* release notes 1.x

* escape

Co-authored-by: Maira Wenzel <mairaw@microsoft.com>

* undo

Co-authored-by: Maira Wenzel <mairaw@microsoft.com>

* extras

* revert titles

Co-Authored-By: Maira Wenzel <mairaw@microsoft.com>

---------

Co-authored-by: Maira Wenzel <mairaw@microsoft.com>
This commit is contained in:
Jay 2023-04-11 00:29:15 +02:00 коммит произвёл GitHub
Родитель f385a9dcf4
Коммит 1085350163
Не найден ключ, соответствующий данной подписи
Идентификатор ключа GPG: 4AEE18F83AFDEB23
35 изменённых файлов: 980 добавлений и 982 удалений

Просмотреть файл

@ -21,7 +21,7 @@ See the [Windows Lifecycle Fact Sheet](https://support.microsoft.com/help/13853/
OS | Version | Architectures| Notes
------------------------------|--------------------------------|--------------|-----
Mac OS X | 10.11, 10.12* | x64 | [Apple Support Sitemap](https://support.apple.com/sitemap) <br> [Apple Security Updates](https://support.apple.com/HT201222)
Mac OS X | 10.11, 10.12* | x64 | [Apple Support Sitemap](https://support.apple.com/sitemap) <br/> [Apple Security Updates](https://support.apple.com/HT201222)
\* Supported by latest patch release of .NET Core 1.0
@ -29,10 +29,10 @@ Mac OS X | 10.11, 10.12* | x64 |
OS | Version | Architectures| Notes
------------------------------|--------------------------------|--------------|-----
Red Hat Enterprise Linux <br> CentOS <br> Oracle Linux | 7 | x64 | [Red Hat support policy](https://access.redhat.com/support/policy/updates/errata/) <br> [CentOS lifecycle](https://wiki.centos.org/FAQ/General#head-fe8a0be91ee3e7dea812e8694491e1dde5b75e6d) <br> [Oracle Linux lifecycle](https://www.oracle.com/a/ocom/docs/elsp-lifetime-069338.pdf)
Red Hat Enterprise Linux <br/> CentOS <br/> Oracle Linux | 7 | x64 | [Red Hat support policy](https://access.redhat.com/support/policy/updates/errata/) <br/> [CentOS lifecycle](https://wiki.centos.org/FAQ/General#head-fe8a0be91ee3e7dea812e8694491e1dde5b75e6d) <br/> [Oracle Linux lifecycle](https://www.oracle.com/a/ocom/docs/elsp-lifetime-069338.pdf)
Fedora | 27, 28 (1.1) | x64 | [Fedora lifecycle](https://fedoraproject.org/wiki/End_of_life)
Debian | 8.2+ | x64 | [Debian lifecycle](https://wiki.debian.org/DebianReleases)
Ubuntu <br> Linux Mint | 16.04, 18.04 (1.1) <br> 17 | x64 | [Ubuntu lifecycle](https://wiki.ubuntu.com/Releases) <br> [Linux Mint end of life announcements](https://forums.linuxmint.com/search.php?keywords=%22end+of+life%22&terms=all&author=&sc=1&sf=titleonly&sr=posts&sk=t&sd=d&st=0&ch=300&t=0&submit=Search)
Ubuntu <br/> Linux Mint | 16.04, 18.04 (1.1) <br/> 17 | x64 | [Ubuntu lifecycle](https://wiki.ubuntu.com/Releases) <br/> [Linux Mint end of life announcements](https://forums.linuxmint.com/search.php?keywords=%22end+of+life%22&terms=all&author=&sc=1&sf=titleonly&sr=posts&sk=t&sd=d&st=0&ch=300&t=0&submit=Search)
openSUSE | 42.3+ (1.1) | x64 | [OpenSUSE lifecycle](https://en.opensuse.org/Lifetime)
* \* Supported by the latest patch release of .NET Core 1.1

Просмотреть файл

@ -106,4 +106,3 @@ additions and a '-' indicates removal.
* [System.Xml.Schema](1.0.0-api/1.0.0-api_System.Xml.Schema.md)
* [System.Xml.Serialization](1.0.0-api/1.0.0-api_System.Xml.Serialization.md)
* [System.Xml.XPath](1.0.0-api/1.0.0-api_System.Xml.XPath.md)

