{"id":16357,"date":"2017-11-14T19:54:36","date_gmt":"2017-11-15T03:54:36","guid":{"rendered":"https:\/\/blogs.msdn.microsoft.com\/dotnet\/?p=16357"},"modified":"2021-09-29T16:37:34","modified_gmt":"2021-09-29T23:37:34","slug":"net-framework-november-2017-security-and-quality-rollup","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/dotnet\/net-framework-november-2017-security-and-quality-rollup\/","title":{"rendered":".NET Framework November 2017 Security and Quality Rollup"},"content":{"rendered":"<p>Today, we are releasing the November 2017 Security and Quality Rollup.<\/p>\n<h2><a href=\"#security\" id=\"user-content-security\" class=\"anchor\"><\/a>Security<\/h2>\n<p>This release contains no new security updates. The most recent .NET security updates were shipped with the <a href=\"https:\/\/blogs.msdn.microsoft.com\/dotnet\/2017\/09\/12\/net-framework-september-2017-security-and-quality-rollup\/\">September 2017 Security and Quality Rollup<\/a>.<\/p>\n<h2><a href=\"#quality-and-reliability\" id=\"user-content-quality-and-reliability\" class=\"anchor\"><\/a>Quality and Reliability<\/h2>\n<p>This release contains the following quality and reliability improvements.<\/p>\n<h4><a href=\"#clr\" id=\"user-content-clr\" class=\"anchor\"><\/a>CLR<\/h4>\n<ul>\n<li>Code optimization bug for x64 C# code targeting .NET Framework 4.6.1 and running on .NET Framework 4.7. [484415]<\/li>\n<\/ul>\n<h4><a href=\"#wpf\" id=\"user-content-wpf\" class=\"anchor\"><\/a>WPF<\/h4>\n<ul>\n<li>WPF touch stops working after many touch events due to reference counting issue. [460192]<\/li>\n<li>WPF touch generates a NullReferenceException in System.Windows.Input.StylusWisp.WispLogic.ProcessInputReport with .NET Framework 4.7. [480909]<\/li>\n<li>WPF crash caused by INVALID_POINTER_WRITE_c0000005_PenIMC_v0400.dll!CPimcContext::GetPenEventMultiple. [488390]<\/li>\n<li>WPF rendering of UI Elements broken in Windows Services. [497604]<\/li>\n<\/ul>\n<p>Note: Additional information on these improvements is not available. The <a href=\"https:\/\/www.visualstudio.com\/team-services\/\">VSTS<\/a> bug number provided with each improvement is a unique ID that you can give <a href=\"https:\/\/support.microsoft.com\/contactus\/\">Microsoft Customer Support<\/a>, include in <a href=\"https:\/\/stackoverflow.com\/questions\/tagged\/.net\">StackOverflow comments<\/a>or use in web searches.<\/p>\n<h2><a href=\"#security-compliance-guidance\" id=\"user-content-security-compliance-guidance\" class=\"anchor\"><\/a>Security Compliance Guidance<\/h2>\n<p>This guidance is for companies that want to install the <strong>minimum<\/strong> set of security updates each month. If you want security and quality updates, do not follow this guidance.<\/p>\n<p>Guidance for this month:<\/p>\n<ul>\n<li>Install Windows 10 updates (the <a href=\"https:\/\/support.microsoft.com\/en-us\/help\/4043454\">Windows 10 LCU<\/a>).<\/li>\n<li>Do not install pre-Win10 .NET Framework updates.<\/li>\n<\/ul>\n<p>Explanation: .NET Framework updates for Windows 10 are included with the Windows 10 LCU (which include Windows security updates), while pre-Windows 10 .NET Framework updates are separate updates (which only include quality updates this month).<\/p>\n<p>Note: You can look at the Classification release attribute to see if a .NET Framework update falls under either \u201cSecurity Updates\u201d or \u201cUpdates\u201d category. See this month&#8217;s <a href=\"http:\/\/www.catalog.update.microsoft.com\/Search.aspx?q=4048955\">Windows 10 1709<\/a> and <a href=\"http:\/\/www.catalog.update.microsoft.com\/Search.aspx?q=4049016\">Windows 7<\/a> releases as examples.