Slashdot Mirror
Microsoft .NET Patch May Make PCs Go "Haywire"
yuna49 writes "Various people are reporting that the MS07-040 patch for .NET released on Tuesday can cause a variety of seemingly unrelated problems. According to the SANS Internet Storm Center 'the reports we got so far seem not to lead to any specific thing that happens in many cases, just various things going haywire.' Some commentators on The Register's report of this story indicate that the patch failed to install at all, while others report things like the mouse suddenly failing to work or long periods of hard drive thrashing. In some cases a hard reboot seems to fix the problem, but other reports suggest that a reinstallation of the .NET framework itself is required. The problems may be related to the MSCORSVW.EXE process which recompiles all the .NET assemblies when the patch is downloaded. While the recompilations are supposed to run as a background task, in some instances the recompilation will drive the processor to 100% usage."
in some instances the recompilation will drive the processor to 100% usage
No, kidding ? You mean the background task don't deliberately leave CPU cycles for the sake of increasing idle time ? Amazing.
This kind of summary don't push me hard to RTFA.
Should I just install Gentoo again!?!
Didn't read the rest of your note, but yes.
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
It's a remote code execution fix. It is irresponsible to dismiss it out of hand. If you're not applying the patch, you have up to three workarounds per system to apply. The workaround, by the way, is basically to disable Active Scripting. That is, no Java Script and no ActiveX controls. That's typically not satisfactory. The IIS ASP.NET fix is to strip NULLs from input. That's not going to happen very easily for proprietary web app software.
Are you also "sitting on" MS07-039? Denial of service on AD is bad. Every admin I know applied this patch on Tuesday.
You also, you know, could be testing the patch in your environment before deployment to see if any issues arise.
The issue is also fairly uncommon from what I've seen. The majority of admins I've heard from have experienced no issues. If it's actually an issue with the patch and not just a AV scanner file locking issue due to the patch being 15 MB (which it has been for at least two people I've heard from) then MS will issue a revision.
A far, far worse bug is the fact that can break recent versions of Sharepoint.
The road to tyranny has always been paved with claims of necessity.
If your processor is going to be recompiling stuff constantly anyway, you might aswell use Gentoo ;).
Aha! Any second now your system will be shutti
Tie two birds together: although they have four wings, they cannot fly. (The blind man)