大家好, 我是 Richard Chen。

在此通知各位微软已于北京时间九月二十九日清晨为为 ASP.NET 中存在的漏洞发布了紧急安全补丁 MS10-070, 最高级别为重要等级。

这个紧急补丁目前通过 微软下载中心 提供, 稍后会通过 Windows Update 和 Windows Server Update Services 补丁自动推送渠道提供。所以现在需要手动下载和部署补丁, 不同版本 .NET 平台上的补丁下载信息: 

Windows Server 2008 R2 and Windows 7

.NET Framework Version

KB Article

Patch

.NET Framework 3.5.1 (默认安装)

KB2416471

Download

.NET Framework 4

KB2416472

Download

 

Windows Server 2008 SP2, Windows Vista SP2

.NET Framework Version

KB Article

Patch

.NET Framework 2.0 SP2 (默认安装)

KB2416470

Download

.NET Framework 4

KB2416472

Download

.NET Framework 3.5 SP1

KB2416470, KB2416473

Download, Download*

.NET Framework 3.5

KB2416470, KB2418240

Download, Download*

.NET Framework 1.1 SP1

KB2416447

Download

 

Windows Server 2008, Windows Vista SP1

.NET Framework Version

KB Article

Patch

.NET Framework 2.0 SP1 (默认安装)

KB2416469

Download

.NET Framework 4

KB2416472

Download

.NET Framework 3.5 SP1

KB2416474, KB2416473

Download, Download*

.NET Framework 2.0 SP2

KB2416474

Download

.NET Framework 3.5

KB2416469, KB2418240

Download, Download*

.NET Framework 1.1 SP1

KB2416447

Download

 

Windows Server 2003 SP2 32-bit

.NET Framework Version

KB Article

Patch

.NET Framework 1.1 SP1 (默认安装)

KB2416451

Download

.NET Framework 4

KB2416472

Download

.NET Framework 3.5 SP1

KB2418241, KB2416473

Download, Download*

.NET Framework 2.0 SP2

KB2418241

Download

.NET Framework 3.5

KB2416468, KB2418240

Download, Download*

 

Windows Server 2003 64-bit

.NET Framework Version/SP

KB Article

Patch

Default OS Configuration

N/A

N/A

.NET Framework 4

KB2416472

Download

.NET Framework 3.5 SP1

KB2418241, KB2416473

Download, Download*

.NET Framework 2.0 SP2

KB2418241

Download

.NET Framework 3.5

KB2416468, KB2418240

Download, Download*

.NET Framework 1.1 SP1

KB2416447

Download

 

Windows XP SP3 32-bit and 64-bit

.NET Framework Version/SP

KB Article

Patch

Default OS Configuration

N/A

N/A

.NET Framework 4

KB2416472

Download

.NET Framework 3.5 SP1

KB2418241, KB2416473

Download, Download*

.NET Framework 2.0 SP2

KB2418241

Download

.NET Framework 3.5

KB2416468, KB2418240

Download, Download*

.NET Framework 1.1 SP1

KB2416447

Download

* 一个 .NET 版本上给出的多个补丁都要安装, 安装顺序无要求。

 

详细信息请参考 MS10-070 安全公告 (英文):

http://www.microsoft.com/technet/security/bulletin/ms10-070.mspx

更多参考资源:

谢谢。

Richard Chen
大中华区软件安全项目经理