Разница между файлами не показана из-за своего большого размера Загрузить разницу

Просмотреть файл

@ -9,10 +9,12 @@ See the [.NET Core prequisites document](https://github.com/dotnet/core/blob/mai
## NegotiateStream's functionality relies on gssapi implementation
```NegotiateStream``` relies on the gssapi implementation available on the platform:
* On Linux, the default gssapi implementation typically provided is [MIT's krb5 library](https://web.mit.edu/kerberos/), which is available on all the linux platforms.
* On OS X, the default implementation is the heimdal-based GSS.framework.
On both Linux and OS X, NegotiateStream uses SPNEGO and relies on the underlying implementation for supporting Kerberos and NTLM as the underlying security protocol:
* On OS X, GSS.framework supports the SPNEGO mechanism with Kerberos and NTLM as the available security protocols.
* On Linux, the MIT krb5 library supports SPENGO mechanism and Kerberos as the available security protocol. The implementation can also be made to support NTLM by installing the [GSS-NTLMSSP plugin](https://fedorahosted.org/gss-ntlmssp/) or another plugin with similar functionality. The fallback to NTLM is thus dependent on runtime availability of such a plugin. On RHEL and CentOS, the GSS-NTLMSSP plugin is available from the package managers. The same is also available on Ubuntu 16. It may be available for installable on other distributions and versions of Linux. There's no compile time dependency on this plugin.
@ -21,24 +23,27 @@ On both Linux and OS X, NegotiateStream uses SPNEGO and relies on the underlying
There are some combinations of Kerberos/NTLM and SignOnly/EncryptAndSign/etc. that cause the native ```gss_wrap``` call used by ```NegotiateStream``` on a Unix client to fail when connected to a ```NegotiateStream``` on a Windows server. Here are the failing combinations of credentials and protection level passed in to ```AuthenticateAsClientAsync```:
On Linux:
- Kerberos creds with Sign: Server complains that signature is valid but that the contents are not encrypted.
- NTLM creds with EncrypAndSign: Server rejects signature.
- NTLM creds with Sign: Server rejects signature.
* Kerberos creds with Sign: Server complains that signature is valid but that the contents are not encrypted.
* NTLM creds with EncrypAndSign: Server rejects signature.
* NTLM creds with Sign: Server rejects signature.
On OS X:
- Kerberos creds with Sign: Server complains that signature is valid but the contents are not encrypted.
- NTLM creds with EncryptAndSign: Server complains about message format.
- NTLM creds with Sign: gss_wrap fails on client side.
* Kerberos creds with Sign: Server complains that signature is valid but the contents are not encrypted.
* NTLM creds with EncryptAndSign: Server complains about message format.
* NTLM creds with Sign: gss_wrap fails on client side.
A fix for this issue has been pushed to MIT Kerberos source <https://github.com/krb5/krb5/pull/436>, which will make the fix available for all Unix platforms, starting with krb5-1.15. Red Hat reports the fix will be backported to RHEL 7.
- https://github.com/dotnet/corefx/issues/6767
* <https://github.com/dotnet/corefx/issues/6767>
### Socket.Connect and ConnectAsync instance methods support only one IPAddress
The Socket class provides instance and extension Connect and ConnectAsync methods, each with multiple overloads. Some of these overloads take an IPAddress, some take an array of IPAddresses, some take a string host name, and others take an EndPoint. On Linux and on OS X, only some of these methods are functional in this release, due to the capabilities of the underlying platform. Specifically, any of these overloads that may need to work with multiple addresses will throw a PlatformNotSupportedException; that includes not only the overloads that take an array of IPAddress instances, but also the overloads that take a string host, as well as the overloads that take an EndPoint if a DnsEndPoint is supplied (when the DNS lookup is performed, the host name may end up mapping to multiple addresses).
