.NET Core 2.2.1 is available for download and usage in your environment. This release includes .NET Core 2.2.1, ASP.NET Core 2.2.1 and .NET Core SDK 2.2.103.
Note: The 2.2 SDK was re-released on 1/16/2019 to address an issue (dotnet/source-build#942) where developers targetting the 2.1 Runtime (LTS) will not get the latest release when building self-contained applications.
We've created an issue at dotnet/core #2210 for your questions and comments.
| SDK Installer1 | SDK Binaries1 | Runtime Installer | Runtime Binaries | ASP.NET Core Runtime | |
|---|---|---|---|---|---|
| Windows | x86 | x64 | x86 | x64 | x86 | x64 | x86 | x64 | x86 | x64 Hosting Bundle2 |
| macOS | x64 | x64 | x64 | x64 | x641 |
| Linux | See installations steps below | x64 | ARM | ARM64 | x64 Alpine | - | x64 | ARM | ARM64 | x64 Alpine] | x641 | ARM321 | x64 Alpine1 |
| RHEL6 | - | x64 | - | x64 | - |
| Checksums | SDK | - | Runtime | - | - |
| Symbols | CLI | SDK | - | Runtime | Shared Framework | Setup | - | ASP.NET Core |
- Includes the .NET Core and ASP.NET Core Runtimes
- For hosting stand-alone apps on Windows Servers. Includes the ASP.NET Core Module for IIS and can be installed separately on servers without installing .NET Core runtime.
The .NET Core Docker images have been updated for this release. Details on our Docker versioning and how to work with the images can be seen in "Staying up-to-date with .NET Container Images".
The following repos have been updated
- .NET Core 2.2.1 is being deployed to Azure App Services and the deployment is expected to complete in a couple of days.
See .NET Core Supported OS Lifecycle Policy to learn about Windows, macOS and Linux versions that are supported for each .NET Core release.
The following OS versions have changed support status since our last release:
- Fedora 27 reached end of life on November 30, 2018 and is no longer supported by .NET Core.
- Fedora 29 was released October 30, 2018 and is supported by NET Core 2.2.
.NET Core 2.2.1 release carries both security and non-security fixes. In addition to the listed vulnerabilites (see CVEs below) support for new Japanese calendar era and running in a sandbox on Mac has been added along with a few other reliability fixes.
All fixes of note can be seen in the 2.2.1 commits list.
-
The security update addresses the vulnerability by enforcing Cross-origin Resource Sharing (CORS) configuration to prevent its bypass in .NET Core 2.1 and 2.2. An attacker who successfully exploited the vulnerability could retrieve content, that is normally restricted, from a web application.
Affected Package and Binary updates
Package name Vulnerable versions Secure versions Microsoft.NETCore.App (System.Net.Http) 2.2.0 2.2.1 -
This security vulnerability exists in ASP.NET Core 1.0, 1.1, 2.1 and 2.2. If an application is hosted on Internet Information Server (IIS) a remote unauthenticated attacker can use a specially crafted request to cause a Denial of Service.
Affected Package and Binary updates
Package name Vulnerable versions Secure versions AspNetCoreModule (ANCM) Prior to 12.2.18346.0 >=12.2.18346.0 -
This security vulnerability exists when ASP.NET Core 2.1 and 2.2 improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication.
A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET Core application.
