Skip to content

Commit

Permalink
Update 3.1.15.md
Browse files Browse the repository at this point in the history
  • Loading branch information
rbhanda authored May 11, 2021
1 parent 9c24817 commit eb85bbf
Showing 1 changed file with 7 additions and 6 deletions.
13 changes: 7 additions & 6 deletions release-notes/3.1/3.1.15/3.1.15.md
Original file line number Diff line number Diff line change
Expand Up @@ -58,12 +58,6 @@ The following repos have been updated.

.NET Core 3.1.15 release carries both security and non-security fixes.

# Microsoft Security Advisory CVE-2021-31204 | .NET Core Elevation of Privilege Vulnerability

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 5.0 and .NET Core 3.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

An elevation of privilage vulnerability exists in .NET 5.0 and .NET Core 3.1 when a user runs a single file application on Operating Systems based on Linux or macOS.

* [Blog Roundup][dotnet-blog]
* [Known issues](../3.1-known-issues.md)

Expand All @@ -73,6 +67,13 @@ An elevation of privilage vulnerability exists in .NET 5.0 and .NET Core 3.1 whe
* [ASP.NET](https://github.com/dotnet/aspnetcore/pulls?q=milestone%3A3.1.15+is%3Aclosed+label%3Aservicing-approved)
* [Extensions](https://github.com/dotnet/extensions/pulls?q=milestone%3A3.1.15+is%3Aclosed+label%3Aservicing-approved)


### Microsoft Security Advisory CVE-2021-31204 | .NET Core Elevation of Privilege Vulnerability

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 5.0 and .NET Core 3.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

An elevation of privilage vulnerability exists in .NET 5.0 and .NET Core 3.1 when a user runs a single file application on Operating Systems based on Linux or macOS.

## macOS Notarization Change
Running "dotnet build" will generate a dll instead of a dylib on macOS. This is a planned change to not use the AppHost by default on macOS because of [notarization requirements](https://docs.microsoft.com/dotnet/core/install/macos-notarization-issues). If you want to opt into using the AppHost, add the following to your project file:
```
Expand Down

0 comments on commit eb85bbf

Please sign in to comment.