core

Release Notes

.NET Core May 2017 Update - 1.0.5 Released 5/8/2017

This release includes critical security and reliability updates to improve the quality of .NET Core. The latest releases can be found on the .NET Core download pages or from the following.

• .NET Core Runtime 1.0.5
• .NET Core Runtime 1.1.2
• .NET Core SDK 1.0.4

The .NET Core SDK 1.0.4 includes .NET Core 1.0.5 and 1.1.2 runtimes so downloading the runtime packages separately is not needed when installing the SDK.

Details regarding the security issues addressed by this release can be seen in the Security Advisory announcement.

.NET Core 1.0.5 Symbol Packages

Symbol packages for .NET 1.0.5 are available for download from the following locations.

• CoreCLR
• CoreFX

Docker Images

The .NET Core Docker images have been updated for this release. See the new image names below.

SDK

• 1.0.5-sdk
• 1.0.5-sdk-nanoserver
• 1.1.2-sdk
• 1.1.2-sdk-nanoserver

Runtime

• 1.0.5-runtime
• 1.0.5-runtime-nanoserver
• 1.1.2-runtime
• 1.1.2-runtime-nanoserver

Closed issues for this release

CoreCLR

• [f4579b26d] Fix debugging on OS X Sierra (#10078) (#10205)

CoreFX

• [Microsoft Common Vulnerabilities and Exposures CVE-2017-0248] Fix for a security feature bypass vulnerability when .NET Core components do not completely validate certificates.
• [Microsoft Common Vulnerabilities and Exposures CVE-2017-0247] .NET Core HTML Encode Unicode Multibyte Vulnerability (System.Text.Encodings.Web) - this is not part of Shared Framework.

ASP.NET Core

• Please see the ASP.NET Core release page for details on fixes from ASP.NET Core, MVC, Entity Framework Core and others.

This site is open source. Improve this page.