The well publicised .NET vulnerability is about to be fixed by an out of band patch to be release 28th September (PT).

The bulletin is here. More information about it here. Information about the .NET vulnerability here.