Microsoft has released the emergency out-of-band patch for the ASP.NET padding oracle attack. The patch is only available through Microsoft s Download Center right now, but the company plans to push it out over Windows Update and Windows Server Update within a few days. The company will hold a live webcast at 4 p.m. EDT Tuesday to discuss the vulnerability and the patch release. This is the second time in less than two months that Microsoft has issued an emergency patch.
Source: https://threatpost.com/microsoft-pushes-emergency-patch-aspnet-flaw-092810/74525/