.NET December 2022 Updates – .NET 7.0.1, .NET 6.0.12, .NET Core 3.1.32
- Installers and binaries: 7.0.1 | 6.0.12 | 3.1.32
- Release notes: 7.0.1 | 6.0.12 | 3.1.32
- Container images
- Linux packages: 7.0.1 | 6.0.12 | 3.1.32
- Release feedback/issue
- Known issues: 7.0 | 6.0 | 3.1
- ASP.NET Core: 7.0.1 | 6.0.12 | 3.1.32
- Installer: 7.0.1
- SDK: 7.0.1 | 6.0.12
- Runtime: 7.0.1 | 6.0.12
- Templating: 7.0.1
- Winforms: 7.0.1
Microsoft is releasing this security advisory to provide information about a vulnerability in .NET Core 3.1, .NET 6.0., and .NET 7.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.
A remote code execution vulnerability exists in .NET Core 3.1, .NET 6.0, and .NET 7.0, where a malicious actor could cause a user to run arbitrary code as a result of parsing maliciously crafted xps files.
.NET Core 3.1 End of life
.NET Core 3.1 will reach end of life on December 13, 2022, as described in .NET Releases and per .NET Release Policies. After that time, .NET Core 3.1 patch updates will no longer be provided. We recommend that you move any .NET Core 3.1 applications and environments to .NET 6.0. It’ll be an easy upgrade in most cases. The .NET Releases page is the best place to look for release lifecycle information. Knowing key dates helps you make informed decisions about when to upgrade or make other changes to your software and computing environment.