Windows 10: .NET Core September 2020 Updates - 2.1.22 and 3.1.8

Brink · Sep 9, 2020

Today, we are releasing the .NET Core September 2020 Update. These updates contain security and reliability fixes. See the individual release notes for details on updated packages.

Security

CVE-2020-1045: ASP.NET Core Security Feature Bypass Vulnerability

Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.

The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker to set a second cookie with the name being percent encoded.

The security update addresses the vulnerability by fixing the way the ASP.NET Core cookie parser handles encoded names.

Getting the Update

.NET Core 3.1.8 and .NET Core SDK ( Download | Release Notes )

.NET Core 2.1.22 and .NET Core SDK ( Download | Release Notes )

See the .NET Core release notes for details on the release, including issues fixed and affected packages.

The latest .NET Core updates are available on the .NET Core download page.

Docker Images

.NET Docker images have been updated for todayâs release. The following repos have been updated.

dotnet/core/sdk: .NET Core SDK

dotnet/core/aspnet: ASP.NET Core Runtime

dotnet/core/runtime: .NET Core Runtime

dotnet/core/runtime-deps: .NET Core Runtime Dependencies

dotnet/core/samples: .NET Core Samples

Note: You must pull updated .NET Core container images to get this update, with either docker pull or docker build --pull.

Visual Studio

This update will be included in a future update of Visual Studio.

Each version of Visual studio is only supported with a given version of the .NET Core SDK. Visual Studio version information is included in the .NET Core SDK download pages and release notes.If you are not using Visual Studio, we recommend using the latest SDK release.

Rahul Bhandari
Click to expand...

Source: https://devblogs.microsoft.com/dotne...eptember-2020/

:)

Brink · Sep 9, 2020

Announcing .NET Core 3 Preview 2

.NET Core 3.0 Preview 2 is now available and it includes a bunch of new updates to ASP.NET Core.

Here's the list of what's new in this preview:

Razor Components

SignalR client-to-server streaming

Pipes on HttpContext

Generic host in templates

Endpoint routing updates

Get started

To get started with ASP.NET Core in .NET Core 3.0 Preview 2 install the .NET Core 3.0 Preview 2 SDK

If you're on Windows using Visual Studio, you'll also want to install the latest preview of Visual Studio 2019.

Upgrade an existing project

To upgrade an existing an ASP.NET Core app to .NET Core 3.0 Preview 2, follow the migrations steps in the ASP.NET Core docs.

Add package for Json.NET

As part of the work to tidy up the ASP.NET Core shared framework, Json.NET is being removed from the shared framework and now needs to be added as a package.

To add back Json.NET support to an ASP.NET Core 3.0 project:

Add a package reference to Microsoft.AspNetCore.Mvc.NewtonsoftJson

Update your ConfigureServices method to include a call to AddNewtonsoftJson().

services.AddMvc()
.AddNewtonsoftJson();

Runtime compilation removed

As a consequence of cleaning up the ASP.NET Core shared framework to not depend on Roslyn, support for runtime compilation of pages and views has also been removed in this preview release. Instead compilation of pages and views is performed at build time. In a future preview update we will provide a NuGet packages for optionally enabling runtime compilation support in an app.

Other breaking changes and announcements

For a full list of other breaking changes and announcements for this release please see the ASP.NET Core Announcements repo...
Click to expand...

Read more:

Announcing .NET Core 3 Preview 2 | .NET Blog

ASP.NET Core updates in .NET Core 3.0 Preview 2 | ASP.NET Blog

Tweet

— Twitter API (@user) View on Twiiter[/quote]

Tweet

— Twitter API (@user) View on Twiiter
Click to expand...

Brink · Sep 9, 2020

Announcing .NET Core 3.1 Preview 1

Today, we’re announcing .NET Core 3.1 Preview 1. .NET Core 3.1 will be a small release focused on key improvements in Blazor and Windows desktop, the two big additions in .NET Core 3.0. It will be a long term support (LTS) release with an expected final ship date of December 2019.

You can download .NET Core 3.1 Preview 1 on Windows, macOS, and Linux.

.NET Core 3.0 SDK and Runtime

Docker images

ASP.NET Core and EF Core are also releasing updates today.

Visual Studio 16.4 Preview 2 and is also releasing today. It is a recommended update to use .NET Core 3.1 Preview 1. Visual Studio 16.4 includes .NET Core 3.1, so just updating Visual Studio will give you both releases.
Details:

.NET Core 3.1 release notes

Known Issue: The Visual Studio 16.4 installer may uninstall the .NET Core 3.0 Runtime when it installs .NET Core 3.1. We recommend you re-in-install or repair the .NET Core 3.0 SDK in that case.

