Lee Coward

Today, we are releasing the .NET Core March 2019 Update. These updates contain security and reliability fixes. See the individual release notes for details on included reliability fixes.

.NET Core 2.2.3 and .NET Core SDK 2.2.105 ( Download | Release Notes )
.NET Core 2.1.9 and .NET Core SDK 2.1.505 ( Download | Release Notes )
.NET Core 1.1.12 and .NET Core SDK 1.1.13 ( Download | Release Notes )
.NET Core 1.0.15 and .NET Core SDK 1.1.13 ( Download | Release Notes )

Security
Microsoft Security Advisory CVE-2019-0657: .NET Core NuGet Tampering Vulnerability
A tampering vulnerability exists in NuGet software when executed in a Linux or Mac environment.

The latest .NET Core updates are available on the .NET Core download page. This update is also included in the Visual Studio 15.0.21 (.NET Core 1.0 and 1.1) and 15.9.7 (.NET Core 1.0, 1.1 and 2.1) updates, which is also releasing today.

See the .NET Core release notes ( 1.0.14 | 1.1.11 | 2.1.8 | 2.2.2 ) for details on the release including a issues fixed and affected packages.

Today, we are releasing the .NET Core January 2019 Update. These updates contain security and reliability fixes.

.NET Core 2.1.7 and .NET Core SDK 2.1.503 ( Download | Release Notes )
.NET Core 2.2.1 and .NET Core SDK 2.2.102 ( Download | Release Notes )

Security
CVE-2019-0545: .NET Core Information Disclosure Vulnerability
The security update addresses the vulnerability by enforcing Cross-origin Resource Sharing (CORS) configuration to prevent its bypass in .NET Core 2.1 and 2.2.

.NET Core October 2018 Update
Today, we are releasing the .NET Core October 2018 Update. This update includes .NET Core 2.1.5 and .NET Core SDK 2.1.403 and contains important reliability fixes.

Today, we are releasing the .NET Core September 2018 Update. This update includes .NET Core 2.1.4 and .NET Core SDK 2.1.402 and contains important reliability fixes.
Security
CVE-2018-8409: .NET Core Denial Of Service Vulnerability
A denial of service vulnerability exists in .NET Core 2.1 when System.IO.Pipelines improperly handles requests.

Today, we are releasing the .NET Core August 2018 Update. This update includes .NET Core 2.1.3 and .NET Core SDK 2.1.401.
Getting the Update
The latest .NET Core updates are available on the .NET Core download page.

Visual Studio 2017 (15.3) Preview 2 was recently released which includes .NET Core 1.0 and 1.1, our latest production releases of .NET Core. You will need to install the .NET Core 2.0 Preview 1 SDK to develop .NET Core 2.0 applications using Visual Studio 2017 (15.3) Preview 2 .

Today, we are releasing the .NET Core May Update. This includes .NET Core 1.0.5, 1.1.2 and .NET Core SDK 1.0.4.
Details regarding the security issues addressed by this release can be seen in the Security Advisory announcement
Security
CVE-2017-0247
An issue exists can where,

The title may be a bit grand for what’s included in this month’s update but it is important for folks encountering this specific issue. Look for more in the next month or so.