Windows 10: .NET Core October 2018 Update - NET Core 1.0 and 1.1

Brink · Oct 9, 2018

Today, we are releasing the .NET Core October 2018 Update for 1.0 and 1.1. This update includes .NET Core 1.0.13, 1.1.10 and .NET Core SDK 1.1.11.

Security

CVE-2018-8292: .NET Core Information Disclosure Vulnerability

Microsoft is aware of a security feature bypass vulnerability that exists when .NET Core when HTTP authentication information is inadvertently exposed in an outbound request that encounters an HTTP redirect. An attacker who successfully exploited this vulnerability could use the information to further compromise the web application.

The update addresses the vulnerability by correcting how .NET Core applications handles HTTP redirects.

Getting the Update

The latest .NET Core updates are available on the .NET Core download page.

Today’s releases are listed as follows:

.NET Core 1.1.10

.NET Core 1.0.13

Docker Images

.NET Docker images have been updated for today’s release. The following repos have been updated.

microsoft/dotnet

Note: Look at the “Tags” view in each repository to see the updated Docker image tags.

Note: You must re-pull base images in order to get updates. The Docker client does not pull updates automatically.

Azure App Services deployment

Deployment to Azure App Services has begun and the West Central US region will be live this morning. Remaining regions will be updated over the next few days and deployment is expected to be complete by end of week.
Click to expand...

Source: .NET Core October 2018 Update - NET Core 1.0 and 1.1 | .NET Blog

:)

Brink · Oct 9, 2018

Announcing .NET Core 2.1

We’re excited to announce the release of .NET Core 2.1. It includes improvements to performance, to the runtime and tools. It also includes a new way to deploy tools as NuGet packages. We’ve added a new primitive type called Span<T> that operates on data without allocations. There are many other new APIs, focused on cryptography, compression, and Windows compatibility. It is the first release to support Alpine Linux and ARM32 chips. You can start updating existing projects to target .NET Core 2.1 today. The release is compatible with .NET Core 2.0, making updating easy.

ASP.NET Core 2.1 and Entity Framework Core 2.1 are also releasing today.

You can download and get started with .NET Core 2.1, on Windows, macOS, and Linux:

.NET Core 2.1 SDK (includes the runtime)

.NET Core 2.1 Runtime

.NET Core 2.1 is supported by Visual Studio 15.7, Visual Studio for Mac and Visual Studio Code.

Docker images are available at microsoft/dotnet for .NET Core and ASP.NET Core.

The Build 2018 conference was earlier this month. We had several in-depth presentations on .NET Core. Check out Build 2018 sessions for .NET on Channel9.

You can see complete details of the release in the .NET Core 2.1 release notes. Related instructions, known issues, and workarounds are included in the releases notes. Please report any issues you find in the comments or at dotnet/core #1614

Thanks for everyone that contributed to .NET Core 2.1. You’ve helped make .NET Core a better product!
Click to expand...

Read more: Announcing .NET Core 2.1 | .NET Blog

Brink · Oct 9, 2018

.NET Core January 2018 Update

Today, we are releasing the .NET Core January 2018 Update. This includes .NET Core 1.0.9, 1.1.6 and 2.0.5.

Please leave feedback on the release in the comments below or at dotnet/core #1199.

Security

CVE-2018-0786 – Security Feature Bypass in X509 Certificate Validation

Microsoft is aware of a security vulnerability in the public versions of .NET Core where an attacker could present a certificate that is marked invalid for a specific use, but a component uses it for that purpose. This action disregards the Enhanced Key Usage tagging.

The security update addresses the vulnerability by ensuring that .NET Core components completely validate certificates.

CVE-2018-0786

CVE-2018-0764 – Denial of Service when parsing XML documents

Microsoft is aware of a Denial of Service vulnerability in all public versions of .NET core due to improper processing of XML documents. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET application. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to a .NET Core application.

The update addresses the vulnerability by correcting how .NET core handles XML document processing.

CVE-2018-0764

Getting the Update

The .NET Core January 2017 Update is available from the .NET Core download page.

You can always download the latest version of .NET Core at .NET Downloads.

Docker Images

.NET Docker images have been updated for today’s release. The following repos have been updated.

microsoft/dotnet

microsoft/dotnet-samples

microsoft/aspnetcore/

microsoft/aspnetcore-build/

Note: Look at the “Tags” view in each repository to see the updated Docker image tags.

Note: You must re-pull base images in order to get updates. The Docker client does not pull updates automatically.
Click to expand...

Source: .NET Core January 2018 Update | .NET Blog

Brink · Oct 9, 2018

.NET Core August 2018 Update now released

Today, we are releasing the .NET Core August 2018 Update. This update includes .NET Core 2.1.3 and .NET Core SDK 2.1.401.

Getting the Update

The latest .NET Core updates are available on the .NET Core download page.

See the .NET Core 2.1.3 release notes for details on the release including a detailed commit list.

Docker Images

.NET Docker images have been updated for today’s release. The following repos have been updated.

microsoft/dotnet
microsoft/dotnet-samples

Note: Look at the “Tags” view in each repository to see the updated Docker image tags.

Note: You must re-pull base images in order to get updates. The Docker client does not pull updates automatically.

2.1 declared LTS

As mentioned in a previous blog post, we have been working toward declaring .NET Core 2.1 as LTS. With the August Update, we’re pleased to announce that 2.1.3 begins the .NET Core 2.1 LTS lifecycle. We’ll continue to update 2.1 with important fixes to address security and reliability issues as wells as add support for new operating system versions. Details on the .NET Core lifecycle can be seen in the .NET Core support policy.

What’s covered?

The LTS designation covers all packages referenced by Microsoft.NETCore.App and Microsoft.AspNetCore.App. To ensure that applications running on 2.1 remain on the LTS supported updates, it’s important to reference these ‘meta-packages’ rather than individual ‘loose’ packages. This will enable the applications to properly utilize 2.1 updates when they are released and installed.

The .NET Core SDK is not included as part of the LTS designation. SDK fixes will continue to be released in the latest version ‘train’ which supports maintaining and building applications for .NET Core 2.1.

See .NET Core Supported OS Lifecycle Policy to learn about Windows, macOS and Linux versions that are supported for each .NET Core release.
Click to expand...

Source: .NET Core August 2018 Update | .NET Blog

Windows 10: .NET Core October 2018 Update - NET Core 1.0 and 1.1

.NET Core October 2018 Update - NET Core 1.0 and 1.1

.NET Core October 2018 Update - NET Core 1.0 and 1.1

.NET Core October 2018 Update - NET Core 1.0 and 1.1

.NET Core October 2018 Update - NET Core 1.0 and 1.1 - Similar Threads - NET Core October

.NET Core October 2020 Updates - 2.1.23 and 3.1.9

Announcing .NET Core 3.1 Preview 1

Announcing .NET Core 3.0 Release Candidate 1

.NET Core 3 Preview 1 and Open Source Windows Desktop Frameworks

.NET Core October 2018 Update now released

.NET Core September 2018 Update now available

.NET Core August 2018 Update now released

Running on 1 core out of 4

.NET Core January 2018 Update