.NET Core February Update - February 12, 2019

.NET Core 1.1.11 is available for download and usage in your environment.

• .NET Core Blog

The .NET Core SDK 1.1.12 includes .NET Core 1.1.11 Runtime so downloading the runtime packages separately is not needed when installing the SDK. After installing the .NET Core SDK 1.1.12, running dotnet --version will show that you're running version 1.1.12 of the .NET Core tools.

Your feedback is important and appreciated. We've created an issue at dotnet/core #2304 for your questions and comments.

Docker Images

The .NET Core Docker images have been updated for this release. Look for the updated images for .NET Core 1.1.11 and .NET Core SDK 1.1.12 and read "Staying up-to-date with .NET Container Images" for details and insights into using the .NET Core images.

Azure AppServices

• Deployment of .NET Core 1.1.11 to Azure App Services has begun. It will be available in limited regions today and expected worldwide by the end of the week.

.NET Core Lifecycle News

There are no changes this month in OS version support status.

.NET Core 1.0 and 1.1, which entered "Maintenance" support status when 2.1 was declared LTS, will be end-of-life June 27, 2019. Updates for the 1.0 and 1.1 channels will no longer be offered after that date. See .NET Core Support Policy to learn more about the .NET Core support lifecycle.

See .NET Core Supported OS Lifecycle Policy to learn about Windows, macOS and Linux versions that are supported for each .NET Core release.

Notable Changes in 1.1.11

• CVE-2019-0657: .NET Core Domain Spoofing Vulnerability

  This update addresses a domain spoofing vulnerability in .NET Framework and .NET Core which causes the meaning of a URI to change when International Domain Name encoding is applied. An attacker who successfully exploited the vulnerability could redirect a URI.

  Package and Binary updates

  Package name	Vulnerable versions	Secure versions
  System.Private.Uri	4.3.0	4.3.1

Package and Binary updates