.NET Core 2.1.22 Update - September 08, 2020

January 13, 2025 ยท View on GitHub

.NET Core 2.1.22 is available for download and usage in your environment. This release includes .NET Core 2.1.22, ASP.NET Core 2.1.22 and the .NET Core SDK.

Your feedback is important and appreciated. We've created an issue at dotnet/core #5170 for your questions and comments.

Downloads

SDK InstallerSDK BinariesRuntime InstallerRuntime BinariesASP.NET Core Runtime
Windowsx86 | x64x86 | x64x86 | x64x86 | x64 | ARMx86 | x64 |Hosting Bundle
macOSx64x64x64x64x64
LinuxSee installation stepsx64 | ARM | ARM64 | x64 Alpine-x64 | ARM | ARM64 | x64 Alpinex64 | ARM | x64 Alpine
RHEL6-x64-x64-
ChecksumsSDK-Runtime--
  1. Includes the .NET Core and ASP.NET Core Runtimes
  2. For hosting stand-alone apps on Windows Servers. Includes the ASP.NET Core Module for IIS and can be installed separately on servers without installing .NET Core runtime.

Visual Studio Compatibility

This update for .NET Core 2.1 includes multiple SDK builds. If you are a Visual Studio 2019, Visual Studio 2017 or Visual Studio for Mac user, there are MSBuild version requirements that are satisfied by specific, matching .NET Core SDK versions. See the table below to select the correct download.

OSDevelopment Environment.NET Core SDK
WindowsVisual Studio 2019 version 16.02.1.615
WindowsVisual Studio 20172.1.518
macOSVisual Studio for MacVisual Studio for Mac .NET Core Support

Note: This is not a security release hence this update will not be immediately available through Visual Studio. However, this is expected to show up in Visual Studio's September servicing release.

Docker Images

The .NET Core Docker images have been updated for this release. Details on our Docker versioning and how to work with the images can be seen in "Staying up-to-date with .NET Container Images".

The following repos have been updated

The images are expected to be available later today.

Azure AppServices

  • .NET Core 2.1.22 is being deployed to Azure App Services and the deployment is expected to complete later in September 2020.

Changes in 2.1.22

.NET Core 2.1.22 release carries both security and non-security fixes.

CVE-2020-1045 | Microsoft ASP.NET Core Security Feature Bypass Vulnerability

Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.

The ASP.NET Core cookie parser decodes the cookie name which could allow a malicious attacker to use percent encoded characters to masquerade as a different cookie with different security features.

The security update addresses the vulnerability by fixing the way the ASP.NET Core cookie parser handles encoded names.

