Welcome to our new combined .NET servicing updates for May 2024. To help streamline and help you keep up to date with the latest service releases we have decided to combine together our update posts around both .NET & .NET Framework so you can find all the information in one convenient location on the blog. Don’t forget that you can find updates about .NET previews on GitHub, specifically for .NET 9. Let’s get into the latest release of .NET & .NET Framework, here is a quik overview of what’s new in these releases:
Security improvements
This month you will find two CVEs that have been fixed this month:
| CVE # | Title | Applies to |
|---|---|---|
| CVE-2024-30046 | .NET Elevation of Privilege Vulnerability | .NET 7.0, .NET 8.0 |
| CVE-2024-30045 | .NET Remote Code Execution Vulnerability | .NET 7.0, .NET 8.0 |
Note: There are no new security improvements for .NET Framework this release.
Known Issue with .NET May 14 2024 update
Symptom
WiX toolset signed with incorrect certificate
The .NET 8.0.5, .NE& 7.0.19, .NET 6.0.30 release on May 14, 2024 included updates to the WiX toolset which were incorrectly signed. This caused failures in scenarios on Windows where Code Integrity checks were enabled.
Resolution
We released an update to .NET 6.0, .NET 7.0 , and .NET 8.0 on May 28, 2024
| .NET 6.0 | .NET 7.0 | .NET 8.0 | |
|---|---|---|---|
| Release Notes | 6.0.31 | 7.0.20 | 8.0.6 |
| Installers and binaries | 6.0.31 | 7.0.20 | 8.0.6 |
| Container Images | images | images | images |
| Linux packages | 6.0.31 | 7.0.20 | 8.0.6 |
| Known Issues | 6.0 | 7.0 | 8.0 |
.NET May 14 2024 Updates
Below you will find a details list of everything from the .NET release for May 2024 including .NET 6.0.30, .NET 7.0.19, and .NET 8.0.5:
| .NET 6.0 | .NET 7.0 | .NET 8.0 | |
|---|---|---|---|
| Release Notes | 6.0.30 | 7.0.19 | 8.0.5 |
| Installers and binaries | 6.0.30 | 7.0.19 | 8.0.5 |
| Container Images | images | images | images |
| Linux packages | 6.0.30 | 7.0.19 | 8.0.5 |
| Known Issues | 6.0 | 7.0 | 8.0 |
Share feedback about this release in the Release feedback issue.
.NET Framework May 2024 Updates
This month, there are several non-security updates in these releases, be sure to browse our release notes for .NET Framework for more details.
See you next month
Let us know what you think of these new combined service release blogs as we continue to iterate to bring you the latest news and updates for .NET.
What about “.NET and .NET Framework JUNE 2024 Servicing Updates”?!
Why has there been a lack of discipline since the release of .NET 8.0?
Why hasn’t the news of .NET 9.0 Preview and its associated technologies and tools been published in this set of official blogs?
Thanks for the updates
I somehow miss similar blogpost for .NET 8.0.6/7.0.20 – is it planned ?
Is it okay that https://hub.docker.com/_/microsoft-dotnet-aspnet/ doesn’t list the latest updates? I can for e.g. only see 8.0.3 instead of the latest 8.0.6. But I can pull 8.0.5 and 8.0.4.
In the table, it says CVE-2024-30045 applies to “.NET 8.0, .NET 8.0”. Is that a typo?
David
.NET 7 and .NET 8