.NET January update: 5.0.2/3.1.11/2.1.24, the life of .NET Core 2.1 will end

The .NET January 2021 update is now available. This update contains improvements in reliability and security. For detailed information about the updated packages, please refer to the respective release notes.

Safety

CVE-2021-1723: ASP.NET Core Denial of Service Vulnerability 

Microsoft will release this security advisory to provide information about vulnerabilities in ASP.NET Core and ASP.NET 5. The advisory also provides guidance on what developers can do to update their applications to eliminate this vulnerability. There is a denial of service vulnerability in the way Kestrel parses HTTP/2 requests. This security update addresses this vulnerability by fixing the way Kestrel parses HTTP/2 requests.

Improvement

 .NET Core 2.1 end of life

.NET Core 2.1 will end on August 21, 2021. After this, the official will no longer provide .NET Core 2.1 patch updates. It is recommended that users migrate any .NET Core 2.1 applications and environments to .NET Core 3.1 in the first half of 2021.

The .NET Core 2.1 update is the last update of the .NET Core 2.1.6xx SDK, because Visual Studio 16.0 will no longer provide support from January 2021. The official will continue to update the 2.1.5xx and 2.1.8xx versions until the end of the life of .NET Core 2.1.

Operating system life cycle updates

RHEL 6 has ended its life cycle in November 2020. Therefore, the operating system support pages for .NET Core 2.1 and .NET Core 3.1 have been updated to reflect that RHEL 6 is no longer supported.

Update instructions: https://devblogs.microsoft.com/dotnet/net-january-2021/

Guess you like

Origin www.oschina.net/news/126711/net-january-2021