Packages updated in this release

Package nameVersion
microsoft.aspnetcore.all2.1.22.nupkg
microsoft.aspnetcore.app2.1.22.nupkg
microsoft.aspnetcore.http2.1.22.nupkg
microsoft.dotnet.web.client.itemtemplates2.1.22.nupkg
microsoft.dotnet.web.itemtemplates2.1.22.nupkg
microsoft.dotnet.web.projecttemplates.2.12.1.22.nupkg
microsoft.dotnet.web.spa.projecttemplates.2.12.1.22.nupkg
microsoft.netcore.platforms2.1.12.nupkg
microsoft.netcore.app2.1.22.nupkg
microsoft.netcore.dotnetapphost2.1.22.nupkg
microsoft.netcore.dotnethost2.1.22.nupkg
microsoft.netcore.dotnethostpolicy2.1.22.nupkg
microsoft.netcore.dotnethostresolver2.1.22.nupkg
runtime.linux-arm.microsoft.netcore.app2.1.22.nupkg
runtime.linux-arm.microsoft.netcore.dotnetapphost2.1.22.nupkg
runtime.linux-arm.microsoft.netcore.dotnethost2.1.22.nupkg
runtime.linux-arm.microsoft.netcore.dotnethostpolicy2.1.22.nupkg
runtime.linux-arm.microsoft.netcore.dotnethostresolver2.1.22.nupkg
runtime.linux-arm64.microsoft.netcore.app2.1.22.nupkg
runtime.linux-arm64.microsoft.netcore.dotnetapphost2.1.22.nupkg
runtime.linux-arm64.microsoft.netcore.dotnethost2.1.22.nupkg
runtime.linux-arm64.microsoft.netcore.dotnethostpolicy2.1.22.nupkg
runtime.linux-arm64.microsoft.netcore.dotnethostresolver2.1.22.nupkg
runtime.linux-musl-x64.microsoft.netcore.app2.1.22.nupkg
runtime.linux-musl-x64.microsoft.netcore.dotnetapphost2.1.22.nupkg
runtime.linux-musl-x64.microsoft.netcore.dotnethost2.1.22.nupkg
runtime.linux-musl-x64.microsoft.netcore.dotnethostpolicy2.1.22.nupkg
runtime.linux-musl-x64.microsoft.netcore.dotnethostresolver2.1.22.nupkg
runtime.linux-x64.microsoft.netcore.app2.1.22.nupkg
runtime.linux-x64.microsoft.netcore.dotnetapphost2.1.22.nupkg
runtime.linux-x64.microsoft.netcore.dotnethost2.1.22.nupkg
runtime.linux-x64.microsoft.netcore.dotnethostpolicy2.1.22.nupkg
runtime.linux-x64.microsoft.netcore.dotnethostresolver2.1.22.nupkg
runtime.osx-x64.microsoft.netcore.app2.1.22.nupkg
runtime.osx-x64.microsoft.netcore.dotnetapphost2.1.22.nupkg
runtime.osx-x64.microsoft.netcore.dotnethost2.1.22.nupkg
runtime.osx-x64.microsoft.netcore.dotnethostpolicy2.1.22.nupkg
runtime.osx-x64.microsoft.netcore.dotnethostresolver2.1.22.nupkg
runtime.rhel.6-x64.microsoft.netcore.app2.1.22.nupkg
runtime.rhel.6-x64.microsoft.netcore.dotnetapphost2.1.22.nupkg
runtime.rhel.6-x64.microsoft.netcore.dotnethost2.1.22.nupkg
runtime.rhel.6-x64.microsoft.netcore.dotnethostpolicy2.1.22.nupkg
runtime.rhel.6-x64.microsoft.netcore.dotnethostresolver2.1.22.nupkg
runtime.win-arm.microsoft.netcore.app2.1.22.nupkg
runtime.win-arm.microsoft.netcore.dotnetapphost2.1.22.nupkg
runtime.win-arm.microsoft.netcore.dotnethost2.1.22.nupkg
runtime.win-arm.microsoft.netcore.dotnethostpolicy2.1.22.nupkg
runtime.win-arm.microsoft.netcore.dotnethostresolver2.1.22.nupkg
runtime.win-arm64.microsoft.netcore.app2.1.22.nupkg
runtime.win-arm64.microsoft.netcore.dotnetapphost2.1.22.nupkg
runtime.win-arm64.microsoft.netcore.dotnethost2.1.22.nupkg
runtime.win-arm64.microsoft.netcore.dotnethostpolicy2.1.22.nupkg
runtime.win-arm64.microsoft.netcore.dotnethostresolver2.1.22.nupkg
runtime.win-x64.microsoft.netcore.app2.1.22.nupkg
runtime.win-x64.microsoft.netcore.dotnetapphost2.1.22.nupkg
runtime.win-x64.microsoft.netcore.dotnethost2.1.22.nupkg
runtime.win-x64.microsoft.netcore.dotnethostpolicy2.1.22.nupkg
runtime.win-x64.microsoft.netcore.dotnethostresolver2.1.22.nupkg
runtime.win-x86.microsoft.netcore.app2.1.22.nupkg
runtime.win-x86.microsoft.netcore.dotnetapphost2.1.22.nupkg
runtime.win-x86.microsoft.netcore.dotnethost2.1.22.nupkg
runtime.win-x86.microsoft.netcore.dotnethostpolicy2.1.22.nupkg
runtime.win-x86.microsoft.netcore.dotnethostresolver2.1.22.nupkg
vs.redist.common.netcore.hostfxr.x64.2.12.1.22-servicing-29217-01.nupkg
vs.redist.common.netcore.hostfxr.x64.2.12.1.22-servicing-29221-01.nupkg
vs.redist.common.netcore.hostfxr.x86.2.12.1.22-servicing-29217-01.nupkg
vs.redist.common.netcore.hostfxr.x86.2.12.1.22-servicing-29221-01.nupkg
vs.redist.common.netcore.sharedframework.x64.2.12.1.22-servicing-29217-01.nupkg
vs.redist.common.netcore.sharedframework.x64.2.12.1.22-servicing-29221-01.nupkg
vs.redist.common.netcore.sharedframework.x86.2.12.1.22-servicing-29217-01.nupkg
vs.redist.common.netcore.sharedframework.x86.2.12.1.22-servicing-29221-01.nupkg
vs.redist.common.netcore.sharedhost.x64.2.12.1.22-servicing-29217-01.nupkg
vs.redist.common.netcore.sharedhost.x64.2.12.1.22-servicing-29221-01.nupkg
vs.redist.common.netcore.sharedhost.x86.2.12.1.22-servicing-29217-01.nupkg
vs.redist.common.netcore.sharedhost.x86.2.12.1.22-servicing-29221-01.nupkg