Via Slashdot: Microsoft .NET Patch May Make PCs Go "Haywire"

["Richard M. Smith" <rms () computerbytesman com>]

Hmm, "recompiling all the .NET assemblies" doesn't sound like a "security
patch" to me..

 

Richard

 

http://developers.slashdot.org/developers/07/07/13/1227225.shtml

 

"Various people are reporting that the
<http://www.microsoft.com/technet/security/Bulletin/MS07-040.mspx>  MS07-040
patch for .NET released on Tuesday can cause
<http://www.computerweekly.com/Articles/2007/07/10/225467/microsoft-july-upd
ates-for-critical-excel-windows-and-.net.htm>  a variety of seemingly
unrelated problems. According to the SANS Internet Storm Center 'the reports
we got so far seem not to lead to any specific
<http://isc.sans.org/diary.html?storyid=3132>  thing that happens in many
cases, just various things going haywire.' Some commentators on The
Register's report of this story indicate that the
<http://www.theregister.co.uk/2007/07/12/ms_patch_problems/comments/>  patch
failed to install at all, while others report things like the mouse suddenly
failing to work or long periods of hard drive thrashing. In some cases a
hard reboot seems to fix the problem, but other reports suggest that a
reinstallation of the .NET framework itself is required. The problems may
<http://searchwincomputing.techtarget.com/tip/0,289483,sid68_gci1225866,00.h
tml>  be related to the MSCORSVW.EXE process which recompiles all the .NET
assemblies when the patch is downloaded. While the recompilations are
supposed to run as a background task, in some instances the recompilation
will drive the processor to 100% usage."

 

 

A related write-up from 2003:

 

http://www.computerbytesman.com/security/windowsupdate.htm

 

Windows Update: A single point of failure for the world's economy?

 

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.