As a workaround, a new Socket instance may be created for each address to be tried, e.g.
```C#
public static class SocketUtilities
{
@ -72,13 +77,13 @@ public static class SocketUtilities
}
```
- https://github.com/dotnet/corefx/issues/9235
* <https://github.com/dotnet/corefx/issues/9235>
## HttpClient handler header parsing strictness on Linux and OS X
HttpClient response header parsing logic on Linux and on OS X fairly strictly follows the RFC. Certain "invalid" headers, such as with spaces between the header name and the colon, might be accepted by other browsers or even by HttpClient on Windows, but could be rejected when run on Linux or on OS X.
- https://github.com/dotnet/corefx/issues/9240
* <https://github.com/dotnet/corefx/issues/9240>
## X509 certificate stores not supported on NTFS and FAT volumes on Unix
@ -105,8 +110,7 @@ When this dependency is not met, an application making direct or indirect use of
Since .NET Core loads libcrypto and libssl via rpath probing, these libraries can be copied into the working directory of an application before being copied to another machine. But when trying to use this configuration, users should be advised that the Homebrew version of libssl has an absolute path dependency on libcrypto. The local copy of libssl may need to be modified to search for libcrypto via rpath with the `install_name_tool` utility.
- https://github.com/dotnet/corefx/issues/9171
* <https://github.com/dotnet/corefx/issues/9171>
## Debian users may experience unexpected failure when using SSL/TLS
@ -116,13 +120,13 @@ Metadata from the server can cause OpenSSL 1.0.1 to consider the cross-certified
Microsoft has no specific guidance to offer users affected by this configuration state. This is currently tracked as [bug 812488 in the Debian bug system](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=812488).
- https://github.com/dotnet/corefx/issues/9244
* <https://github.com/dotnet/corefx/issues/9244>
## HttpClient.GetAsync may fail while handling multiple "WWW-Authenticate: Basic" headers
HttpClient.GetAsync on Windows is unable to process and throws an exception if a server response includes more than one "WWW-Authenticate: Basic" header with different realms.
- https://github.com/dotnet/corefx/issues/9124
* <https://github.com/dotnet/corefx/issues/9124>
## Universal C Runtime dependency on Windows
@ -132,14 +136,14 @@ If the dependency is not present, applications will fail to run and errors will
```The program can't start because api-ms-win-crt-runtime-1-1-0.dll is missing from your computer. Try reinstalling the program to fix this problem.```
The UCRT dependency can be installed via Windows Update (name: "Update for Universal C Runtime in Windows", per <https://support.microsoft.com/kb/2999226>) and, as a recommended update, it will be installed automatically if the user uses the default settings for Windows Update. It can also be downloaded from [Microsoft Download Center](https://www.microsoft.com/download/details.aspx?id=48234).
- https://github.com/dotnet/corefx/issues/9083
- https://github.com/dotnet/corefx/issues/9389
* <https://github.com/dotnet/corefx/issues/9083>
* <https://github.com/dotnet/corefx/issues/9389>
## Exceptions due to user limits on OS X
When an app exceeds a user limit (ulimit) on OS X and an exception is thrown, the exception may be for an "internal error" (0x8007054F) rather than representing the actual error that occured. The workaround is to manually increase the ulimit.
- https://github.com/dotnet/coreclr/issues/5782
* <https://github.com/dotnet/coreclr/issues/5782>
## Unexpected OutOfMemoryExceptions on Unix
@ -152,23 +156,26 @@ If an application experiences this problem and/or is expected to create a large
If an app has a static assembly reference to an assembly that is missing (this is not common), or if an app attempts to use Assembly.Load with an assembly that is missing and is using a handler for the Resolving event to load assemblies from custom locations, the Resolving event may return an invalid reference, which could result in a crash.
The workaround to address the above problem is one of the following:
