After applying .NET security fixes released in September 2018 to address CVE-2018-8421 SharePoint workflows stop working

After applying .NET Security Only patch to resolve CVE-2018-8421 (Remote Code Execution Vulnerability), all SharePoint out of the box Workflow fails to execute and the log will show an error like this: 09/13/2018 01:59:07.57 w3wp.exe (0x1868) 0x22FC SharePoint Foundation Workflow Infrastructure 72fs Unexpected RunWorkflow: Microsoft.SharePoint.SPException: <Error> <CompilerError Line=”-1″ Column=”-1″ Text=”Type System.CodeDom.CodeBinaryOperatorExpression is not marked as…


SharePoint 2013/2016 and .NET framework 4.7

I recently received some questions about supportability of SharePoint 2013 and 2016 with .NET framework 4.7 which is now being pushed out via Microsoft Update. .NET framework 4.7 is supported as well with SharePoint 2013 and with SharePoint Server 2016.


Heads-Up: Info on unsupported .NET framework versions (e.g. in SharePoint environments)

In the last two months I have worked on several SharePoint issues where we identified that the servers running SharePoint were still using .NET framework 4.5 or .NET framework 4.5.1 which are unsupported since around a year (supported ended January 12th, 2016 as announced in August 2014): Support Lifecycle for .NET 4.5: Support Lifecycle for .NET…


SharePoint 2013 installer now supports .NET Framework 4.6 and above

The SharePoint installer released with SharePoint 2013 is not able to detect the most recent .NET Framework versions and incorrectly reports that .NET 4.5 needs to be installed first. We just released a fix for the problem with the SharePoint 2013 installer if the machine has .NET Framework 4.6 or above installed. Install location for…


Finally: DebugDiag 1.2 available on Microsoft Download Center

Finally after a long beta phase the final version of DebugDiag 1.2 has been released. The Debug Diagnostic Tool (DebugDiag) is designed to assist in troubleshooting issues such as hangs, slow performance, memory leaks or fragmentation, and crashes in any user-mode process. The tool includes additional debugging scripts focused on Internet Information Services (IIS) applications,…


Important Out-of-band security update to address ASP.NET issue will be released today

Cross posting info about an important update for ASP.NET which will address an issue that affects all ASP.NET applications including SharePoint and MCMS. [cross post from Microsoft Security Response Center blog] Today we provided advance notification to customers that we will release an out-of-band security update to address the vulnerability discussed in Security Advisory 2416728….


How to deal with invalid characters in SOAP responses from ASP.NET web services

ASP.NET webservices use XML 1.0 which restricts the character set allowed to the following chars: [2]    Char    ::=    #x9 | #xA | #xD | [#x20-#xD7FF] | [#xE000-#xFFFD] | [#x10000-#x10FFFF] /* any Unicode character, excluding the surrogate blocks, FFFE, and FFFF. */ (Source: As you can see several characters below 0x20 are not allowed with…


ASP.NET AJAX 1.0 has been released!

ASP.NET AJAX 1.0 (formerly known as Atlas) has been released. You can download it from here. If you would like to use it together with MCMS you should know this article.


Microsoft® Visual Studio® .NET™ 2003 Service Pack 1 available for download

Brief Description This download installs Service Pack 1 for Microsoft® Visual Studio® .NET™ 2003. Overview This download installs Service Pack 1 for Microsoft® Visual Studio® .NET™ 2003. Fixes in this Service Pack concern stability and security enhancements made in many areas of the product. A comprehensive list of hotfixes requested by customers since the release…


New MCMS book covering ASP.NET 2.0 topics is now officially announced

As some of you might already heard of: Lim Mei Ying (MCMS MVP), Spencer Harber (MCMS MVP) and myself are currently working on a book that covers enhancing MCMS websites using ASP.NET 2.0 features. It will deal with all the glitches of properly installing MCMS with VS.NET 2005 and SQL 2005, known issues and for…