Package and Binary updates
Package name Vulnerable versions Secure versions Microsoft.AspNetCore.WebSockets 2.2.0
2.1.0, 2.1.12.2.1
2.1.7Microsoft.AspNetCore.Server.Kestrel.Core 2.1.0, 2.1.1, 2.1.2, 2.1.3 2.1.7 System.Net.WebSockets.WebSocketProtocol 4.5.0, 4.5.1, 4.5.2 4.5.3 Microsoft.NETCore.App 2.2.0
2.1.0, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5, 2.1.62.2.1
2.1.7Microsoft.AspNetCore.App 2.2.0
2.1.0, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5, 2.1.62.2.1
2.1.7Microsoft.AspNetCore.All 2.2.0
2.1.0, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5, 2.1.62.2.1
2.1.7
| Package name | Version |
|---|---|
| dotnet-aspnet-codegenerator | 2.2.1 |
| dotnet-ef | 2.2.1 |
| Microsoft.AspNetCore.All | 2.2.1 |
| Microsoft.AspNetCore.App | 2.2.1 |
| Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore | 2.2.1 |
| Microsoft.AspNetCore.Server.IIS | 2.2.1 |
| Microsoft.AspNetCore.Server.IISIntegration | 2.2.1 |
| Microsoft.AspNetCore.Server.Kestrel.Transport.Sockets | 2.2.1 |
| Microsoft.AspNetCore.WebSockets | 2.2.1 |
| Microsoft.Data.Sqlite | 2.2.1 |
| Microsoft.Data.Sqlite.Core | 2.2.1 |
| Microsoft.DotNet.Web.Client.ItemTemplates | 2.2.1 |
| Microsoft.DotNet.Web.ItemTemplates | 2.2.1 |
| Microsoft.DotNet.Web.ProjectTemplates.2.2 | 2.2.1 |
| Microsoft.DotNet.Web.Spa.ProjectTemplates | 2.2.1 |
| Microsoft.EntityFrameworkCore | 2.2.1 |
| Microsoft.EntityFrameworkCore.Abstractions | 2.2.1 |
| Microsoft.EntityFrameworkCore.Analyzers | 2.2.1 |
| Microsoft.EntityFrameworkCore.Design | 2.2.1 |
| Microsoft.EntityFrameworkCore.InMemory | 2.2.1 |
| Microsoft.EntityFrameworkCore.Proxies | 2.2.1 |
| Microsoft.EntityFrameworkCore.Relational | 2.2.1 |
| Microsoft.EntityFrameworkCore.Relational.Specification.Tests | 2.2.1 |
| Microsoft.EntityFrameworkCore.Specification.Tests | 2.2.1 |
| Microsoft.EntityFrameworkCore.Sqlite | 2.2.1 |
| Microsoft.EntityFrameworkCore.Sqlite.Core | 2.2.1 |
| Microsoft.EntityFrameworkCore.Sqlite.NetTopologySuite | 2.2.1 |
| Microsoft.EntityFrameworkCore.SqlServer | 2.2.1 |
| Microsoft.EntityFrameworkCore.SqlServer.NetTopologySuite | 2.2.1 |
| Microsoft.EntityFrameworkCore.Tools | 2.2.1 |
| Microsoft.NETCore.App | 2.2.1 |
| Microsoft.NETCore.DotNetAppHost | 2.2.1 |
| Microsoft.NETCore.DotNetHost | 2.2.1 |
| Microsoft.NETCore.DotNetHostPolicy | 2.2.1 |
| Microsoft.NETCore.DotNetHostResolver | 2.2.1 |
| Microsoft.VisualStudio.Web.CodeGeneration | 2.2.1 |
| Microsoft.VisualStudio.Web.CodeGeneration.Contracts | 2.2.1 |
| Microsoft.VisualStudio.Web.CodeGeneration.Core | 2.2.1 |
| Microsoft.VisualStudio.Web.CodeGeneration.Design | 2.2.1 |
| Microsoft.VisualStudio.Web.CodeGeneration.EntityFrameworkCore | 2.2.1 |
| Microsoft.VisualStudio.Web.CodeGeneration.Templating | 2.2.1 |
| Microsoft.VisualStudio.Web.CodeGeneration.Utils | 2.2.1 |
| Microsoft.VisualStudio.Web.CodeGenerators.Mvc | 2.2.1 |
| runtime.linux-arm.Microsoft.NETCore.App | 2.2.1 |
| runtime.linux-arm.Microsoft.NETCore.DotNetAppHost | 2.2.1 |