- Load the assembly using `LoadFromAssemblyName` instead of Assembly.Load.
- Create a custom `AssemblyLoadContext` and override its Load method to resolve the assembly.
- https://github.com/dotnet/coreclr/issues/5837#issuecomment-226657996
* Load the assembly using `LoadFromAssemblyName` instead of Assembly.Load.
* Create a custom `AssemblyLoadContext` and override its Load method to resolve the assembly.
* <https://github.com/dotnet/coreclr/issues/5837#issuecomment-226657996>
## global.json needs to be in UTF-8
If global.json file has an UTF-16 BOM, dotnet commands will fail (due to not supporting a UTF-16 BOM) with the error:
```
A JSON parsing exception occurred: * Line 1, Column 2 Syntax error: Malformed token
```
This situation may arise when using tools that by default produce UTF-16 files with the BOM, such as PowerShell's Out-File cmdlet.
A workaround is to either remove the BOM or change the file's encoding. Visual Studio by default uses UTF-8. If you are using PowerShell, you can specify the encoding for the Out-File cmdlet with the -Encoding argument, `Out-File -Encoding utf8`.
- https://github.com/dotnet/core-setup/issues/185
- https://github.com/dotnet/cli/issues/2159
* <https://github.com/dotnet/core-setup/issues/185>
* <https://github.com/dotnet/cli/issues/2159>
## dotnet restore can fail on Fedora 23 with NSS 3.24 installed with timeouts and SSL connection errors
@ -178,8 +185,7 @@ At this time, the workaround is to downgrade NSS.
sudo dnf downgrade nspr nss-util nss-softokn-freebl nss-softokn nss-sysinit nss nss-tools
```
- https://github.com/dotnet/cli/issues/3676
* <https://github.com/dotnet/cli/issues/3676>
## Line numbers missing from exception call stack on Windows 7
@ -197,11 +203,12 @@ catch (Exception ex)
}
```
- https://github.com/dotnet/coreclr/issues/5828
* <https://github.com/dotnet/coreclr/issues/5828>
## Nano Server TP5
When working on TP5 of Nano server, users will encounter the following error if they try to run either portable or self-contained application:
```
Failed to load the dll from [C:\hwapp_s\bin\Debug\netcoreapp1.0\win10-x64\hostpolicy.dll], HRESULT: 0x8007007E
An error occurred while loading required library hostpolicy.dll from [C:\hwapp_s\bin\Debug\netcoreapp1.0\win10-x64]
@ -224,14 +231,14 @@ Some libraries that P/Invoke into api-set's and target .NET Framework in our nug
Some of the api-sets are installed by the UCRT update: <https://support.microsoft.com/kb/2999226>
and <https://support.microsoft.com/kb/2790113> but these installations may not be a comprehensive fix.
- If you're using project.json you can just reference the Microsoft.NETCore.Windows.ApiSets package from your app and be sure to deploy for runtime win7-x86 or win7-x64, as appropriate.
* If you're using project.json you can just reference the Microsoft.NETCore.Windows.ApiSets package from your app and be sure to deploy for runtime win7-x86 or win7-x64, as appropriate.
- If you're using packages.config you'll need to manually download and extract the packages, as appropriate for the bitness of your app:
- [runtime.win7-x64.Microsoft.NETCore.Windows.ApiSets](https://dotnet.myget.org/F/dotnet-core/api/v2/package/runtime.win7-x64.Microsoft.NETCore.Windows.ApiSets/1.0.1)
- [runtime.win7-x86.Microsoft.NETCore.Windows.ApiSets](https://dotnet.myget.org/F/dotnet-core/api/v2/package/runtime.win7-x86.Microsoft.NETCore.Windows.ApiSets/1.0.1)
* If you're using packages.config you'll need to manually download and extract the packages, as appropriate for the bitness of your app:
* [runtime.win7-x64.Microsoft.NETCore.Windows.ApiSets](https://dotnet.myget.org/F/dotnet-core/api/v2/package/runtime.win7-x64.Microsoft.NETCore.Windows.ApiSets/1.0.1)
* [runtime.win7-x86.Microsoft.NETCore.Windows.ApiSets](https://dotnet.myget.org/F/dotnet-core/api/v2/package/runtime.win7-x86.Microsoft.NETCore.Windows.ApiSets/1.0.1)
## Bash on Ubuntu on Windows
[Bash on Windows (WSL)](https://learn.microsoft.com/windows/wsl/about) is not yet supported by .NET Core. Attempting to run applications in the environment can experience intermittent crashes.
