problem with latest .NET Core Security Update

Problem with latest .NET Core Security Update - Similar Threads - Problem latest NET

Latest security update

.NET Core and Security Update keep failing Install error - 0x80070643

.NET Core and Security Update keep failing Install error - 0x80070643

problem installing latest security update kb5005565

Net core 3.1

Latest Windows Security update blocking net connection

.NET Core October 2018 Update - NET Core 1.0 and 1.1

Update on .NET Core 3.0 and .NET Framework 4.8

.NET Core January 2018 Update