Update 1.0.14.md

This commit is contained in:
Lee Coward 2019-02-12 12:33:38 -08:00 committed by GitHub
parent e548888694
commit 6a317fb5e6
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -6,7 +6,7 @@
The .NET Core SDK 1.1.12 includes .NET Core 1.0.14 Runtime so downloading the runtime packages separately is not needed when installing the SDK. After installing the .NET Core SDK 1.1.12, running `dotnet --version` will show that you're running version `1.1.12` of the .NET Core tools.
Your feedback is important and appreciated. We've created an issue at [dotnet/core #XXXX](https://github.com/dotnet/core/issues/2304) for your questions and comments.
Your feedback is important and appreciated. We've created an issue at [dotnet/core #2304](https://github.com/dotnet/core/issues/2304) for your questions and comments.
## Docker Images
@ -26,7 +26,7 @@ See [.NET Core Supported OS Lifecycle Policy](https://github.com/dotnet/core/blo
## Notable Changes in 1.0.14
* ### [CVE-2019-0657: .NET Core Domain Spoofing Vulnerability](https://github.com/dotnet/Announcements/issues/xxxx)
* ### [CVE-2019-0657: .NET Core Domain Spoofing Vulnerability](https://github.com/dotnet/announcements/issues/97)
This update addresses a domain spoofing vulnerability in .NET Framework and .NET Core which causes the meaning of a URI to change when International Domain Name encoding is applied. An attacker who successfully exploited the vulnerability could redirect a URI.