Improvements

There are several targeted improvements planned for .NET Core 3.1. The following improvements are not available yet, but are expected in later previews.

In .NET Core 3.0, the .NET Core Desktop Runtime Installer (includes WPF and Windows Forms) does not install the .NET Core Runtime (includes CoreFX and CoreCLR) for you. We will be changing that, so that the Desktop Runtime installer is self-sufficient. The Runtime and Hosting Bundle, for server scenarios, already works this way.

C++/CLI was a promised component of the .NET Core 3.0 release. It was delivered, given that it is a required dependency of WPF, but a developer experience in Visual Studio and the SDK was missing. We will be delivering that experience with .NET Core 3.1 and Visual Studio 16.4. C++/CLI is only supported on Windows.

macOS 10.15 Catalina includes a new security requirement, that applications must be notarized. We will be satisfying these requirements for the .NET Core SDK, for .NET Core 3.1 and all other supported .NET Core releases. If you are using .NET Core to deliver macOS applications, we would appreciate working with you on notarization requirements.

Closing

The primary goal of .NET Core 3.1 is to polish the features and scenarios we delivered in .NET Core 3.0. .NET Core 3.1 will be a long term support (LTS) release, supported for at least 3 years.

Please install and test .NET Core 3.1 Preview 1 and give us feedback. It is not yet supported or recommended for use in production.

If you missed it, check out the .NET Core 3.0 announcement from last month.

Richard Lander
Program Manager, .NET Team
Click to expand...

Source: https://devblogs.microsoft.com/dotne...3-1-preview-1/

Tweet

— Twitter API (@user) View on Twitter
Click to expand...

Brink · Sep 9, 2020

Announcing .NET Core 3 Preview 2

.NET Core 3.0 Preview 2 is now available and it includes a bunch of new updates to ASP.NET Core.

Here's the list of what's new in this preview:

Razor Components

SignalR client-to-server streaming

Pipes on HttpContext

Generic host in templates

Endpoint routing updates

Get started

To get started with ASP.NET Core in .NET Core 3.0 Preview 2 install the .NET Core 3.0 Preview 2 SDK

If you're on Windows using Visual Studio, you'll also want to install the latest preview of Visual Studio 2019.

Upgrade an existing project

To upgrade an existing an ASP.NET Core app to .NET Core 3.0 Preview 2, follow the migrations steps in the ASP.NET Core docs.

Add package for Json.NET

As part of the work to tidy up the ASP.NET Core shared framework, Json.NET is being removed from the shared framework and now needs to be added as a package.

To add back Json.NET support to an ASP.NET Core 3.0 project:

Add a package reference to Microsoft.AspNetCore.Mvc.NewtonsoftJson

Update your ConfigureServices method to include a call to AddNewtonsoftJson().

services.AddMvc()
.AddNewtonsoftJson();

Runtime compilation removed

As a consequence of cleaning up the ASP.NET Core shared framework to not depend on Roslyn, support for runtime compilation of pages and views has also been removed in this preview release. Instead compilation of pages and views is performed at build time. In a future preview update we will provide a NuGet packages for optionally enabling runtime compilation support in an app.

Other breaking changes and announcements

For a full list of other breaking changes and announcements for this release please see the ASP.NET Core Announcements repo...
Click to expand...

Read more:

Announcing .NET Core 3 Preview 2 | .NET Blog

ASP.NET Core updates in .NET Core 3.0 Preview 2 | ASP.NET Blog

Tweet

— Twitter API (@user) View on Twiiter
Click to expand...

Tweet

— Twitter API (@user) View on Twiiter
Click to expand...

Windows 10: .NET Core September 2020 Updates - 2.1.22 and 3.1.8

.NET Core September 2020 Updates - 2.1.22 and 3.1.8

.NET Core September 2020 Updates - 2.1.22 and 3.1.8

.NET Core September 2020 Updates - 2.1.22 and 3.1.8

.NET Core September 2020 Updates - 2.1.22 and 3.1.8 - Similar Threads - NET Core September

Watch NVIDIA GeForce Special Event on September 1, 2020

Windows 10 update 3/1/2020

VPN error 2/1/2020

Announcing .NET Core 3.1 Preview 1

Announcing .NET Core 3.0 Release Candidate 1

Announcing .NET Core 3 Preview 2

.NET Core 3 Preview 1 and Open Source Windows Desktop Frameworks

.NET Core September 2018 Update now available

Core #1 #2 working 100%