| runtime.linux-arm.Microsoft.NETCore.DotNetHost | 2.2.1 |
| runtime.linux-arm.Microsoft.NETCore.DotNetHostPolicy | 2.2.1 |
| runtime.linux-arm.Microsoft.NETCore.DotNetHostResolver | 2.2.1 |
| runtime.linux-arm64.Microsoft.NETCore.App | 2.2.1 |
| runtime.linux-arm64.Microsoft.NETCore.DotNetAppHost | 2.2.1 |
| runtime.linux-arm64.Microsoft.NETCore.DotNetHost | 2.2.1 |
| runtime.linux-arm64.Microsoft.NETCore.DotNetHostPolicy | 2.2.1 |
| runtime.linux-arm64.Microsoft.NETCore.DotNetHostResolver | 2.2.1 |
| runtime.linux-musl-x64.Microsoft.NETCore.App | 2.2.1 |
| runtime.linux-musl-x64.Microsoft.NETCore.DotNetAppHost | 2.2.1 |
| runtime.linux-musl-x64.Microsoft.NETCore.DotNetHost | 2.2.1 |
| runtime.linux-musl-x64.Microsoft.NETCore.DotNetHostPolicy | 2.2.1 |
| runtime.linux-musl-x64.Microsoft.NETCore.DotNetHostResolver | 2.2.1 |
| runtime.linux-x64.Microsoft.NETCore.App | 2.2.1 |
| runtime.linux-x64.Microsoft.NETCore.DotNetAppHost | 2.2.1 |
| runtime.linux-x64.Microsoft.NETCore.DotNetHost | 2.2.1 |
| runtime.linux-x64.Microsoft.NETCore.DotNetHostPolicy | 2.2.1 |
| runtime.linux-x64.Microsoft.NETCore.DotNetHostResolver | 2.2.1 |
| runtime.osx-x64.Microsoft.NETCore.App | 2.2.1 |
| runtime.osx-x64.Microsoft.NETCore.DotNetAppHost | 2.2.1 |
| runtime.osx-x64.Microsoft.NETCore.DotNetHost | 2.2.1 |
| runtime.osx-x64.Microsoft.NETCore.DotNetHostPolicy | 2.2.1 |
| runtime.osx-x64.Microsoft.NETCore.DotNetHostResolver | 2.2.1 |
| runtime.rhel.6-x64.Microsoft.NETCore.App | 2.2.1 |
| runtime.rhel.6-x64.Microsoft.NETCore.DotNetAppHost | 2.2.1 |
| runtime.rhel.6-x64.Microsoft.NETCore.DotNetHost | 2.2.1 |
| runtime.rhel.6-x64.Microsoft.NETCore.DotNetHostPolicy | 2.2.1 |
| runtime.rhel.6-x64.Microsoft.NETCore.DotNetHostResolver | 2.2.1 |
| runtime.win-arm.Microsoft.NETCore.App | 2.2.1 |
| runtime.win-arm.Microsoft.NETCore.DotNetAppHost | 2.2.1 |
| runtime.win-arm.Microsoft.NETCore.DotNetHost | 2.2.1 |
| runtime.win-arm.Microsoft.NETCore.DotNetHostPolicy | 2.2.1 |
| runtime.win-arm.Microsoft.NETCore.DotNetHostResolver | 2.2.1 |
| runtime.win-arm64.Microsoft.NETCore.App | 2.2.1 |
| runtime.win-arm64.Microsoft.NETCore.DotNetAppHost | 2.2.1 |
| runtime.win-arm64.Microsoft.NETCore.DotNetHost | 2.2.1 |
| runtime.win-arm64.Microsoft.NETCore.DotNetHostPolicy | 2.2.1 |
| runtime.win-arm64.Microsoft.NETCore.DotNetHostResolver | 2.2.1 |
| runtime.win-x64.Microsoft.NETCore.App | 2.2.1 |
| runtime.win-x64.Microsoft.NETCore.DotNetAppHost | 2.2.1 |
| runtime.win-x64.Microsoft.NETCore.DotNetHost | 2.2.1 |
| runtime.win-x64.Microsoft.NETCore.DotNetHostPolicy | 2.2.1 |
| runtime.win-x64.Microsoft.NETCore.DotNetHostResolver | 2.2.1 |
| runtime.win-x86.Microsoft.NETCore.App | 2.2.1 |
| runtime.win-x86.Microsoft.NETCore.DotNetAppHost | 2.2.1 |
| runtime.win-x86.Microsoft.NETCore.DotNetHost | 2.2.1 |
| runtime.win-x86.Microsoft.NETCore.DotNetHostPolicy | 2.2.1 |
| runtime.win-x86.Microsoft.NETCore.DotNetHostResolver | 2.2.1 |
| System.Net.WebSockets.WebSocketProtocol | 4.5.3 |