{"id":31691,"date":"2021-02-09T11:24:20","date_gmt":"2021-02-09T18:24:20","guid":{"rendered":"https:\/\/devblogs.microsoft.com\/dotnet\/?p=31691"},"modified":"2021-02-09T11:24:20","modified_gmt":"2021-02-09T18:24:20","slug":"net-february-2021","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/dotnet\/net-february-2021\/","title":{"rendered":".NET February 2021 Updates \u2013 5.0.3, 3.1.12, 2.1.25"},"content":{"rendered":"<p>Today, we are releasing the <a href=\"https:\/\/github.com\/dotnet\/announcements\/issues\/174\">.NET February 2021 Updates<\/a>. These updates contains reliability and security improvements. See the individual release notes for details on updated packages.<\/p>\n<p class=\"\">You can download <a href=\"https:\/\/dotnet.microsoft.com\/download\/dotnet\/5.0\">5.0.3<\/a>\u00a0,<a href=\"https:\/\/dotnet.microsoft.com\/download\/dotnet-core\/3.1\"> 3.1.12<\/a>, <a href=\"https:\/\/dotnet.microsoft.com\/download\/dotnet-core\/2.1\">2.1.25<\/a> versions for Windows, macOS, and Linux, for x86, x64, Arm32, and Arm64.<\/p>\n<ul>\n<li>Installers and binaries: <a href=\"https:\/\/dotnet.microsoft.com\/download\/dotnet\/5.0\">5.0.3<\/a> | <a href=\"https:\/\/dotnet.microsoft.com\/download\/dotnet-core\/3.1\">3.1.12<\/a> | <a href=\"https:\/\/dotnet.microsoft.com\/download\/dotnet-core\/2.1\">2.1.25<\/a><\/li>\n<li class=\"\">Release notes: <a href=\"https:\/\/github.com\/dotnet\/core\/blob\/master\/release-notes\/5.0\/5.0.3\/5.0.3.md\">5.0.3<\/a> | <a href=\"https:\/\/github.com\/dotnet\/core\/blob\/master\/release-notes\/3.1\/3.1.12\/3.1.12.md\">3.1.12<\/a> | <a href=\"https:\/\/github.com\/dotnet\/core\/blob\/master\/release-notes\/2.1\/2.1.25\/2.1.25.md\">2.1.25<\/a><\/li>\n<li class=\"\"><a href=\"https:\/\/hub.docker.com\/_\/microsoft-dotnet\">Container images<\/a><\/li>\n<li class=\"\">Linux packages: <a href=\"https:\/\/github.com\/dotnet\/core\/blob\/master\/release-notes\/5.0\/5.0.3\/5.0.3-install-instructions.md\">5.0.3<\/a> | <a href=\"https:\/\/github.com\/dotnet\/core\/blob\/master\/release-notes\/3.1\/3.1.12\/3.1.12-install-instructions.md\">3.1.12<\/a> | <a href=\"https:\/\/github.com\/dotnet\/core\/blob\/master\/release-notes\/2.1\/2.1.25\/2.1.25-install-instructions.md\">2.1.25<\/a><\/li>\n<li><a href=\"https:\/\/github.com\/dotnet\/core\/issues\/5932\" target=\"_blank\" rel=\"noopener noreferrer\">Release feedback\/issues<\/a><\/li>\n<li class=\"\">Known issues: <a href=\"https:\/\/github.com\/dotnet\/core\/blob\/master\/release-notes\/5.0\/5.0-known-issues.md\">5.0<\/a> | <a href=\"https:\/\/github.com\/dotnet\/core\/blob\/master\/release-notes\/3.1\/3.1-known-issues.md\">3.1<\/a> | <a href=\"https:\/\/github.com\/dotnet\/core\/blob\/master\/release-notes\/2.1\/2.1.0-known-issues.md\">2.1<\/a><\/li>\n<\/ul>\n<div>\n<h2 id=\"security\">Security<\/h2>\n<div>\n<h3><span style=\"font-size: 18pt;\"><a href=\"https:\/\/portal.msrc.microsoft.com\/en-us\/security-guidance\/advisory\/CVE-2021-1721\">CVE-2021-1721: .NET Core Denial of Service Vulnerability<\/a><\/span><\/h3>\n<\/div>\n<div>\n<div>\n<div>Microsoft\u00a0is\u00a0releasing\u00a0this\u00a0security\u00a0advisory\u00a0to\u00a0provide\u00a0information\u00a0about\u00a0a\u00a0vulnerability\u00a0in\u00a0.NET\u00a05,\u00a0.NET\u00a0Core\u00a03.1,\u00a0and\u00a0.NET\u00a0Core\u00a02.1.\u00a0This\u00a0advisory\u00a0also\u00a0provides\u00a0guidance\u00a0on\u00a0what\u00a0developers\u00a0can\u00a0do\u00a0to\u00a0update\u00a0their\u00a0applications\u00a0to\u00a0remove\u00a0this\u00a0vulnerability.<\/div>\n<div>A\u00a0denial-of-service\u00a0vulnerability\u00a0exists\u00a0when\u00a0creating\u00a0HTTPS\u00a0web\u00a0request\u00a0during\u00a0X509\u00a0certificate\u00a0chain\u00a0building.<\/div>\n<\/div>\n<\/div>\n<\/div>\n<div><\/div>\n<h3><span style=\"font-size: 18pt;\"><a href=\"https:\/\/portal.msrc.microsoft.com\/en-us\/security-guidance\/advisory\/CVE-2021-24112\">CVE-2021-24112: .NET 5 and .NET Core Remote Code Execution Vulnerability<\/a><\/span><\/h3>\n<div>\n<div>\n<p><span style=\"font-size: 12pt;\">Microsoft\u00a0is\u00a0releasing\u00a0this\u00a0security\u00a0advisory\u00a0to\u00a0provide\u00a0information\u00a0about\u00a0a\u00a0vulnerability\u00a0in\u00a0.NET\u00a05.0,\u00a0.NET\u00a0Core\u00a03.1,\u00a0and\u00a0.NET\u00a0Core\u00a02.1.