View products that this article applies to.
This security update resolves a security feature bypass vulnerability that exists when Microsoft .NET Framework and .NET Core components do not completely validate certificates. This security update addresses the vulnerability by helping to make sure that .NET Framework and .NET Core components completely validate certificates. To learn more about this vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2018-0786.Additionally, this security update resolves a denial of service vulnerability that exists when .NET Framework and .NET core components improperly process XML documents. This update addresses the vulnerability by correcting how .NET Framework and .NET Core component applications handle XML document processing. To learn more about this vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2018-0764.Important
When certificates are used for authentication, the authenticator examines the certificate that is provided by the remote endpoint and seeks the correct purpose object identifier in Application Policies extensions. When a certificate is used for client authentication, the object identifier for Client Authentication must be present in the EKU extensions of the certificate, or authentication fails. The object identifier for Client Authentication is 1.3.6.1.5.5.7.3.2. Likewise, when a certificate is used for server authentication, the object identifier for Server Authentication must be present in the EKU extensions of the certificate, or authentication fails. The object identifier for Server Authentication is 1.3.6.1.5.5.7.3.1. Certificates that have no EKU extension continue to authenticate correctly.
First, consider making changes to your component’s certificates to make sure that they are using the correct EKU OID attributes and are secured correctly. If you temporarily cannot access correctly reissued certificates, you can choose to opt in or out of the security change to avoid any connectivity effects. To do this, specify the following appsetting in the configuration file:`
<appSettings>
<add key=“wcf:useLegacyCertificateUsagePolicy” value=“true” />
</appSettings>
`Note Setting the value to “true” will opt out of the security changes.
To get the stand-alone package for this update, go to the Microsoft Update Catalog.
On your WSUS server, follow these steps:
For deployment details for this security update, go to the following article in the Microsoft Knowledge Base:20180109 Security update deployment information: January 9, 2018
Note We do not recommend that you remove any security update. To remove this update, use thePrograms and Features item in Control Panel.
This update does not require a system restart after you apply it unless files that are being updated are locked or are being used.
This update replaces update KB 3122651.
Package name | PackageHashSHA1 | PackageHashSHA2 |
---|---|---|
Windows8.1-KB4054177-x64.msu | 432E54D7685A430CDB33835E4BEBABDA1A37F8AD | 6BF73E7F3E88A810368E5E404C489790A94771C0C622E73FB51E28E84A4FC69A |
Windows8.1-KB4054177-x86.msu | D8EF5C0296A85E137840FEAA65DDB64A35A5034E | DA56B8FF7B5991E6303490780373048EDCF3FC9ED81132B9A166707E13AC4033 |
The English (United States) version of this hotfix installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time together with your current daylight-saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.For all x86-based systemsFile name | File version | File size | Date | Time |
---|---|---|---|---|
smdiagnostics.resources.dll | 3.0.4506.7903 | 5,120 | 15-Oct-2015 | 13:35 |
smsvchost.resources.dll | 3.0.4506.7903 | 17,576 | 15-Oct-2015 | 13:35 |
system.servicemodel.resources.dll | 3.0.4506.7903 | 466,944 | 15-Oct-2015 | 13:35 |
system.xml.resources.dll | 2.0.50727.7905 | 163,840 | 15-Aug-2015 | 02:24 |
For all x64-based systemsFile name | File version | File size | Date | Time |
— | — | — | — | — |
smdiagnostics.resources.dll | 3.0.4506.7903 | 5,120 | 22-Sep-2015 | 13:09 |
smsvchost.resources.dll | 3.0.4506.7903 | 17,064 | 21-Oct-2015 | 13:32 |
smsvchost.resources.dll | 3.0.4506.7903 | 17,576 | 21-Oct-2015 | 13:30 |
system.servicemodel.resources.dll | 3.0.4506.7903 | 466,944 | 22-Sep-2015 | 13:09 |
system.xml.resources.dll | 2.0.50727.7905 | 163,840 | 22-Sep-2015 | 13:09 |
This article applies to the following: