maxmustermann/dotnet-core
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Merge pull request #1209 from leecow/master

Browse source 
Add commits to 2.0.5 rel notes
This commit is contained in:
Lee Coward 2018-01-10 14:01:12 -08:00 committed by GitHub
commit f3ccf91551
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 23 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

24
release-notes/2.0/2.0.5.md
View file

@ -59,7 +59,7 @@ Microsoft.NETCore.App
* System.Xml.XPath
* System.Xml.XPath.XDocument
## Fixes
## Notable Fixes and Commits
### CVE-2018-0786 - Security Feature Bypass in X509 Certificate Validation
@ -76,3 +76,25 @@ Microsoft is aware of a Denial of Service vulnerability in all public versions o
The update addresses the vulnerability by correcting how .NET core handles XML document processing.
[CVE-2018-0764](https://github.com/dotnet/announcements/issues/52)
### Commits
#### CoreFX
* [`[3f1155b]`](https://github.com/dotnet/corefx/commit/3f1155b) Merged PR 94589: Harden hashing in Xml NameTable
#### CoreCLR
* [`[8ce622d]`](https://github.com/dotnet/coreclr/commit/8ce622d) Merged PR 95709: Fix validating RegionInfo names with long string
#### CLI
* [`[1c5b49b]`](https://github.com/dotnet/cli/commit/1c5b49b) 2017-12-04 Nuget.config update to align with CLI:master - add comments in DependencyVersions.prop
* [`[11d9413]`](https://github.com/dotnet/cli/commit/11d9413) 2017-12-04 Updating the websdk version to 2.0.0-rel-20171110-671
* [`[902904c]`](https://github.com/dotnet/cli/commit/902904c) 2017-12-07 Updating the msbuild version for Microsoft.Build.Runtime.
* [`[ed91673]`](https://github.com/dotnet/cli/commit/ed91673) 2017-12-13 Updating the runtime to 2.0.5.
* [`[8c93b6d]`](https://github.com/dotnet/cli/commit/8c93b6d) 2017-12-20 Update to consume aspnetcore 2.0.5-155
#### WCF
* [`[c3182d4]`](https://github.com/dotnet/wcf/commit/c3182d46f45780e52a393aee30ff48e57dbc53ae)