Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: .NET Framework September 2017 Security and Quality Rollup

13 Sep 2017   #1
Brink

64-bit Windows 10 Pro
 
 
.NET Framework September 2017 Security and Quality Rollup

Quote:
Today, we are releasing the September 2017 Security and Quality Rollup and Security Only Update.This update applies to Windows 7 and later client versions and Windows Server 2008 and later server versions.

Security

This release contains the following security changes.

CVE-2017-8759 | .NET Framework Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input. An attacker who successfully exploited this vulnerability in software using the .NET framework could take control of an affected system. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

To exploit the vulnerability, an attacker would first need to convince the user to open a malicious document or application.

The security update addresses the vulnerability by correcting how .NET validates untrusted input.

More Information: CVE-2017-8759

Quality and Reliability

This release contains the following quality and reliability improvements.

ASP.NET
  • Values added to System.Web.Cache expire immediately, with .NET Framework 4.7. [452228]
  • ASP.NET site running on Sitefinity broken, with .NET Framework 4.7. [457739]
CLR
  • CRWLock::StaticAcquireWriterLock() never returns if Int32.MaxValue number of ReaderWriterLock objects are created, with .NET Framework 3.5. [242568]
  • Crash in CLR assembly metadata reader. [367294]
  • .NET remoting IPC listener thread exits and leaves an orphaned IPCServerchannel. [454409]
  • Silent bad codegen when optimizing expression. [460765]
  • Crash in Visual Studio due to race in CLR assembly loader. [462762]
  • Runtime underallocates arrays by one element in rare cases when jitting large methods. [463604]
  • AppContext feature opt-in/out not functioning correctly. [469020]
Management
  • Reboot method of Win32_OperatingSystem has Privilege not held exception [441901]
Networking
  • HTTPWebRequest times out when switching to TLS after installing update KB4019112. [465796]
WCF
  • NetTcp with X509Certificates using SslStream uses the default TLS version as the OS, with .NET Framework 4.7. [451528]
Windows Forms
  • Excessive object creation in a performance-critical code-path leading to performance regressions and/or displaying empty UI and/or exhausting GDI+ handles. [452048]
  • Multi-Mon support: Controls with non-default anchoring are moved around the screen when scaling is changed [462872].
    • Note: This fix will be made available for Windows 10 1607 (Anniversary Update) in October.
WPF
  • WPF fails to load resources if two versions of the same assembly are loaded. [378607]
    • Note: This fix will be made available for Windows 10 1703 (Creators Update) in October.
  • WPF consumes high % of CPU in Visual Studio when console session not active. [391184]
    • Note: This fix will be made available for Windows 10 in October.
  • Visual Studio fails due to “Unable to load DLL ‘PenIMC.dll’” error. [452476]
    • Note: This fix will be made available for Windows 10 1703 (Creators Update) in October.
  • Application crash due to call into DWrite. [453529]
    • Note: This fix will be made available for Windows 10 in October.
  • TargetFrameworkName is null with mixed mode application. [425074]
    • Note: This fix will be made available for Windows 10 1703 (Creators Update) in October.
  • Event leak with WPF application on touch screen monitors on Windows 10. [434946]
    • Note: This fix will be made available for Windows 10 1703 (Creators Update) in October.
Note: Fixes are not always available for all Windows versions at the same time. This situation is noted where appropriate, and where the information is available, a release date is provided.

Note: Additional information on these improvements is not available. The VSTS bug number provided with each improvement is a unique ID that you can give Microsoft Customer Support, include in StackOverflow commentsor use in web searches.

Getting the Update

The Security and Quality Rollup is available via Windows Update, Windows Server Update Services, Microsoft Update Catalog, and Docker.

Microsoft Update Catalog

You can get the update via the Microsoft Update Catalog. For Windows 10, .NET Framework updates are part of the Windows 10 Monthly Rollup.


Docker Images

Docker images has not yet been updated as part of today’s release. They will be updated in the shortly. This post will be updated at that time.


Read more: .NET Framework September 2017 Security and Quality Rollup | .NET Blog


My System SpecsSystem Spec
.
3 Weeks Ago   #2
jonathancr

Windows 7 Ultimate x64
 
 

my friend brink where is the real rollup.net download link? it appears many confused links. i dont know which.
My System SpecsSystem Spec
3 Weeks Ago   #3
Brink

64-bit Windows 10 Pro
 
 

Hello Jonathan,

If you have Microsoft .NET Framework installed, the update should be available via Windows Update.

For via Microsoft Update Catalog: Microsoft Update Catalog
My System SpecsSystem Spec
.

3 Weeks Ago   #4
jonathancr

Windows 7 Ultimate x64
 
 

Quote   Quote: Originally Posted by Brink View Post
Hello Jonathan,

If you have Microsoft .NET Framework installed, the update should be available via Windows Update.

For via Microsoft Update Catalog: Microsoft Update Catalog
Thank you brink, u're really apreciated due your contributions.
My System SpecsSystem Spec
3 Weeks Ago   #5
RoWin7

Win 7 Ultimate 64-bit
 
 

Thanks, Brink. You're always on the ball.

1--MS sends me updates almost daily. PITA. Used to be only on Tues.

2--I have Office 2003 installed, although I don't use it. It's for a hypothetical emergency where Open Office can't open a file. MS Updater keeps showing me Office 10 updates and I keep telling it to "Hide these updates," and they keep coming back, sometimes all, sometimes a few. Any ideas?
My System SpecsSystem Spec
Reply

 .NET Framework September 2017 Security and Quality Rollup




Thread Tools




Similar help and support threads
Thread Forum
September 12, 2017 - KB4038777 (Monthly Rollup) Windows 7
Source: https://support.microsoft.com/en-us/help/4038777/windows-7-update-kb4038777 Direct download links for KB4038777 MSU file from Microsoft Update Catalog: :ar: Download KB4038777 MSU for Windows 7 32-bit (x86) - 121.4 MB :ar: Download KB4038777 MSU for Windows 7 64-bit (x64) - 198.3...
News
Microsoft Security Bulletin(s) for September 2017
Microsoft Security Bulletin(s) for September 2017 Note: There may be latency issues due to replication, if the page does not display keep refreshing Today Microsoft released the following Security Bulletin(s). Note:* Microsoft Security Response Centre and Security TechCenter* are...
Windows Updates & Activation
September 2017 security update release
Source: September 2017 security update release MSRC
News
April 2017 Security and Quality Rollup for .NET Framework
Windows update indicates the April 2017 Security and Quality Rollup for .NET Framework (kb 4014981) is needed. Does this include telemetry? Is there a security only update available for this? Thanks!
Windows Updates & Activation
March, 2017 Preview of Monthy Quality Rollup...(KB4012218) - Optional?
Why is the KB4012218 considered optional? Is it because I already have the same individual updates installed or is it because they don't apply to my system? And why do they use the word Preview? Is it optional because it's not officially released yet? Like Beta software? All comments that...
Windows Updates & Activation


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 00:36.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App