.NET Core 2.1.8 is available for download and usage in your environment. This release includes .NET Core 2.1.8, ASP.NET Core 2.1.8 and .NET Core SDK 2.1.504.
We've created an issue at dotnet/core #2304 for your questions and comments.
| SDK Installer1 | SDK Binaries1 | Runtime Installer | Runtime Binaries | ASP.NET Core Runtime | |
|---|---|---|---|---|---|
| Windows | x86 | x64 | x86 | x64 | x86 | x64 | x86 | x64 | x86 | x64 Hosting Bundle2 |
| macOS | x64 | x64 | x64 | x64 | x641 |
| Linux | See installations steps below | x64 | ARM | ARM64 | x64 Alpine | - | x64 | ARM | ARM64 | x64 Alpine] | x641 | ARM321 | x64 Alpine1 |
| RHEL6 | - | x64 | - | x64 | - |
| Checksums | SDK | - | Runtime | - | - |
| Symbols | CLI | SDK | - | Runtime | Shared Framework | Setup | - | ASP.NET Core |
- Includes the .NET Core and ASP.NET Core Runtimes
- For hosting stand-alone apps on Windows Servers. Includes the ASP.NET Core Module for IIS and can be installed separately on servers without installing .NET Core runtime.
The .NET Core Docker images have been updated for this release. Details on our Docker versioning and how to work with the images can be seen in "Staying up-to-date with .NET Container Images".
The following repos have been updated
- .NET Core 2.1.8 is being deployed to Azure App Services and the deployment is expected to complete in a couple of days.
There are no changes this month in OS version support status.
.NET Core 1.0 and 1.1, which entered "Maintenance" support status when 2.1 was declared LTS, will be end-of-life June 27, 2019. Updates for the 1.0 and 1.1 channels will no longer be offered after that date. See .NET Core Support Policy to learn more about the .NET Core support lifecycle.
See .NET Core Supported OS Lifecycle Policy to learn about Windows, macOS and Linux versions that are supported for each .NET Core release.
.NET Core 2.1.8 release carries both security and non-security fixes.
-
This update addresses a domain spoofing vulnerability in .NET Framework and .NET Core which causes the meaning of a URI to change when International Domain Name encoding is applied. An attacker who successfully exploited the vulnerability could redirect a URI.
Package and Binary updates
Package name Vulnerable versions Secure versions Microsoft.NETCore.App* 2.1.0, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5, 2.1.6 2.1.8 * Updated Microsoft.NETCore.App contains System.Private.Uri version 4.0.3, which is not available separately on nuget.org.
| Package name | Version |
|---|---|
| dotnet-aspnet-codegenerator | 2.1.7 |
| dotnet-ef | 2.1.8 |
| microsoft.aspnetcore.all | 2.1.8 |
| microsoft.aspnetcore.app | 2.1.8 |
| microsoft.aspnetcore.authentication.google | 2.1.8 |
| microsoft.data.sqlite | 2.1.8 |
| microsoft.data.sqlite.core | 2.1.8 |
| microsoft.entityframeworkcore | 2.1.8 |
| microsoft.entityframeworkcore.abstractions | 2.1.8 |
| microsoft.entityframeworkcore.analyzers | 2.1.8 |
| microsoft.entityframeworkcore.design | 2.1.8 |
| microsoft.entityframeworkcore.inmemory | 2.1.8 |
| microsoft.entityframeworkcore.proxies | 2.1.8 |
| microsoft.entityframeworkcore.relational | 2.1.8 |
| microsoft.entityframeworkcore.relational.specification.tests | 2.1.8 |
| microsoft.entityframeworkcore.specification.tests | 2.1.8 |
| microsoft.entityframeworkcore.sqlite | 2.1.8 |
| microsoft.entityframeworkcore.sqlite.core | 2.1.8 |
| microsoft.entityframeworkcore.sqlserver | 2.1.8 |
| microsoft.entityframeworkcore.tools | 2.1.8 |
| microsoft.visualstudio.web.codegeneration | 2.1.7 |
| microsoft.visualstudio.web.codegeneration.contracts | 2.1.7 |
