Skip to content
Branch: master
Find file Copy path
Find file Copy path
1 contributor

Users who have contributed to this file

214 lines (173 sloc) 18.4 KB

.NET Core 2.1.12 Update - July 09, 2019

.NET Core 2.1.12 is available for download and usage in your environment. This release includes .NET Core 2.1.12, ASP.NET Core 2.1.12 and the .NET Core SDK.

NOTE: If you are a Visual Studio user, there are MSBuild version requirements so use only the .NET Core SDK supported for each Visual Studio version. If you use other development environments, we recommend using the latest SDK release.

VS Version .NET Core SDK
Visual Studio 2017 (Windows) 2.1.508
Visual Studio 2019 version 16.0 (Windows) 2.1.605
Visual Studio 2019 version 16.1 (Windows) 2.1.701
Visual Studio for Mac

We've created an issue at dotnet/core #3007 for your questions and comments.


SDK Installer1 SDK Binaries1 Runtime Installer Runtime Binaries ASP.NET Core Runtime
Windows x86 | x64 x86 | x64 x86 | x64 x86 | x64 x86 | x64 |
Hosting Bundle2
macOS x64 x64 x64 x64 x641
Linux See installations steps below x64 | ARM | ARM64 | x64 Alpine - x64 | ARM | ARM64 | x64 Alpine x641 | ARM1 | x64 Alpine1
RHEL6 - x64 - x64 -
Checksums SDK - Runtime - -
Symbols CLI | SDK - Runtime | Shared Framework | Setup - ASP.NET Core
  1. Includes the .NET Core and ASP.NET Core Runtimes

  2. For hosting stand-alone apps on Windows Servers. Includes the ASP.NET Core Module for IIS and can be installed separately on servers without installing .NET Core runtime.

  3. Includes the .NET Core and ASP.NET Core Runtimes

  4. For hosting stand-alone apps on Windows Servers. Includes the ASP.NET Core Module for IIS and can be installed separately on servers without installing .NET Core runtime.

Docker Images

The .NET Core Docker images have been updated for this release. Details on our Docker versioning and how to work with the images can be seen in "Staying up-to-date with .NET Container Images".

The following repos have been updated

The images are expected to be available later today.

Azure AppServices

  • .NET Core 2.1.12 is being deployed to Azure App Services and the deployment is expected to complete later in July 2019.

.NET Core Lifecycle News

.NET Core 1.0 and 1.1 reached end of support lifecycle on June 27, 2019 and will no longer receive updates going forward. See .NET Core Support Policy to learn more about the .NET Core support lifecycle.

Debian 10 GA finally released and we expect .NET Core availability on it later this month.

See .NET Core Supported OS Lifecycle Policy to learn about Windows, macOS and Linux versions that are supported for each .NET Core release.

Changes in 2.1.12

.NET Core 2.1.12 release carries both security and non-security fixes.

Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core 2.1 and 2.2. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

Microsoft is aware of a spoofing vulnerability that exists in ASP.NET Core that could lead to an open redirect. An attacker who successfully exploited the vulnerability could redirect a targeted user to a malicious website.

To exploit the vulnerability, an attacker could send a link that has a specially crafted URL and convince the user to click the link.

The update addresses the vulnerability by correcting how ASP.NET Core parses URLs.

Affected Package and Binary updates

Package name Vulnerable versions Secure versions
Microsoft.AspNetCore.Server.HttpSys 2.1.0, 2.1.1
Microsoft.AspNetCore.Server.IIS 2.2.0, 2.2.1, 2.2.2 2.2.6
Microsoft.AspNetCore.All 2.1.0 - 2.1.11
2.2.0 - 2.2.5
Microsoft.AspNetCore.App 2.1.0 - 2.1.11
2.2.0 - 2.2.5

Additional fixes in this release

Packages updated in this release:

Package name Version
Microsoft.AspNetCore.All 2.1.12
Microsoft.AspNetCore.App 2.1.12
Microsoft.AspNetCore.Server.HttpSys 2.1.12
Microsoft.NETCore.Platforms 2.1.5
System.Threading.Tasks.Extensions 4.5.3
Microsoft.NETCore.App 2.1.12
Microsoft.NETCore.DotNetAppHost 2.1.12
Microsoft.NETCore.DotNetHost 2.1.12
Microsoft.NETCore.DotNetHostPolicy 2.1.12
Microsoft.NETCore.DotNetHostResolver 2.1.12
runtime.linux-arm.Microsoft.NETCore.App 2.1.12
runtime.linux-arm.Microsoft.NETCore.DotNetAppHost 2.1.12
runtime.linux-arm.Microsoft.NETCore.DotNetHost 2.1.12
runtime.linux-arm.Microsoft.NETCore.DotNetHostPolicy 2.1.12
runtime.linux-arm.Microsoft.NETCore.DotNetHostResolver 2.1.12
runtime.linux-arm64.Microsoft.NETCore.App 2.1.12
runtime.linux-arm64.Microsoft.NETCore.DotNetAppHost 2.1.12
runtime.linux-arm64.Microsoft.NETCore.DotNetHost 2.1.12
runtime.linux-arm64.Microsoft.NETCore.DotNetHostPolicy 2.1.12
runtime.linux-arm64.Microsoft.NETCore.DotNetHostResolver 2.1.12
runtime.linux-musl-x64.Microsoft.NETCore.App 2.1.12
runtime.linux-musl-x64.Microsoft.NETCore.DotNetAppHost 2.1.12
runtime.linux-musl-x64.Microsoft.NETCore.DotNetHost 2.1.12
runtime.linux-musl-x64.Microsoft.NETCore.DotNetHostPolicy 2.1.12
runtime.linux-musl-x64.Microsoft.NETCore.DotNetHostResolver 2.1.12
runtime.linux-x64.Microsoft.NETCore.App 2.1.12
runtime.linux-x64.Microsoft.NETCore.DotNetAppHost 2.1.12
runtime.linux-x64.Microsoft.NETCore.DotNetHost 2.1.12
runtime.linux-x64.Microsoft.NETCore.DotNetHostPolicy 2.1.12
runtime.linux-x64.Microsoft.NETCore.DotNetHostResolver 2.1.12
runtime.osx-x64.Microsoft.NETCore.App 2.1.12
runtime.osx-x64.Microsoft.NETCore.DotNetAppHost 2.1.12
runtime.osx-x64.Microsoft.NETCore.DotNetHost 2.1.12
runtime.osx-x64.Microsoft.NETCore.DotNetHostPolicy 2.1.12
runtime.osx-x64.Microsoft.NETCore.DotNetHostResolver 2.1.12
runtime.rhel.6-x64.Microsoft.NETCore.App 2.1.12
runtime.rhel.6-x64.Microsoft.NETCore.DotNetAppHost 2.1.12
runtime.rhel.6-x64.Microsoft.NETCore.DotNetHost 2.1.12
runtime.rhel.6-x64.Microsoft.NETCore.DotNetHostPolicy 2.1.12
runtime.rhel.6-x64.Microsoft.NETCore.DotNetHostResolver 2.1.12 2.1.12 2.1.12 2.1.12 2.1.12 2.1.12 2.1.12 2.1.12 2.1.12 2.1.12 2.1.12 2.1.12 2.1.12 2.1.12 2.1.12 2.1.12 2.1.12 2.1.12 2.1.12 2.1.12 2.1.12
You can’t perform that action at this time.