microsoft January 2019 Security Updates

Release Notes

January 2019 Security Updates


Release Date: January 08, 2019



The January security release consists of security updates for the following software:


�Adobe Flash Player
�Internet Explorer
�Microsoft Edge
�Microsoft Windows
�Microsoft Office and Microsoft Office Services and Web Apps
�ChakraCore
�.NET Framework
�ASP.NET
�Microsoft Exchange Server
�Microsoft Visual Studio

Please note the following information regarding the security updates:


A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
�Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog.
�Updates for Windows RT 8.1 and Microsoft Office RT software are only available via Windows Update.
�For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.
�In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.

The following CVEs have FAQs with additional information and may include * further steps to take after installing the updates.

�ADV190001
�CVE-2019-0536
�CVE-2019-0537
�CVE-2019-0545
�CVE-2019-0549
�CVE-2019-0553
�CVE-2019-0554
�CVE-2019-0559
�CVE-2019-0560
�CVE-2019-0561
�CVE-2019-0569
�CVE-2019-0585
�CVE-2019-0588

Known Issues

�4480961
�4480973
�4480978
�4480966
�4480970
�4480116
�4480962
�4480963
�4480975
�4468742
�4471389



https://portal.msrc.microsoft.com/en-us/security-gui...

January 22, 2019 � KB4481031 Cumulative update for .NET Framework 3.5 and 4.7.2 for Windows 10, version 1809 and Windows Server 2019
Applies to: .NET Framework

Release Date:
22 January 2019

Version:
.NET Framework 3.5 and 4.7.2

Improvements and fixes

This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:
Addresses a garbage collection issue in JIT-compiled code.
Addresses a race condition that affects IIS-hosted Net.tcp WCF services when the portsharing service is restarted, causing the service to become unavailable.
Addresses issues related to:
Special mode in which the logical call context is not serializable, causing SerializationException when secondary app domains call back to the default domain to collect evidence.
Special mode in which the thread is running under an impersonated user token instead of the primary process token, causing COMException when evidence examination triggers urlmon initialization in the system, which in turn fails because it assumes a level of registry access that is not always present when impersonating
Known issues in this update

Microsoft is not currently aware of any issues in this update.

https://support.microsoft.com/en-gb/help/4481031/jan...