<\/p>\n<h2><a href=\"#getting-the-update\" id=\"user-content-getting-the-update\" class=\"anchor\"><\/a>Getting the Update<\/h2>\n<p>The Security and Quality Rollup is available via Windows Update, Windows Server Update Services, Microsoft Update Catalog, and Docker.<\/p>\n<h3><a href=\"#microsoft-update-catalog\" id=\"user-content-microsoft-update-catalog\" class=\"anchor\"><\/a>Microsoft Update Catalog<\/h3>\n<p>You can get the update via the Microsoft Update Catalog. For Windows 10, .NET Framework updates are part of the Windows 10 Monthly Rollup.<\/p>\n<table>\n<thead>\n<tr>\n<th>Product Version<\/th>\n<th>Security and Quality Rollup KB<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>Windows 10 1709 (Fall Creators Update)<\/strong><\/td>\n<td><strong><a href=\"http:\/\/www.catalog.update.microsoft.com\/Search.aspx?q=4048955\">Catalog<\/a>\n<a href=\"https:\/\/support.microsoft.com\/kb\/4048955\">4048955<\/a><\/strong><\/td>\n<\/tr>\n<tr>\n<td>.NET Framework 4.7.1<\/td>\n<td><a href=\"https:\/\/support.microsoft.com\/kb\/4048954\">4048954<\/a><\/td>\n<\/tr>\n<tr>\n<td><strong>Windows 10 1703 (Creators Update)<\/strong><\/td>\n<td><strong><a href=\"http:\/\/www.catalog.update.microsoft.com\/Search.aspx?q=4048954\">Catalog<\/a>\n<a href=\"https:\/\/support.microsoft.com\/kb\/4048954\">4048954<\/a><\/strong><\/td>\n<\/tr>\n<tr>\n<td>.NET Framework 4.7<\/td>\n<td><a href=\"https:\/\/support.microsoft.com\/kb\/4048954\">4048954<\/a><\/td>\n<\/tr>\n<tr>\n<td><strong>Windows 8.1\nWindows RT 8.1\nWindows Server 2012 R2<\/strong><\/td>\n<td><strong><a href=\"http:\/\/www.catalog.update.microsoft.com\/Search.aspx?q=4049017\">Catalog<\/a>\n<a href=\"https:\/\/support.microsoft.com\/kb\/4049017\">4049017<\/a><\/strong><\/td>\n<\/tr>\n<tr>\n<td>.NET Framework 4.6, 4.6.1, 4.6.2, 4.7<\/td>\n<td><a href=\"https:\/\/support.microsoft.com\/kb\/4041777\">4041777<\/a><\/td>\n<\/tr>\n<tr>\n<td>.NET Framework 4.5.2<\/td>\n<td><a href=\"https:\/\/support.microsoft.com\/kb\/4040974\">4040974<\/a><\/td>\n<\/tr>\n<tr>\n<td>.NET Framework 3.5<\/td>\n<td><a href=\"https:\/\/support.microsoft.com\/kb\/4040981\">4040981<\/a><\/td>\n<\/tr>\n<tr>\n<td><strong>Windows Server 2012<\/strong><\/td>\n<td><strong><a href=\"http:\/\/www.catalog.update.microsoft.com\/Search.aspx?q=4049018\">Catalog<\/a>\n<a href=\"https:\/\/support.microsoft.com\/kb\/4049018\">4049018<\/a><\/strong><\/td>\n<\/tr>\n<tr>\n<td>.NET Framework 4.6, 4.6.1, 4.6.2, 4.7<\/td>\n<td><a href=\"https:\/\/support.microsoft.com\/kb\/4041776\">4041776<\/a><\/td>\n<\/tr>\n<tr>\n<td>.NET Framework 4.5.2<\/td>\n<td><a href=\"https:\/\/support.microsoft.com\/kb\/4040975\">4040975<\/a><\/td>\n<\/tr>\n<tr>\n<td>.NET Framework 3.5<\/td>\n<td><a href=\"https:\/\/support.microsoft.com\/kb\/4040979\">4040979<\/a><\/td>\n<\/tr>\n<tr>\n<td><strong>Windows 7\nWindows Server 2008 R2<\/strong><\/td>\n<td><strong><a href=\"http:\/\/www.catalog.update.microsoft.com\/Search.aspx?q=4049016\">Catalog<\/a>\n<a href=\"https:\/\/support.microsoft.com\/kb\/4049016\">4049016<\/a><\/strong><\/td>\n<\/tr>\n<tr>\n<td>.NET Framework 4.6, 4.6.1, 4.6.2, 4.7<\/td>\n<td><a href=\"https:\/\/support.microsoft.com\/kb\/4041778\">4041778<\/a><\/td>\n<\/tr>\n<tr>\n<td>.NET Framework 4.5.2<\/td>\n<td><a href=\"https:\/\/support.microsoft.com\/kb\/4040977\">4040977<\/a><\/td>\n<\/tr>\n<tr>\n<td>.NET Framework 3.5.1<\/td>\n<td><a href=\"https:\/\/support.microsoft.com\/kb\/4040980\">4040980<\/a><\/td>\n<\/tr>\n<tr>\n<td><strong>Windows Server 2008<\/strong><\/td>\n<td><strong><a href=\"http:\/\/www.catalog.update.microsoft.com\/Search.aspx?q=4049019\">Catalog<\/a>\n<a href=\"https:\/\/support.microsoft.com\/kb\/4049019\">4049019<\/a><\/strong><\/td>\n<\/tr>\n<tr>\n<td>.NET Framework 4.6<\/td>\n<td><a href=\"https:\/\/support.microsoft.com\/kb\/4041778\">4041778<\/a><\/td>\n<\/tr>\n<tr>\n<td>.NET Framework 4.5.2<\/td>\n<td><a href=\"https:\/\/support.microsoft.com\/kb\/4040977\">4040977<\/a><\/td>\n<\/tr>\n<tr>\n<td>.NET Framework 2.0<\/td>\n<td><a href=\"https:\/\/support.microsoft.com\/kb\/4040978\">4040978<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3><a href=\"#docker-images\" id=\"user-content-docker-images\" class=\"anchor\"><\/a>Docker Images<\/h3>\n<p>Docker images have been updated as part of today&#8217;s release.