12 KiB
.NET Core 2.2.5 Update - May 14, 2019
.NET Core 2.2.5 is available for download and usage in your environment. This release includes .NET Core 2.2.5, ASP.NET Core 2.2.5 and updates to the .NET Core SDK.
Note: If you are a Visual Studio user, there are MSBuild version requirements so use only the .NET Core SDK supported for each Visual Studio version. If you use other development environments, we recommend using the latest SDK release.
| VS Version | .NET Core SDK |
|---|---|
| Visual Studio 2017 and Visual Studio for Mac | 2.2.107 |
| Visual Studio 2019 (Windows) | 2.2.204 |
We've created an issue at dotnet/core #XXXX for your questions and comments.
Downloads
| SDK Installer1 | SDK Binaries1 | Runtime Installer | Runtime Binaries | ASP.NET Core Runtime | |
|---|---|---|---|---|---|
| Windows | [x86][dotnet-sdk-win-x86.exe] | [x64][dotnet-sdk-win-x64.exe] | [x86][dotnet-sdk-win-x86.zip] | [x64][dotnet-sdk-win-x64.zip] | [x86][dotnet-runtime-win-x86.exe] | [x64][dotnet-runtime-win-x64.exe] | [x86][dotnet-runtime-win-x86.zip] | [x64][dotnet-runtime-win-x64.zip] | [x86][aspnetcore-runtime-win-x86.exe] | [x64][aspnetcore-runtime-win-x64.exe] [Hosting Bundle][dotnet-hosting-win.exe]2 |
| macOS | [x64][dotnet-sdk-osx-x64.pkg] | [x64][dotnet-sdk-osx-x64.tar.gz] | [x64][dotnet-runtime-osx-x64.pkg] | [x64][dotnet-runtime-osx-x64.tar.gz] | [x64][aspnetcore-runtime-osx-x64.tar.gz]1 |
| Linux | See installations steps below | [x64][dotnet-sdk-linux-x64.tar.gz] | [ARM][dotnet-sdk-linux-arm.tar.gz] | [ARM64][dotnet-sdk-linux-arm64.tar.gz] | [x64 Alpine][dotnet-sdk-linux-musl-x64.tar.gz] | - | [x64][dotnet-runtime-linux-x64.tar.gz] | [ARM][dotnet-runtime-linux-arm.tar.gz] | [ARM64][dotnet-runtime-linux-arm64.tar.gz] | [x64 Alpine][dotnet-runtime-linux-musl-x64.tar.gz]] | [x64][aspnetcore-runtime-linux-x64.tar.gz]1 | [ARM32][aspnetcore-runtime-linux-arm.tar.gz]1 | [x64 Alpine][aspnetcore-runtime-linux-musl-x64.tar.gz]1 |
| RHEL6 | - | [x64][dotnet-sdk-rhel.6-x64.tar.gz] | - | [x64][dotnet-runtime-rhel.6-x64.tar.gz] | - |
| Checksums | SDK | - | Runtime | - | - |
| Symbols | [CLI][cli-symbols.zip] | [SDK][dotnet-sdk-symbols.zip] | - | [Runtime][coreclr-symbols.zip] | [Shared Framework][corefx-symbols.zip] | [Setup][core-setup-symbols.zip] | - | [ASP.NET Core][aspnet-symbols.zip] |
- Includes the .NET Core and ASP.NET Core Runtimes
- For hosting stand-alone apps on Windows Servers. Includes the ASP.NET Core Module for IIS and can be installed separately on servers without installing .NET Core runtime.
Docker Images
The .NET Core Docker images have been updated for this release. Details on our Docker versioning and how to work with the images can be seen in "Staying up-to-date with .NET Container Images".
The following repos have been updated
Azure AppServices
- .NET Core 2.2.5 is being deployed to Azure App Services and the deployment is expected to complete in a couple of days.
.NET Core Lifecycle News
There are no changes this month in OS version support status.
.NET Core 1.0 and 1.1, which entered "Maintenance" support status when 2.1 was declared LTS, will be end-of-life June 27, 2019. Updates for the 1.0 and 1.1 channels will no longer be offered after that date. See .NET Core Support Policy to learn more about the .NET Core support lifecycle.
