{"id":20825,"date":"2019-01-08T10:59:07","date_gmt":"2019-01-08T18:59:07","guid":{"rendered":"https:\/\/blogs.msdn.microsoft.com\/dotnet\/?p=20825"},"modified":"2019-02-19T18:35:53","modified_gmt":"2019-02-20T01:35:53","slug":"net-framework-january-2019-security-and-quality-rollup","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/dotnet\/net-framework-january-2019-security-and-quality-rollup\/","title":{"rendered":".NET Framework January 2019 Security and Quality Rollup"},"content":{"rendered":"

Today, we are releasing the January 2019 Security and Quality Rollup.<\/p>\n

<\/a>Security<\/h2>\n

<\/a>CVE-2019-0545 \u2013 Windows Security Feature Bypass Vulnerability<\/h3>\n

This security update resolves a vulnerability in Microsoft .NET Framework that may cause an information disclosure that allows bypassing Cross-origin Resource Sharing (CORS) configurations. An attacker who successfully exploits the vulnerability could retrieve from a web application content that’s normally restricted. This security update addresses the vulnerability by enforcing CORS configuration to prevent its bypass.<\/p>\n

CVE-2019-0545<\/a><\/p>\n

<\/a>Getting the Update<\/h2>\n

The Security and Quality Rollup is available via Windows Update, Windows Server Update Services, Microsoft Update Catalog, and Docker.<\/p>\n

<\/a>Microsoft Update Catalog<\/h3>\n

You can get the update via the Microsoft Update Catalog. For Windows 10, .NET Framework updates are part of the Windows 10 Monthly Rollup.<\/p>\n

The following table is for Windows 10 and Windows Server 2016+ versions.<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Product Version<\/th>\nSecurity and Quality Rollup KB<\/th>\n<\/tr>\n<\/thead>\n
Windows 10 1809 (October 2018 Update)\nWindows Server 2019<\/strong><\/td>\n\nCatalog<\/a>\n4480056<\/a><\/strong><\/td>\n<\/tr>\n
.NET Framework 3.5, 4.7.2<\/td>\n4480056<\/a><\/td>\n<\/tr>\n
Windows 10 1803 (April 2018 Update)<\/strong><\/td>\nCatalog<\/a>\n4480966<\/a><\/strong><\/td>\n<\/tr>\n
.NET Framework 3.5, 4.7.2<\/td>\n4480966<\/a><\/td>\n<\/tr>\n
Windows 10 1709 (Fall Creators Update)<\/strong><\/td>\nCatalog<\/a>\n4480978<\/a><\/strong><\/td>\n<\/tr>\n
.NET Framework 3.5, 4.7.1, 4.7.2<\/td>\n4480978<\/a><\/td>\n<\/tr>\n
Windows 10 1703 (Creators Update)<\/strong><\/td>\nCatalog<\/a>\n4480973<\/a><\/strong><\/td>\n<\/tr>\n
.NET Framework 3.5, 4.7, 4.7.1, 4.7.2<\/td>\n4480973<\/a><\/td>\n<\/tr>\n
Windows 10 1607 (Anniversary Update)\nWindows Server 2016<\/strong><\/td>\nCatalog<\/a>\n4480961<\/a><\/strong><\/td>\n<\/tr>\n
.NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2<<\/td>\n4480961<\/a><\/td>\n<\/tr>\n
Windows 10 1507<\/strong><\/td>\nCatalog<\/a>\n4480962<\/a><\/strong><\/td>\n<\/tr>\n
.NET Framework 3.5, 4.6, 4.6.1, 4.6.2<<\/td>\n4480962<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

The following table is for earlier Windows and Windows Server versions.<\/p>\n

 <\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Product Version<\/th>\nSecurity and Quality Rollup KB<\/th>\nSecurity Only Update KB<\/th>\n<\/tr>\n<\/thead>\n
Windows 8.1\nWindows RT 8.1\nWindows Server 2012 R2<\/strong><\/td>\nCatalog<\/a>\n4481485<\/a><\/strong><\/td>\nCatalog<\/a>\n4481484<\/a><\/strong><\/td>\n<\/tr>\n
.NET Framework 3.5<\/td>\nCatalog<\/a>\n4480064<\/a><\/td>\nCatalog<\/a>\n4480086<\/a><\/strong><\/td>\n<\/tr>\n
.NET Framework 4.5.2<\/td>\nCatalog<\/a>\n4480057<\/a><\/td>\nCatalog<\/a>\n4480074<\/a><\/strong><\/td>\n<\/tr>\n
.NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2<\/td>\nCatalog<\/a>\n4480054<\/a><\/td>\nCatalog<\/a>\n4480071<\/a><\/strong><\/td>\n<\/tr>\n
Windows Server 2012<\/strong><\/td>\nCatalog<\/a>\n4481482<\/a><\/strong><\/td>\nCatalog<\/a>\n4481483<\/a><\/strong><\/td>\n<\/tr>\n
.NET Framework 3.5<\/td>\nCatalog<\/a>\n4480061<\/a><\/td>\nCatalog<\/a>\n4480083<\/a><\/strong><\/td>\n<\/tr>\n
.NET Framework 4.5.2<\/td>\nCatalog<\/a>\n4480058<\/a><\/td>\nCatalog<\/a>\n4480075<\/a><\/strong><\/td>\n<\/tr>\n
.NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2<\/td>\nCatalog<\/a>\n4480051<\/a><\/td>\n\nCatalog<\/a>\n4480070<\/a><\/strong><\/td>\n<\/tr>\n
Windows 7 SP1\nWindows Server 2008 R2 SP1<\/strong><\/td>\nCatalog<\/a>\n4481480<\/a><\/strong><\/td>\nCatalog<\/a>\n4481481<\/a><\/strong><\/td>\n<\/tr>\n
.NET Framework 3.5.1<\/td>\nCatalog<\/a>\n4480063<\/a><\/td>\nCatalog<\/a>\n4480085<\/a><\/strong><\/td>\n<\/tr>\n
.NET Framework 4.5.2<\/td>\nCatalog<\/a>\n4480059<\/a><\/td>\nCatalog<\/a>\n4480076<\/a><\/strong><\/td>\n<\/tr>\n
.NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2<\/td>\nCatalog<\/a>\n4480055<\/a><\/td>\nCatalog<\/a>\n4480072<\/a><\/strong><\/td>\n<\/tr>\n
Windows Server 2008<\/strong><\/td>\nCatalog<\/a>\n4481486<\/a><\/strong><\/td>\nCatalog<\/a>\n4481487<\/a><\/strong><\/td>\n<\/tr>\n
.NET Framework 2.0, 3.0<\/td>\nCatalog<\/a>\n4480062<\/a><\/td>\nCatalog<\/a>\n4480084<\/a><\/strong><\/td>\n<\/tr>\n
.NET Framework 4.5.2<\/td>\nCatalog<\/a>\n4480059<\/a><\/td>\nCatalog<\/a>\n4480076<\/a><\/strong><\/td>\n<\/tr>\n
.NET Framework 4.6<\/td>\nCatalog<\/a>\n4480055<\/a><\/td>\nCatalog<\/a>\n4480072<\/a><\/strong><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

<\/a>Docker Images<\/h3>\n

We are updating the following .NET Framework Docker images for today’s release:<\/p>\n