\u00a0The following repos have been be updated.<\/p>\n<ul>\n<li><a href=\"https:\/\/hub.docker.com\/r\/microsoft\/aspnet\/\">microsoft\/aspnet<\/a><\/li>\n<li><a href=\"https:\/\/hub.docker.com\/r\/microsoft\/dotnet-framework\/\">microsoft\/dotnet-framework<\/a><\/li>\n<li><a href=\"https:\/\/hub.docker.com\/r\/microsoft\/wcf\/\">microsoft\/wcf<\/a><\/li>\n<\/ul>\n<p>Note: Look at the &#8220;Tags&#8221; view in each repository to see the updated Docker image tags.<\/p>\n<p>Note: Significant changes have been made with Docker images recently. Please look at <a href=\"https:\/\/github.com\/dotnet\/announcements\/labels\/Docker\">.NET Docker Announcements<\/a> for more information.<\/p>\n<h3><a href=\"#previous-monthly-rollups\" id=\"user-content-previous-monthly-rollups\" class=\"anchor\"><\/a>Previous Monthly Rollups<\/h3>\n<p>The last few .NET Framework Monthly updates are listed below for your convenience:<\/p>\n<ul>\n<li><a href=\"https:\/\/devblogs.microsoft.com\/dotnet\/net-framework-october-2017-preview-of-quality-rollup\/\">October 2017 Preview of Quality Rollup<\/a><\/li>\n<li><a href=\"https:\/\/blogs.msdn.microsoft.com\/dotnet\/2017\/10\/10\/net-framework-october-2017-security-and-quality-rollup\/\">October 2017 Security and Quality Rollup<\/a><\/li>\n<li><a href=\"https:\/\/blogs.msdn.microsoft.com\/dotnet\/2017\/09\/25\/net-framework-september-2017-preview-of-quality-rollup\/\">September 2017 Preview of Quality Rollup<\/a><\/li>\n<li><a href=\"https:\/\/blogs.msdn.microsoft.com\/dotnet\/2017\/09\/12\/net-framework-september-2017-security-and-quality-rollup\/\">September 2017 Security and Quality Rollup<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Today, we are releasing the November 2017 Security and Quality Rollup. Security This release contains no new security updates. The most recent .NET security updates were shipped with the September 2017 Security and Quality Rollup. Quality and Reliability This release contains the following quality and reliability improvements. CLR Code optimization bug for x64 C# code [&hellip;]<\/p>\n","protected":false},"author":336,"featured_media":58792,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[685],"tags":[],"class_list":["post-16357","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-dotnet"],"acf":[],"blog_post_summary":"<p>Today, we are releasing the November 2017 Security and Quality Rollup. Security This release contains no new security updates. The most recent .NET security updates were shipped with the September 2017 Security and Quality Rollup. Quality and Reliability This release contains the following quality and reliability improvements. CLR Code optimization bug for x64 C# code [&hellip;]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/posts\/16357","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/users\/336"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/comments?post=16357"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/posts\/16357\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/media\/58792"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/media?parent=16357"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/categories?post=16357"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/tags?post=16357"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}