\u00a0This\u00a0advisory\u00a0also\u00a0provides\u00a0guidance\u00a0on\u00a0what\u00a0developers\u00a0can\u00a0do\u00a0to\u00a0update\u00a0their\u00a0applications\u00a0to\u00a0remove\u00a0this\u00a0vulnerability.<\/span><\/p>\n<p><span style=\"font-size: 12pt;\">A\u00a0remote\u00a0code\u00a0execution\u00a0vulnerability\u00a0exists\u00a0when\u00a0parsing\u00a0certain\u00a0types\u00a0of\u00a0graphics\u00a0files.\u00a0This\u00a0vulnerability\u00a0only\u00a0exists\u00a0on\u00a0systems\u00a0running\u00a0on\u00a0MacOS\u00a0or\u00a0Linux.<\/span><\/p>\n<div><\/div>\n<\/div>\n<\/div>\n<div>\n<h2>Improvements<\/h2>\n<ul>\n<li>Runtime : <a href=\"https:\/\/github.com\/dotnet\/runtime\/issues?q=milestone%3A5.0.3+is%3Aclosed+label%3Aservicing-approved\">5.0.3<\/a> | <a href=\"https:\/\/github.com\/dotnet\/runtime\/pulls?q=is%3Apr+is%3Aclosed+3.1.12+label%3Aservicing-approved\">3.1.12<\/a><\/li>\n<li>ASP.NET Core : <a href=\"https:\/\/github.com\/dotnet\/aspnetcore\/issues?q=milestone%3A5.0.3+is%3Aclosed+label%3Aservicing-approved\">5.0.3<\/a> | <a href=\"https:\/\/github.com\/dotnet\/aspnetcore\/pulls?q=milestone%3A3.1.12+is%3Aclosed+label%3Aservicing-approved\">3.1.12<\/a> | <a href=\"https:\/\/github.com\/dotnet\/aspnetcore\/pulls?q=milestone%3A2.1.25+is%3Aclosed+label%3Aservicing-approved\">2.1.25<\/a><\/li>\n<li>EntityFramework Core : <a href=\"https:\/\/github.com\/dotnet\/efcore\/issues?q=milestone%3A5.0.3+is%3Aclosed+label%3Aservicing-approved\">5.0.3<\/a><\/li>\n<li>CoreCLR: <a href=\"https:\/\/github.com\/dotnet\/coreclr\/pulls?q=milestone%3A3.1.12+is%3Aclosed+label%3Aservicing-approved\">3.1.12<\/a><\/li>\n<li>Winforms: <a href=\"https:\/\/github.com\/dotnet\/winforms\/issues?q=milestone%3A5.0.3+is%3Aclosed+label%3Aservicing-approved\">5.0.3<\/a> | <a href=\"https:\/\/github.com\/dotnet\/winforms\/pulls?q=milestone%3A3.1.12+is%3Aclosed+label%3Aservicing-approved\">3.1.12<\/a><\/li>\n<\/ul>\n<h2 aria-level=\"2\">Visual Studio<\/h2>\n<p>See release notes for Visual Studio compatibility for <a href=\"https:\/\/github.com\/dotnet\/core\/blob\/master\/release-notes\/2.1\/2.1.25\/2.1.25.md#visual-studio-compatibility\">.NET Core 2.1<\/a> and <a href=\"https:\/\/github.com\/dotnet\/core\/blob\/master\/release-notes\/3.1\/3.1.12\/3.1.12.md#visual-studio-compatibility\">.NET Core 3.1<\/a> and <a href=\"https:\/\/github.com\/dotnet\/core\/blob\/master\/release-notes\/5.0\/5.0.3\/5.0.3.md#visual-studio-compatibility\">.NET 5.0<\/a>.<\/p>\n<\/div>\n<h2>OS Lifecycle update<\/h2>\n<div>Alpine 3.13 is now supported with the .NET 5.0.3 update. <span style=\"font-size: 1rem;\">The operating system support page for <a href=\"https:\/\/github.com\/dotnet\/core\/blob\/master\/release-notes\/5.0\/5.0-supported-os.md\">.NET 5.0<\/a> has been updated to reflect that.<\/span><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Today, we are releasing the .NET February 2021 Updates. These updates contains reliability and security improvements. See the individual release notes for details on updated packages. You can download 5.0.3\u00a0, 3.1.12, 2.1.25 versions for Windows, macOS, and Linux, for x86, x64, Arm32, and Arm64. Installers and binaries: 5.0.3 | 3.1.12 | 2.1.25 Release notes: 5.0.3 [&hellip;]<\/p>\n","protected":false},"author":7455,"featured_media":58792,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[685],"tags":[],"class_list":["post-31691","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-dotnet"],"acf":[],"blog_post_summary":"<p>Today, we are releasing the .NET February 2021 Updates. These updates contains reliability and security improvements. See the individual release notes for details on updated packages. You can download 5.0.3\u00a0, 3.1.12, 2.1.25 versions for Windows, macOS, and Linux, for x86, x64, Arm32, and Arm64. Installers and binaries: 5.0.3 | 3.1.12 | 2.1.25 Release notes: 5.0.3 [&hellip;]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/posts\/31691","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/users\/7455"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/comments?post=31691"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/posts\/31691\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/media\/58792"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/media?parent=31691"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/categories?post=31691"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/tags?post=31691"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}