Posted by: cathal connolly
Friday, December 30, 2011 8:10:47 PM
On Thursday 29th December 2011 Microsoft released an out-of-band security update to address an issue with asp.net . This is a relatively rare thing as Microsoft typically only releases security updates every 2nd Tuesday of the month (known as “Patch Tuesday”) so it indicates that this is a serious issue that Microsoft does not want to leave available for exploitation for another few weeks. The advisory can be read here and there is additional detail on Scott Guthrie's blog here . Due to the nature of this patch we would recommend DotNetNuke hosts and users consider applying the patch as soon as possible (it was made available via Windows Update last night). Whilst the asp.net patch itself does not appear to require a reboot, the other security patches contained with the release do prompt for a reboot so you may wish to apply the patch at a time that does not inconvenience your users.