{"id":12949,"date":"2018-07-31T06:30:03","date_gmt":"2018-07-31T14:30:03","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2018\/07\/31\/news-6716\/"},"modified":"2018-07-31T06:30:03","modified_gmt":"2018-07-31T14:30:03","slug":"news-6716","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2018\/07\/31\/news-6716\/","title":{"rendered":"If at first you don\u2019t succeed, .Net, .Net, .Net again"},"content":{"rendered":"

<\/p>\n

Credit to Author: Woody Leonhard| Date: Tue, 31 Jul 2018 05:49:00 -0700<\/strong><\/p>\n

July will go down in the Microsoft Patching Halls of Infamy as one of the <\/span>worst months ever<\/span><\/a>. Every version of Win10 got three big cumulative updates, and a fourth should be hot on their heels. Let that sink in for a second: Windows patches used to come out once a month, then twice, and now we\u2019re up to three or four a month, sprinkled on random days of the month. And they\u2019re big bunches of fixes.<\/span><\/p>\n

July .Net patches started falling over <\/span>shortly after they were released<\/span><\/a>. The bad patches took down many of Microsoft\u2019s own products. <\/span>Four attempts to fix the problems in two weeks<\/span><\/a> left Microsoft <\/span>advising that you yank them<\/span><\/a> if you have them.<\/span><\/p>\n

Yesterday afternoon, Microsoft released a hefty bunch of .Net patches, and a single patch for Windows itself \u2014 one for Win10 1607\/Server 2016. Microsoft did <\/span>not <\/i><\/strong>release .Net fixes for Win10 1703, 1709 or 1803.<\/span><\/p>\n

Here are the fixed KB articles, per Microsoft\u2019s <\/span>KB 4345913<\/span><\/a>:<\/span><\/p>\n

KB 4346877<\/span><\/a> Update for Windows 10, version 1607 and Windows Server 2016: July 30, 2018<\/span>
<\/span>KB 4346406<\/span><\/a> Update for .Net Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1 and 4.7.2 on Windows 8.1, RT 8.1 and Server 2012 R2 (KB 4346406): July 30, 2018<\/span>
<\/span>KB 4346405 <\/span><\/a>Update for .Net Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1 and 4.7.2 on Windows Server 2012 (KB 4346405): July 30, 2018<\/span>
<\/span>KB 4346407<\/span><\/a> Update for .Net Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1 and 4.7.2 on Windows 7 SP1 and Server 2008 R2 SP1 and .Net Framework 4.6 on Server 2008 SP2 (KB 4346407): July 30, 2018<\/span>
<\/span>KB 4346408<\/span><\/a> Update for .Net Framework 4.5.2 on Windows 8.1, RT 8.1 and Server 2012 R2 (KB 4346408): July 30, 2018<\/span>
<\/span>KB 4346739<\/span><\/a> Update for .Net Framework 4.5.2 on Windows Server 2012 (KB 4346739): July 30, 2018<\/span>
<\/span>KB 4346410<\/span><\/a> Update for .Net Framework 4.5.2 on Windows 7 SP1, Server 2008 R2 SP1 and Server 2008 SP2 (KB 4346410): July 30, 2018<\/span>
<\/span>KB 4346745<\/span><\/a> Update for .Net Framework 3.5 SP1 on Windows 8.1, RT 8.1 and Server 2012 R2 (KB 4346745): July 30, 2018<\/span>
<\/span>KB 4346742<\/span><\/a> Update for .Net Framework 3.5 SP1 on Windows Server 2012 (KB 4346742): July 30, 2018<\/span>
<\/span>KB 4346744 <\/span><\/a>Update for .Net Framework 3.5.1 on Windows 7 SP1 and Windows Server 2008 R2 SP1 (KB 4346744): July 30, 2018<\/span>
<\/span>KB 4346743 <\/span><\/a>Update for .Net Framework 2.0 SP2 and 3.0 SP2 on Windows Server 2008 SP2 (KB 4346743): July 30, 2018 <\/span><\/p>\n

You can see a full list of individual patches in the <\/span>Microsoft Update Catalog<\/span><\/a>.<\/span><\/p>\n

Tellingly, the KB entries for the latest cumulative updates for Win10 versions 1703, 1709 and 1803 all say:<\/span><\/p>\n

After you install any of the <\/span>July 2018 .NET Framework Security Updates<\/span><\/a>, a COM component fails to load because of \u201caccess denied,\u201d \u201cclass not registered,\u201d or \u201cinternal failure occurred for unknown reasons\u201d errors. The most common failure signature is the following: <\/span><\/p>\n

Exception type: System.UnauthorizedAccessException<\/span><\/p>\n

Message: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))<\/span><\/p>\n

Microsoft is working on a resolution and will provide an update in an upcoming release.<\/span><\/p>\n

Except, of course, it hasn\u2019t provided a resolution.<\/span><\/p>\n

The Security TechCenter Security Advisory for <\/span>CVE-2018-8356 | .NET Framework Security Feature Bypass Vulnerability<\/span><\/a> hasn\u2019t been updated, as yet.<\/span><\/p>\n

I haven\u2019t yet seen any reports of problems with this, the fifth version of the July .Net patches \u2014 but the day is yet young.<\/span><\/p>\n

Angry? Help us spit into the wind on the <\/span><\/i>AskWoody Lounge<\/span><\/i><\/a>.<\/span><\/i><\/p>\n

http:\/\/www.computerworld.com\/category\/security\/index.rss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

<\/p>\n

Credit to Author: Woody Leonhard| Date: Tue, 31 Jul 2018 05:49:00 -0700<\/strong><\/p>\n

\n
\n

July will go down in the Microsoft Patching Halls of Infamy as one of the <\/span>worst months ever<\/span><\/a>. Every version of Win10 got three big cumulative updates, and a fourth should be hot on their heels. Let that sink in for a second: Windows patches used to come out once a month, then twice, and now we\u2019re up to three or four a month, sprinkled on random days of the month. And they\u2019re big bunches of fixes.<\/span><\/p>\n

To read this article in full, please click here<\/a><\/p>\n<\/section>\n<\/article>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[11062,10643],"tags":[714,10525],"class_list":["post-12949","post","type-post","status-publish","format-standard","hentry","category-computerworld","category-independent","tag-security","tag-windows"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/12949","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=12949"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/12949\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=12949"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=12949"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=12949"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}