Windows 10: .NET Core September 2018 Update now available

Brink · Sep 12, 2018

Today, we are releasing the .NET Core September 2018 Update. This update includes .NET Core 2.1.4 and .NET Core SDK 2.1.402 and contains important reliability fixes.

Security

CVE-2018-8409: .NET Core Denial Of Service Vulnerability
A denial of service vulnerability exists in .NET Core 2.1 when System.IO.Pipelines improperly handles requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an application that is leveraging System.IO.Pipelines. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by providing specially crafted requests to the application.

CVE-2018-8409: ASP.NET Core Denial Of Service Vulnerability
A denial of service vulnerability exists in ASP.NET Core 2.1 that improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by providing a specially crafted web requests to the ASP.NET Core application.

Getting the Update

The latest .NET Core updates are available on the .NET Core download page. This update is included in Visual Studio 15.8.4, which is also releasing today.

Additional details, such as how to update vulnerable applications, can be found in the ASP.NET Core and .NET Core repo announcements.

See the .NET Core 2.1.4 release notes for details on the release including a detailed commit list.

Docker Images

.NET Docker images have been updated for today’s release. The following repos have been updated.

microsoft/dotnet
microsoft/dotnet-samples

Note: Look at the “Tags” view in each repository to see the updated Docker image tags.

Note: You must re-pull base images in order to get updates. The Docker client does not pull updates automatically.

Azure App Services deployment

Deployment of .NET Core 2.1.4 to Azure App Services has begun and the West Central US region will be live this morning. Remaining regions will be updated over the next few days and deployment is expected to be complete by end of week.
Click to expand...

Source: .NET Core September 2018 Update | .NET Blog

:)

Brink · Sep 12, 2018

.NET Core January 2018 Update

Today, we are releasing the .NET Core January 2018 Update. This includes .NET Core 1.0.9, 1.1.6 and 2.0.5.

Please leave feedback on the release in the comments below or at dotnet/core #1199.

Security

CVE-2018-0786 – Security Feature Bypass in X509 Certificate Validation

Microsoft is aware of a security vulnerability in the public versions of .NET Core where an attacker could present a certificate that is marked invalid for a specific use, but a component uses it for that purpose. This action disregards the Enhanced Key Usage tagging.

The security update addresses the vulnerability by ensuring that .NET Core components completely validate certificates.

CVE-2018-0786

CVE-2018-0764 – Denial of Service when parsing XML documents

Microsoft is aware of a Denial of Service vulnerability in all public versions of .NET core due to improper processing of XML documents. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET application. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to a .NET Core application.

The update addresses the vulnerability by correcting how .NET core handles XML document processing.

CVE-2018-0764

Getting the Update

The .NET Core January 2017 Update is available from the .NET Core download page.

You can always download the latest version of .NET Core at .NET Downloads.

Docker Images

.NET Docker images have been updated for today’s release. The following repos have been updated.

microsoft/dotnet

microsoft/dotnet-samples

microsoft/aspnetcore/

microsoft/aspnetcore-build/

Note: Look at the “Tags” view in each repository to see the updated Docker image tags.

Note: You must re-pull base images in order to get updates. The Docker client does not pull updates automatically.
Click to expand...

Source: .NET Core January 2018 Update | .NET Blog

Brink · Sep 12, 2018

.NET Core August 2018 Update now released

Today, we are releasing the .NET Core August 2018 Update. This update includes .NET Core 2.1.3 and .NET Core SDK 2.1.401.

Getting the Update

The latest .NET Core updates are available on the .NET Core download page.

See the .NET Core 2.1.3 release notes for details on the release including a detailed commit list.

Docker Images

.NET Docker images have been updated for today’s release. The following repos have been updated.

microsoft/dotnet
microsoft/dotnet-samples

Note: Look at the “Tags” view in each repository to see the updated Docker image tags.

Note: You must re-pull base images in order to get updates. The Docker client does not pull updates automatically.

2.1 declared LTS

As mentioned in a previous blog post, we have been working toward declaring .NET Core 2.1 as LTS. With the August Update, we’re pleased to announce that 2.1.3 begins the .NET Core 2.1 LTS lifecycle. We’ll continue to update 2.1 with important fixes to address security and reliability issues as wells as add support for new operating system versions. Details on the .NET Core lifecycle can be seen in the .NET Core support policy.

What’s covered?

The LTS designation covers all packages referenced by Microsoft.NETCore.App and Microsoft.AspNetCore.App. To ensure that applications running on 2.1 remain on the LTS supported updates, it’s important to reference these ‘meta-packages’ rather than individual ‘loose’ packages. This will enable the applications to properly utilize 2.1 updates when they are released and installed.

The .NET Core SDK is not included as part of the LTS designation. SDK fixes will continue to be released in the latest version ‘train’ which supports maintaining and building applications for .NET Core 2.1.

See .NET Core Supported OS Lifecycle Policy to learn about Windows, macOS and Linux versions that are supported for each .NET Core release.
Click to expand...

Source: .NET Core August 2018 Update | .NET Blog

Brink · Sep 12, 2018

Announcing .NET Core 2.1

We’re excited to announce the release of .NET Core 2.1. It includes improvements to performance, to the runtime and tools. It also includes a new way to deploy tools as NuGet packages. We’ve added a new primitive type called Span<T> that operates on data without allocations. There are many other new APIs, focused on cryptography, compression, and Windows compatibility. It is the first release to support Alpine Linux and ARM32 chips. You can start updating existing projects to target .NET Core 2.1 today. The release is compatible with .NET Core 2.0, making updating easy.

ASP.NET Core 2.1 and Entity Framework Core 2.1 are also releasing today.

You can download and get started with .NET Core 2.1, on Windows, macOS, and Linux:

.NET Core 2.1 SDK (includes the runtime)

.NET Core 2.1 Runtime

.NET Core 2.1 is supported by Visual Studio 15.7, Visual Studio for Mac and Visual Studio Code.

Docker images are available at microsoft/dotnet for .NET Core and ASP.NET Core.

The Build 2018 conference was earlier this month. We had several in-depth presentations on .NET Core. Check out Build 2018 sessions for .NET on Channel9.

You can see complete details of the release in the .NET Core 2.1 release notes. Related instructions, known issues, and workarounds are included in the releases notes. Please report any issues you find in the comments or at dotnet/core #1614

Thanks for everyone that contributed to .NET Core 2.1. You’ve helped make .NET Core a better product!
Click to expand...

Read more: Announcing .NET Core 2.1 | .NET Blog

Windows 10: .NET Core September 2018 Update now available

.NET Core September 2018 Update now available

.NET Core September 2018 Update now available

.NET Core September 2018 Update now available

.NET Core September 2018 Update now available - Similar Threads - NET Core September

The Windows September 2023 security updates are now available

.NET Core September 2020 Updates - 2.1.22 and 3.1.8

.NET Core October 2018 Update - NET Core 1.0 and 1.1

.NET Core October 2018 Update now released

.NET Framework September 2018 Security and Quality Rollup

September 2018 updates for Microsoft Office

.NET Core August 2018 Update now released

.NET Framework July 2018 Update available

.NET Core January 2018 Update