| microsoft.visualstudio.web.codegeneration.core | 2.1.7 |
| microsoft.visualstudio.web.codegeneration.design | 2.1.7 |
| microsoft.visualstudio.web.codegeneration.entityframeworkcore | 2.1.7 |
| microsoft.visualstudio.web.codegeneration.templating | 2.1.7 |
| microsoft.visualstudio.web.codegeneration.utils | 2.1.7 |
| microsoft.visualstudio.web.codegenerators.mvc | 2.1.7 |
| microsoft.netcore.app | 2.1.8 |
| microsoft.netcore.dotnetapphost | 2.1.8 |
| microsoft.netcore.dotnethost | 2.1.8 |
| microsoft.netcore.dotnethostpolicy | 2.1.8 |
| microsoft.netcore.dotnethostresolver | 2.1.8 |
| runtime.linux-arm.microsoft.netcore.app | 2.1.8 |
| runtime.linux-arm.microsoft.netcore.dotnetapphost | 2.1.8 |
| runtime.linux-arm.microsoft.netcore.dotnethost | 2.1.8 |
| runtime.linux-arm.microsoft.netcore.dotnethostpolicy | 2.1.8 |
| runtime.linux-arm.microsoft.netcore.dotnethostresolver | 2.1.8 |
| runtime.linux-arm64.microsoft.netcore.app | 2.1.8 |
| runtime.linux-arm64.microsoft.netcore.dotnetapphost | 2.1.8 |
| runtime.linux-arm64.microsoft.netcore.dotnethost | 2.1.8 |
| runtime.linux-arm64.microsoft.netcore.dotnethostpolicy | 2.1.8 |
| runtime.linux-arm64.microsoft.netcore.dotnethostresolver | 2.1.8 |
| runtime.linux-musl-x64.microsoft.netcore.app | 2.1.8 |
| runtime.linux-musl-x64.microsoft.netcore.dotnetapphost | 2.1.8 |
| runtime.linux-musl-x64.microsoft.netcore.dotnethost | 2.1.8 |
| runtime.linux-musl-x64.microsoft.netcore.dotnethostpolicy | 2.1.8 |
| runtime.linux-musl-x64.microsoft.netcore.dotnethostresolver | 2.1.8 |
| runtime.linux-x64.microsoft.netcore.app | 2.1.8 |
| runtime.linux-x64.microsoft.netcore.dotnetapphost | 2.1.8 |
| runtime.linux-x64.microsoft.netcore.dotnethost | 2.1.8 |
| runtime.linux-x64.microsoft.netcore.dotnethostpolicy | 2.1.8 |
| runtime.linux-x64.microsoft.netcore.dotnethostresolver | 2.1.8 |
| runtime.osx-x64.microsoft.netcore.app | 2.1.8 |
| runtime.osx-x64.microsoft.netcore.dotnetapphost | 2.1.8 |
| runtime.osx-x64.microsoft.netcore.dotnethost | 2.1.8 |
| runtime.osx-x64.microsoft.netcore.dotnethostpolicy | 2.1.8 |
| runtime.osx-x64.microsoft.netcore.dotnethostresolver | 2.1.8 |
| runtime.rhel.6-x64.microsoft.netcore.app | 2.1.8 |
| runtime.rhel.6-x64.microsoft.netcore.dotnetapphost | 2.1.8 |
| runtime.rhel.6-x64.microsoft.netcore.dotnethost | 2.1.8 |
| runtime.rhel.6-x64.microsoft.netcore.dotnethostpolicy | 2.1.8 |
| runtime.rhel.6-x64.microsoft.netcore.dotnethostresolver | 2.1.8 |
| runtime.win-arm.microsoft.netcore.app | 2.1.8 |
| runtime.win-arm.microsoft.netcore.dotnetapphost | 2.1.8 |
| runtime.win-arm.microsoft.netcore.dotnethost | 2.1.8 |
| runtime.win-arm.microsoft.netcore.dotnethostpolicy | 2.1.8 |
| runtime.win-arm.microsoft.netcore.dotnethostresolver | 2.1.8 |
| runtime.win-arm64.microsoft.netcore.app | 2.1.8 |
| runtime.win-arm64.microsoft.netcore.dotnetapphost | 2.1.8 |
| runtime.win-arm64.microsoft.netcore.dotnethost | 2.1.8 |
| runtime.win-arm64.microsoft.netcore.dotnethostpolicy | 2.1.8 |
| runtime.win-arm64.microsoft.netcore.dotnethostresolver | 2.1.8 |
| runtime.win-x64.microsoft.netcore.app | 2.1.8 |
| runtime.win-x64.microsoft.netcore.dotnetapphost | 2.1.8 |
| runtime.win-x64.microsoft.netcore.dotnethost | 2.1.8 |
| runtime.win-x64.microsoft.netcore.dotnethostpolicy | 2.1.8 |
| runtime.win-x64.microsoft.netcore.dotnethostresolver | 2.1.8 |
| runtime.win-x86.microsoft.netcore.app | 2.1.8 |
| runtime.win-x86.microsoft.netcore.dotnetapphost | 2.1.8 |
| runtime.win-x86.microsoft.netcore.dotnethost | 2.1.8 |
| runtime.win-x86.microsoft.netcore.dotnethostpolicy | 2.1.8 |
| runtime.win-x86.microsoft.netcore.dotnethostresolver | 2.1.8 |