.NET Core 2.1.20 is available for download and usage in your environment. This release includes .NET Core 2.1.20, ASP.NET Core 2.1.20 and the .NET Core SDK.
Your feedback is important and appreciated. We’ve created an issue at dotnet/core #4939 for your questions and comments.
| SDK Installer1 | SDK Binaries1 | Runtime Installer | Runtime Binaries | ASP.NET Core Runtime | |
|---|---|---|---|---|---|
| Windows | x86 | x64 | x86 | x64 | x86 | x64 | x86 | x64 | ARM | x86 | x64 | Hosting Bundle2 |
| macOS | x64 | x64 | x64 | x64 | x641 |
| Linux | See installations steps below | x64 | ARM | ARM64 | x64 Alpine | - | x64 | ARM | ARM64 | x64 Alpine | x641 | ARM1 | x64 Alpine1 |
| RHEL6 | - | x64 | - | x64 | - |
| Checksums | SDK | - | Runtime | - | - |
This update for .NET Core 2.1 includes multiple SDK builds. If you are a Visual Studio 2019, Visual Studio 2017 or Visual Studio for Mac user, there are MSBuild version requirements that are satisfied by specific, matching .NET Core SDK versions. See the table below to select the correct download.
| OS | Development Environment | .NET Core SDK |
|---|---|---|
| Windows | Visual Studio 2019 version 16.0 | 2.1.613 |
| Windows | Visual Studio 2017 | 2.1.516 |
| MacOS | Visual Studio for Mac | Visual Studio for Mac .NET Core Support |
Note: This is not a security release hence this update will not be immediately available through Visual Studio. However, this is expected to show up in Visual Studio’s March servicing release.
The .NET Core Docker images have been updated for this release. Details on our Docker versioning and how to work with the images can be seen in “Staying up-to-date with .NET Container Images”.
The following repos have been updated
The images are expected to be available later today.
.NET Core 2.1.20 release carries both security and non-security fixes.
Microsoft is releasing this security advisory to provide information about a vulnerability in .NET Core. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.
Microsoft is aware of a remote code execution vulnerability exists in .NET software when the software fails to check the source markup of an XML file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user.
A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to an ASP.NET Core application, or other application that parses certain types of XML.
The security update addresses the vulnerability by restricting the types that are allowed to be present in the XML payload.
| Package name | Version |
|---|---|
| microsoft.aspnetcore.all | 2.1.20.nupkg |
| microsoft.aspnetcore.app | 2.1.20.nupkg |
| microsoft.dotnet.web.client.itemtemplates | 2.1.20.nupkg |
| microsoft.dotnet.web.itemtemplates | 2.1.20.nupkg |
| microsoft.dotnet.web.projecttemplates.2.1 | 2.1.20.nupkg |
| microsoft.dotnet.web.spa.projecttemplates.2.1 | 2.1.20.nupkg |
| microsoft.netcore.app | 2.1.20.nupkg |
| microsoft.netcore.dotnetapphost | 2.1.20.nupkg |
| microsoft.netcore.dotnethost | 2.1.20.nupkg |
| microsoft.netcore.dotnethostpolicy | 2.1.20.nupkg |
| microsoft.netcore.dotnethostresolver | 2.1.20.nupkg |
| runtime.linux-arm.microsoft.netcore.app | 2.1.20.nupkg |
| runtime.linux-arm.microsoft.netcore.dotnetapphost | 2.1.20.nupkg |
| runtime.linux-arm.microsoft.netcore.dotnethost | 2.1.20.nupkg |
| runtime.linux-arm.microsoft.netcore.dotnethostpolicy | 2.1.20.nupkg |
| runtime.linux-arm.microsoft.netcore.dotnethostresolver | 2.1.20.nupkg |
| runtime.linux-arm64.microsoft.netcore.app | 2.1.20.nupkg |
