Fix has been pushed http://weblogs.asp.net/scottgu/arch...curity-update-shipping-tuesday-sept-28th.aspx