.NET May 2021 Updates – 5.0.6, 3.1.15, 2.1.28
Today, we are releasing the .NET May 2021 Updates. These updates contains reliability and security improvements. See the individual release notes for details on updated packages.
- Installers and binaries: 5.0.6 | 3.1.15 | 2.1.28
- Release notes: 5.0.6 | 3.1.15 | 2.1.28
- Container images
- Linux packages: 5.0.6 | 3.1.15 | 2.1.28
- Release feedback/issues
- Known issues: 5.0 | 3.1 | 2.1
Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 5.0 and .NET Core 3.1.
This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.
An elevation of privilege vulnerability exists in .NET 5.0 and .NET Core 3.1 when a user runs a single file application on Operating Systems based on Linux or macOS.
- ASP.NET Core : 5.0.6 | 3.1.15
- CoreFx: 2.1.28
- CoreCLR: 3.1.15
- Extensions: 3.1.15
- Runtime : 5.0.6
- Winforms: 5.0.6
OS Lifecycle update
Behavioral change in Asp.Net 2.1 Installers
Asp.Net 2.1.28 will now install side-by-side with Asp.Net 2.1.6 or earlier. It will still remove previously installed versions of Asp.Net that are 2.1.7 or newer. Users runnning the 2.1.28 Asp.Net Installer or 2.1.28 Hosting Bundle should manually uninstall any local versions of the Asp.Net runtime that are 2.1.6 or earlier.