.NET Framework January 2019 Security and Quality Rollup

Today, we are releasing the January 2019 Security and Quality Rollup.

Security

CVE-2019-0545 – Windows Security Feature Bypass Vulnerability

This security update resolves a vulnerability in Microsoft .NET Framework that may cause an information disclosure that allows bypassing Cross-origin Resource Sharing (CORS) configurations. An attacker who successfully exploits the vulnerability could retrieve from a web application content that’s normally restricted. This security update addresses the vulnerability by enforcing CORS configuration to prevent its bypass.

CVE-2019-0545

Getting the Update

The Security and Quality Rollup is available via Windows Update, Windows Server Update Services, Microsoft Update Catalog, and Docker.

Microsoft Update Catalog

You can get the update via the Microsoft Update Catalog. For Windows 10, .NET Framework updates are part of the Windows 10 Monthly Rollup.

The following table is for Windows 10 and Windows Server 2016+ versions.

Product Version Security and Quality Rollup KB
Windows 10 1809 (October 2018 Update)
Windows Server 2019

Catalog
4480056
.NET Framework 3.5, 4.7.2 4480056
Windows 10 1803 (April 2018 Update) Catalog
4480966
.NET Framework 3.5, 4.7.2 4480966
Windows 10 1709 (Fall Creators Update) Catalog
4480978
.NET Framework 3.5, 4.7.1, 4.7.2 4480978
Windows 10 1703 (Creators Update) Catalog
4480973
.NET Framework 3.5, 4.7, 4.7.1, 4.7.2 4480973
Windows 10 1607 (Anniversary Update)
Windows Server 2016
Catalog
4480961
.NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2< 4480961
Windows 10 1507 Catalog
4480962
.NET Framework 3.5, 4.6, 4.6.1, 4.6.2< 4480962

The following table is for earlier Windows and Windows Server versions.

 

Product Version Security and Quality Rollup KB Security Only Update KB
Windows 8.1
Windows RT 8.1
Windows Server 2012 R2
Catalog
4481485
Catalog
4481484
.NET Framework 3.5 Catalog
4480064
Catalog
4480086
.NET Framework 4.5.2 Catalog
4480057
Catalog
4480074
.NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 Catalog
4480054
Catalog
4480071
Windows Server 2012 Catalog
4481482
Catalog
4481483
.NET Framework 3.5 Catalog
4480061
Catalog
4480083
.NET Framework 4.5.2 Catalog
4480058
Catalog
4480075
.NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 Catalog
4480051

Catalog
4480070
Windows 7 SP1
Windows Server 2008 R2 SP1
Catalog
4481480
Catalog
4481481
.NET Framework 3.5.1 Catalog
4480063
Catalog
4480085
.NET Framework 4.5.2 Catalog
4480059
Catalog
4480076
.NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 Catalog
4480055
Catalog
4480072
Windows Server 2008 Catalog
4481486
Catalog
4481487
.NET Framework 2.0, 3.0 Catalog
4480062
Catalog
4480084
.NET Framework 4.5.2 Catalog
4480059
Catalog
4480076
.NET Framework 4.6 Catalog
4480055
Catalog
4480072

Docker Images

We are updating the following .NET Framework Docker images for today’s release:

Note: Look at the “Tags” view in each repository to see the updated Docker image tags.

Note: Significant changes have been made with Docker images recently. Please look at .NET Docker Announcements for more information.

Previous Monthly Rollups

The last few .NET Framework Monthly updates are listed below for your convenience: