It was on July 9, 2019, when the .Net Core July update was announced. Mark this date as Microsoft has made specific changes to make security and reliability fixes in these updates. If you need to wish to check out the particular details of the updated packages, we recommend you to see the individual release notes of each of these updates.
In case you are a Visual Studio user, we have some important information specifically for you! There are specific MSBuild version requirements; hence, it is recommended to employ the .NET Core SDK for the specific Visual Studio version. In order to get all the information pertaining to this update, go to the download page.
In case, you are currently employing a distinct development environment; we recommend you to apply for the modern recent SDK release.
To download .NET Core 2.2.6 and .NET Core SDK, click here. To access its Release Notes, click here.
To download .NET Core 2.1.12 and .NET Core SDK, click here. To access its Release Notes, click here.
Let’s now divert our attention to the security advisory that Microsoft has introduced in the July update.
CVE-2019-1075: ASP.NET Core Spoofing Vulnerability
In this update, Microsoft has provided requisite information related to the vulnerability in ASP.NET Core 2.1 and 2.2. It also includes information that offers necessary guidelines for the developers that can assist them in updating their applications to get rid of this vulnerability.
Microsoft is also aware of the fact that spoofing vulnerability is the biggest threat in ASP.NET Core. This can be an open invitation to potential threats. A hacker can potentially exploit this vulnerability by redirecting you target user to a malicious website.
An attacker can achieve this endeavor by sending a link that is specially designed in the form of a URL that convinces the user to click on it. With the recent update, this vulnerability has been addressed by correcting the course of the way ASP.NET Core parses URL.
How to Avail the Update?
You can get the latest .NET Core updates by accessing here. You can get this update through Visual Studio 15.9.14, 16.0.6, and 16.1.6 updates. Click on the option “Check for Updates” in the Help Menu.
To get comprehensive information on .Net Core Release Notes, click here and here. It includes all the issues that have been fixed and affected packages.
What Will Happen to the Support LifeCycle Update for .NET Core 1.0 and 1.1?
Now is the time to note that .NET Core 1.0 and 1.1 has reached an end of support lifecycle as on June 27, 2019. After this date, it will not be possible for you to get updates on these versions. For your ready reference, the final updates for .NET Core 1.0 & 1.1 are 1.0.16 & 1.1.13 respectively.
To learn more about the .NET Core support lifecycle, click here.
What Will Happen to Docker Images?
Certain .NET container images have been updated.
- microsoft-dotnet-core-sdk
- microsoft-dotnet-core-aspnet
- microsoft-dotnet-core-runtime
- Microsoft-dotnet-core-samples
To check the updated Docker Image tags, click on “Tags” view in every repository. To get these updates, you need to pull base images. Remember, it is not possible for the Docker client to pull the updates automatically.
What About Azure App Services Deployment?
The deployment of these updates on Azure App Services has been scheduled to be completed in the current month, i.e., July 2019.
The Finale
This is your chance to utilize these July updates in the .NET Core domain by affiliating with a professional .Net development company today!