See .NET Core Supported OS Lifecycle Policy to learn about Windows, macOS and Linux versions that are supported for each .NET Core release.
Changes in 2.2.5
.NET Core 2.2.5 release carries both security and non-security fixes.
-
CVE-2019-0976: .NET Core NuGet Tampering Vulnerability
A tampering vulnerability exists in NuGet software when executed in a Linux or Mac environment.
Affected Package and Binary updates
Package name Vulnerable versions Secure versions Nuget.Packaging -
CVE-2019-0820: .NET Core Tampering Vulnerability
Affected Package and Binary updates
Package name Vulnerable versions Secure versions XXXX -
CVE-2019-0980: ASP.NET Core Denial of Service Vulnerability
Affected Package and Binary updates
Package name Vulnerable versions Secure versions XXXX -
CVE-2019-0981: ASP.NET Core Denial of Service Vulnerability
Affected Package and Binary updates
Package name Vulnerable versions Secure versions XXXX -
CVE-2019-0982: ASP.NET Core Denial of Service Vulnerability
Affected Package and Binary updates
Package name Vulnerable versions Secure versions XXXX
Additional fixes in this release
Packages updated in this release:
| Package name | Version |
|---|---|
| Microsoft.AspNetCore.All | 2.2.5 |
| Microsoft.AspNetCore.App | 2.2.5 |
| Microsoft.AspNetCore.AzureAppServices.HostingStartup | 2.2.5 |
| Microsoft.AspNetCore.AzureAppServicesIntegration | 2.2.5 |
| Microsoft.AspNetCore.DataProtection.StackExchangeRedis | 2.2.5 |
| Microsoft.AspNetCore.Identity.UI | 2.2.5 |
| Microsoft.AspNetCore.Mvc.Core | 2.2.5 |
| Microsoft.AspNetCore.Mvc.RazorPages | 2.2.5 |
| Microsoft.AspNetCore.SignalR.Protocols.MessagePack | 1.1.5 |
| Microsoft.AspNetCore.SignalR.Redis | 1.1.5 |
| Microsoft.AspNetCore.SignalR.StackExchangeRedis | 1.1.5 |
| Microsoft.DotNet.Web.Client.ItemTemplates | 2.2.5 |
| Microsoft.DotNet.Web.ItemTemplates | 2.2.5 |
| Microsoft.DotNet.Web.ProjectTemplates.2.2 | 2.2.5 |
| Microsoft.DotNet.Web.Spa.ProjectTemplates | 2.2.5 |
| Microsoft.Extensions.Caching.StackExchangeRedis | 2.2.5 |
| Microsoft.Extensions.Diagnostics.HealthChecks | 2.2.5 |
| Microsoft.Extensions.Logging.AzureAppServices | 2.2.5 |
| Microsoft.NETCore.App | 2.2.5 |
| Microsoft.NETCore.DotNetAppHost | 2.2.5 |
| Microsoft.NETCore.DotNetHost | 2.2.5 |
| Microsoft.NETCore.DotNetHostPolicy | 2.2.5 |
| Microsoft.NETCore.DotNetHostResolver | 2.2.5 |
| Microsoft.NETCore.Platforms | 2.2.1 |
| Microsoft.Windows.Compatibility | 2.1.1 |
| runtime.linux-arm.Microsoft.NETCore.App | 2.2.5 |
| runtime.linux-arm.Microsoft.NETCore.DotNetAppHost | 2.2.5 |
| runtime.linux-arm.Microsoft.NETCore.DotNetHost | 2.2.5 |
| runtime.linux-arm.Microsoft.NETCore.DotNetHostPolicy | 2.2.5 |
| runtime.linux-arm.Microsoft.NETCore.DotNetHostResolver | 2.2.5 |
