29 September 2010, 10:32

Patch fixes vulnerability in ASP.NET

As announced, Microsoft has released out-of-schedule patches for ASP.NET to fix flaws in the implementation of the framework's cryptographic functions. For now, at least, the patches have only been made available at the Microsoft Download Center so that administrators can quickly install them on their servers.

However, they aren't exactly presented in a very obvious way. While there is a specific "Now Available" item, the associated link only leads to the related bulletin, MS10-070. The patches for the various .NET variants and server versions themselves can be found at various places in the "New Downloads" section. They date from the 27th of September 2010 (9/27/2010) and are called "Security Update for Microsoft .NET Framework":