This security update is rated Important for all supported editions of ASP.NET except Microsoft .NET Framework 1.0 Service Pack 3.  This security update resolves a publicly disclosed vulnerability in ASP.NET.  The vulnerability could allow information disclosure.  An attacker who successfully exploited this vulnerability could read data, such as the view state, which was encrypted by the server.  Microsoft .NET Framework versions prior to Microsoft .NET Framework 3.5 Service Pack 1 are not affected by the file content disclosure portion of this vulnerability.  The security update is fully tested and ready for release, but will be made available initially only on the Microsoft Download Center.

Get the update.

More to come,

Mitch 

Subscribe to the TechNet Flash newsletter

The following is provided by Forefront TMG Update 1:

• SafeSearch Enforcement--Forefront TMG can enforce blocking adult text, images and videos from search results by popular search engines. SafeSearch can be enforced on specific groups or to the entire organization.

• Including non-primary URL filtering categorizations--Forefront TMG uses an algorithm to select a URL’s “primary” category from among up to four categorizations provided by Microsoft Reputation Services (MRS). In Update 1 you can control access to sites that match any of the non-primary categorizations provided by MRS. For example, a URL with a primary categorization of News can now match a rule by any of its non-primary categorizations (such as Web Mail).

• Support for Exchange 2010 SP1

• Bug fixes and various other improvements. For details, see http://go.microsoft.com/fwlink/?LinkId=201151.

For more information, see What's new in Forefront TMG 2010 Update 1.

Note: This update can only be installed on servers that have Forefront TMG 2010 SP1 installed.

Download Forefront TMG Update 1

More to come,

Mitch 

Subscribe to the TechNet Flash newsletter

Microsoft Certification can help ensure your IT team has the qualifications to deploy, use, and manage the latest Microsoft technologies. Save 15% when you purchase a 10-pack of Microsoft Certification exam vouchers, including Second Shots, for your team. 

Microsoft Certification can be a valuable hiring and management tool. View this quick and interactive video demo to learn about the value of Microsoft Certification and benefits to your team, how to match an IT job role to the relevant Microsoft Certification, and how to identify qualified candidates.

Microsoft has also developed a special series of webcasts to help managers of IT professionals and developers get the most out of training and certification opportunities and optimize team performance. Register for the webcasts.

More to come,

Mitch 

Subscribe to the TechNet Flash newsletter

Microsoft is investigating a new public report of a vulnerability in ASP.NET. An attacker who exploited this vulnerability could view data, such as the View State, which was encrypted by the target server, or read data from files on the target server, such as web.config. This would allow the attacker to tamper with the contents of the data. By sending back the altered contents to an affected server, the attacker could observe the error codes returned by the server. Microsoft is aware of limited, active attacks at this time.

Read Microsoft Security Advisory (2416728)

More to come,

Mitch 

Subscribe to the TechNet Flash newsletter

Both the Service Pack and Feature Pack updates are now ready for download on the Microsoft Download Center. Service Pack 2 for SQL Server 2008 includes new compatibility features with SQL Server 2008 R2, product improvements based on requests from the SQL Server community, and hotfix solutions provided in SQL Server 2008 SP1 Cumulative Update 1 to 8.

To download the SQL Server 2008 SP2 release, select from the links below:

• SQL Server 2008 SP2: http://go.microsoft.com/fwlink/?LinkId=196550

• SQL Server 2008 SP2 Express: http://go.microsoft.com/fwlink/?LinkId=196551

• SQL Server 2008 SP2 Feature Packs: http://go.microsoft.com/fwlink/?LinkId=202815

More to come,

Mitch 

Subscribe to the TechNet Flash newsletter