| runtime.linux-arm64.Microsoft.NETCore.App | 2.2.5 |
| runtime.linux-arm64.Microsoft.NETCore.DotNetAppHost | 2.2.5 |
| runtime.linux-arm64.Microsoft.NETCore.DotNetHost | 2.2.5 |
| runtime.linux-arm64.Microsoft.NETCore.DotNetHostPolicy | 2.2.5 |
| runtime.linux-arm64.Microsoft.NETCore.DotNetHostResolver | 2.2.5 |
| runtime.linux-musl-x64.Microsoft.NETCore.App | 2.2.5 |
| runtime.linux-musl-x64.Microsoft.NETCore.DotNetAppHost | 2.2.5 |
| runtime.linux-musl-x64.Microsoft.NETCore.DotNetHost | 2.2.5 |
| runtime.linux-musl-x64.Microsoft.NETCore.DotNetHostPolicy | 2.2.5 |
| runtime.linux-musl-x64.Microsoft.NETCore.DotNetHostResolver | 2.2.5 |
| runtime.linux-x64.Microsoft.NETCore.App | 2.2.5 |
| runtime.linux-x64.Microsoft.NETCore.DotNetAppHost | 2.2.5 |
| runtime.linux-x64.Microsoft.NETCore.DotNetHost | 2.2.5 |
| runtime.linux-x64.Microsoft.NETCore.DotNetHostPolicy | 2.2.5 |
| runtime.linux-x64.Microsoft.NETCore.DotNetHostResolver | 2.2.5 |
| runtime.osx-x64.Microsoft.NETCore.App | 2.2.5 |
| runtime.osx-x64.Microsoft.NETCore.DotNetAppHost | 2.2.5 |
| runtime.osx-x64.Microsoft.NETCore.DotNetHost | 2.2.5 |
| runtime.osx-x64.Microsoft.NETCore.DotNetHostPolicy | 2.2.5 |
| runtime.osx-x64.Microsoft.NETCore.DotNetHostResolver | 2.2.5 |
| runtime.rhel.6-x64.Microsoft.NETCore.App | 2.2.5 |
| runtime.rhel.6-x64.Microsoft.NETCore.DotNetAppHost | 2.2.5 |
| runtime.rhel.6-x64.Microsoft.NETCore.DotNetHost | 2.2.5 |
| runtime.rhel.6-x64.Microsoft.NETCore.DotNetHostPolicy | 2.2.5 |
| runtime.rhel.6-x64.Microsoft.NETCore.DotNetHostResolver | 2.2.5 |
| runtime.win-arm.Microsoft.NETCore.App | 2.2.5 |
| runtime.win-arm.Microsoft.NETCore.DotNetAppHost | 2.2.5 |
| runtime.win-arm.Microsoft.NETCore.DotNetHost | 2.2.5 |
| runtime.win-arm.Microsoft.NETCore.DotNetHostPolicy | 2.2.5 |
| runtime.win-arm.Microsoft.NETCore.DotNetHostResolver | 2.2.5 |
| runtime.win-arm64.Microsoft.NETCore.App | 2.2.5 |
| runtime.win-arm64.Microsoft.NETCore.DotNetAppHost | 2.2.5 |
| runtime.win-arm64.Microsoft.NETCore.DotNetHost | 2.2.5 |
| runtime.win-arm64.Microsoft.NETCore.DotNetHostPolicy | 2.2.5 |
| runtime.win-arm64.Microsoft.NETCore.DotNetHostResolver | 2.2.5 |
| runtime.win-x64.Microsoft.NETCore.App | 2.2.5 |
| runtime.win-x64.Microsoft.NETCore.DotNetAppHost | 2.2.5 |
| runtime.win-x64.Microsoft.NETCore.DotNetHost | 2.2.5 |
| runtime.win-x64.Microsoft.NETCore.DotNetHostPolicy | 2.2.5 |
| runtime.win-x64.Microsoft.NETCore.DotNetHostResolver | 2.2.5 |
| runtime.win-x86.Microsoft.NETCore.App | 2.2.5 |
| runtime.win-x86.Microsoft.NETCore.DotNetAppHost | 2.2.5 |
| runtime.win-x86.Microsoft.NETCore.DotNetHost | 2.2.5 |
| runtime.win-x86.Microsoft.NETCore.DotNetHostPolicy | 2.2.5 |
| runtime.win-x86.Microsoft.NETCore.DotNetHostResolver | 2.2.5 |
| System.Data.SqlClient | 4.6.1 |