| runtime.linux-arm64.microsoft.netcore.dotnetapphost | 2.1.20.nupkg |
| runtime.linux-arm64.microsoft.netcore.dotnethost | 2.1.20.nupkg |
| runtime.linux-arm64.microsoft.netcore.dotnethostpolicy | 2.1.20.nupkg |
| runtime.linux-arm64.microsoft.netcore.dotnethostresolver | 2.1.20.nupkg |
| runtime.linux-musl-x64.microsoft.netcore.app | 2.1.20.nupkg |
| runtime.linux-musl-x64.microsoft.netcore.dotnetapphost | 2.1.20.nupkg |
| runtime.linux-musl-x64.microsoft.netcore.dotnethost | 2.1.20.nupkg |
| runtime.linux-musl-x64.microsoft.netcore.dotnethostpolicy | 2.1.20.nupkg |
| runtime.linux-musl-x64.microsoft.netcore.dotnethostresolver | 2.1.20.nupkg |
| runtime.linux-x64.microsoft.netcore.app | 2.1.20.nupkg |
| runtime.linux-x64.microsoft.netcore.dotnetapphost | 2.1.20.nupkg |
| runtime.linux-x64.microsoft.netcore.dotnethost | 2.1.20.nupkg |
| runtime.linux-x64.microsoft.netcore.dotnethostpolicy | 2.1.20.nupkg |
| runtime.linux-x64.microsoft.netcore.dotnethostresolver | 2.1.20.nupkg |
| runtime.osx-x64.microsoft.netcore.app | 2.1.20.nupkg |
| runtime.osx-x64.microsoft.netcore.dotnetapphost | 2.1.20.nupkg |
| runtime.osx-x64.microsoft.netcore.dotnethost | 2.1.20.nupkg |
| runtime.osx-x64.microsoft.netcore.dotnethostpolicy | 2.1.20.nupkg |
| runtime.osx-x64.microsoft.netcore.dotnethostresolver | 2.1.20.nupkg |
| runtime.rhel.6-x64.microsoft.netcore.app | 2.1.20.nupkg |
| runtime.rhel.6-x64.microsoft.netcore.dotnetapphost | 2.1.20.nupkg |
| runtime.rhel.6-x64.microsoft.netcore.dotnethost | 2.1.20.nupkg |
| runtime.rhel.6-x64.microsoft.netcore.dotnethostpolicy | 2.1.20.nupkg |
| runtime.rhel.6-x64.microsoft.netcore.dotnethostresolver | 2.1.20.nupkg |
| runtime.win-arm.microsoft.netcore.app | 2.1.20.nupkg |
| runtime.win-arm.microsoft.netcore.dotnetapphost | 2.1.20.nupkg |
| runtime.win-arm.microsoft.netcore.dotnethost | 2.1.20.nupkg |
| runtime.win-arm.microsoft.netcore.dotnethostpolicy | 2.1.20.nupkg |
| runtime.win-arm.microsoft.netcore.dotnethostresolver | 2.1.20.nupkg |
| runtime.win-arm64.microsoft.netcore.app | 2.1.20.nupkg |
| runtime.win-arm64.microsoft.netcore.dotnetapphost | 2.1.20.nupkg |
| runtime.win-arm64.microsoft.netcore.dotnethost | 2.1.20.nupkg |
| runtime.win-arm64.microsoft.netcore.dotnethostpolicy | 2.1.20.nupkg |
| runtime.win-arm64.microsoft.netcore.dotnethostresolver | 2.1.20.nupkg |
| runtime.win-x64.microsoft.netcore.app | 2.1.20.nupkg |
| runtime.win-x64.microsoft.netcore.dotnetapphost | 2.1.20.nupkg |
| runtime.win-x64.microsoft.netcore.dotnethost | 2.1.20.nupkg |
| runtime.win-x64.microsoft.netcore.dotnethostpolicy | 2.1.20.nupkg |
| runtime.win-x64.microsoft.netcore.dotnethostresolver | 2.1.20.nupkg |
| runtime.win-x86.microsoft.netcore.app | 2.1.20.nupkg |
| runtime.win-x86.microsoft.netcore.dotnetapphost | 2.1.20.nupkg |
| runtime.win-x86.microsoft.netcore.dotnethost | 2.1.20.nupkg |
| runtime.win-x86.microsoft.netcore.dotnethostpolicy | 2.1.20.nupkg |
| runtime.win-x86.microsoft.netcore.dotnethostresolver | 2.1.20.nupkg |
| vs.redist.common.netcore.hostfxr.x64.2.1 | 2.1.20-servicing-29019-01.nupkg |
| vs.redist.common.netcore.hostfxr.x86.2.1 | 2.1.20-servicing-29019-01.nupkg |
| vs.redist.common.netcore.sharedframework.x64.2.1 | 2.1.20-servicing-29019-01.nupkg |
| vs.redist.common.netcore.sharedframework.x86.2.1 | 2.1.20-servicing-29019-01.nupkg |
| vs.redist.common.netcore.sharedhost.x64.2.1 | 2.1.20-servicing-29019-01.nupkg |
| vs.redist.common.netcore.sharedhost.x86.2.1 | 2.1.20-servicing-29019-01.nupkg |