March 12th, 2024

.NET March 2024 Updates – .NET 8.0.3, 7.0.17, .NET 6.0.28

Rahul Bhandari (MSFT)
Senior Program Manager

Today, we are releasing the .NET March 2024 Updates. These updates contain security and non-security improvements. Your app may be vulnerable if you have not deployed a recent .NET update.

You can download 8.0.3, 7.0.17 and, 6.0.28 versions for Windows, macOS, and Linux, for x86, x64, Arm32, and Arm64.

Windows Package Manager CLI (winget)

You can now install .NET updates using the Windows Package Manager CLI (winget):

  • To install the .NET 8 runtime: winget install dotnet-runtime-8
  • To install the .NET 8 SDK: winget install dotnet-sdk-8
  • To update an existing installation: winget upgrade

See Install with Windows Package Manager (winget) for more information.

Improvements

Security

CVE-2024-21392 | .NET Denial of Service Vulnerability

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 7.0 and .NET 8.0 . This advisory also provides guidance on what developers can do to update their applications to address this vulnerability.

A vulnerability exists in .NET where specially crafted requests may cause a resource leak, leading to a Denial of Service

CVE-2024-26190 | Microsoft QUIC Denial of Service Vulnerability

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 7.0 and .NET 8.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

A Vulnerability exist in MsQuic.dll which might result in a peer to allocate small chunks of memory as long as connection stays alive.

Visual Studio

See release notes for Visual Studio compatibility for .NET 8.0, .NET 7.0 and, .NET 6.0.

Author

Rahul Bhandari (MSFT)
Senior Program Manager

I am a Program Manager on .NET team. I specializes in .NET release processes. University of Florida Alumnus.

10 comments

Discussion is closed. Login to edit/delete existing comments.

  • Serge Nalishiwa

    If one runs dotnet –version what version is expected for the SDK? Is it 8.0.3 or 8.0.202?

    • Rahul Bhandari (MSFT)Microsoft employee Author

      .NET 8.0 latest Runtime version is 8.0.3. .NET 8.0 latest SDK version is 8.0.202

      • dinna smoothie

        it’s awesome!

    • anonymous · Edited

      This comment has been deleted.

      • anonymous · Edited

        This comment has been deleted.

      • anonymous · Edited

        This comment has been deleted.

      • anonymous

        This comment has been deleted.

      • anonymous

        This comment has been deleted.

      • anonymous

        This comment has been deleted.

      • anonymous

        This comment has been deleted.