This release includes critical security and reliability updates to improve the quality of .NET Core. The latest releases can be found on the .NET Core download pages or from the following.
The .NET Core SDK 1.0.4 includes .NET Core 1.0.5 and 1.1.2 runtimes so downloading the runtime packages separately is not needed when installing the SDK.
Details regarding the security issues addressed by this release can be seen in the Security Advisory announcement.
Symbol packages for .NET 1.0.5 are available for download from the following locations.
The .NET Core Docker images have been updated for this release. See the new image names below.
- 1.0.5-sdk
- 1.0.5-sdk-nanoserver
- 1.1.2-sdk
- 1.1.2-sdk-nanoserver
- 1.0.5-runtime
- 1.0.5-runtime-nanoserver
- 1.1.2-runtime
- 1.1.2-runtime-nanoserver
[640a13cae]Fix debugging on OS X Sierra (#10078) (#10103)[dafae2f23]GetAllocatedBytesForCurrentThread unpredictably returns inaccurate values (#10277)[8123965bc]Eliminate EncodingForwarder performance impact (#10805)
[9933227ad9][HttpClient perf] Ensure CURLOPT_TCP_NODELAY is set by CurlHandler (#16895)[47d83388b3]Add Xamarin support to System.ValueTuple package (#16447)[8d774a8244]Update AspNetCoreHosting keyword (#16477)[ed4a5c8b97]Adding updates to packages to update SqlClient in the 1.1.x release (#17635)[Microsoft Common Vulnerabilities and Exposures CVE-2017-0248]Fix for a security feature bypass vulnerability when .NET Core components do not completely validate certificates.[Microsoft Common Vulnerabilities and Exposures CVE-2017-0247].NET Core HTML Encode Unicode Multibyte Vulnerability (System.Text.Encodings.Web) - this is not part of Shared Framework.
- Please see the ASP.NET Core release page for details on fixes from ASP.NET Core, MVC, Entity Framework Core and others.