- https://github.com/Microsoft/BashOnWindows/issues/520
* <https://github.com/Microsoft/BashOnWindows/issues/520>

Просмотреть файл

@ -64,7 +64,6 @@ To see release details for each major component of .NET Core, visit the [Core](h
| Microsoft.NETCore.Targets | 1.0.1 |
| Microsoft.NETCore.Windows.ApiSets | 1.0.1 |
## Microsoft.NETCore.App (1.0.0)
| NuGet Package | Package Version |

Просмотреть файл

@ -43,8 +43,8 @@ No changes from RC2.
### Introduction of .NET Core API Documentation
* Conceptual: https://learn.microsoft.com/dotnet/articles/core/index
* API: https://learn.microsoft.com/dotnet/core/api/index
* Conceptual: <https://learn.microsoft.com/dotnet/articles/core/index>
* API: <https://learn.microsoft.com/dotnet/core/api/index>
### Production-quality .NET Core Runtime and Framework libraries
@ -69,13 +69,13 @@ New .NET Core APIs
* System.Net.Http - new properties on HttpClientHandler
* System.Net.Sockets - add back Tcp|UdpClient.Client property
* System.Reflection.Metadata - MetadataReaderProvider
* Many types have been removed from the 1.3 surface area and moved to 1.4 which remains in pre-release. If you depend on these types update to the 1.4.0 pre-release package.
* Many types have been removed from the 1.3 surface area and moved to 1.4 which remains in pre-release. If you depend on these types update to the 1.4.0 pre-release package.
* System.Resources.ReaderWriter - types are now in separate assemblies System.Resources.Reader and System.Resources.Writer
* System.Runtime.CompilerServices.Unsafe - New static helper methods for dealing with unsafe pointers
* System.Security.Cryptography
* ECDsa supports creating keys for arbitrary named and explicit curves (Windows 10, OS X, Linux)
* ECDsa supports importing and exporting keys via the platform-independent ECParameters type
* EnvelopedCms is now supported via the System.Security.Cryptography.Pkcs package
* ECDsa supports creating keys for arbitrary named and explicit curves (Windows 10, OS X, Linux)
* ECDsa supports importing and exporting keys via the platform-independent ECParameters type
* EnvelopedCms is now supported via the System.Security.Cryptography.Pkcs package
* System.Security.SecureString
* System.Text.RegularExpressions - precompiled regex

Просмотреть файл

@ -6,7 +6,6 @@ This document lists known issues for *.NET Core 1.0.1* and *.NET Core SDK 1.0.0
`dotnet` command not found after installing on a clean macOS Sierra system that previously did not have .NET Core SDK installed.
`ln -s /usr/local/share/dotnet/dotnet /usr/local/bin` will create the symbolic link in the correct location and `dotnet` should now work.
## .NET Core 1.0.1 - VS 2015 Tooling Preview 2 installer fails
@ -19,6 +18,3 @@ First, install appropriate VC_Redist:
- [vc_redist.x64.exe](https://go.microsoft.com/fwlink/?LinkId=615460)
Then install [.NET Core 1.0.1 - VS 2015 Tooling Preview 2](https://go.microsoft.com/fwlink/?LinkID=827524)

Просмотреть файл

@ -77,7 +77,6 @@ Updated packages at the top of the table and marked with an *.
| Microsoft.NETCore.Targets | 1.0.1 |
| Microsoft.NETCore.Windows.ApiSets | 1.0.1 |
## Microsoft.NETCore.App (1.0.1)
Updated packages at the top of the table and marked with an *.

Просмотреть файл

@ -54,4 +54,4 @@ You can also use the .NET For runtime images, which contain the latest runtime u
Symbol packages for .NET 1.0.4 are available for download from the following locations.
* [CoreCLR](https://go.microsoft.com/fwlink/?LinkID=843411)
* [CoreFX](https://go.microsoft.com/fwlink/?LinkID=843414)
* [CoreFX](https://go.microsoft.com/fwlink/?LinkID=843414)

Просмотреть файл

@ -19,7 +19,7 @@ The [.NET Core Docker images](https://hub.docker.com/r/microsoft/dotnet/) have b
## Azure AppServices
Deployment of this update to Azure AppServices is in process. Because AppServices is a high availability service, the deployment is carfully staged across regions over a period of time. Deployment will begin in the West US 2 and North Central US regions with remaining regions following over a few days.
Deployment of this update to Azure AppServices is in process. Because AppServices is a high availability service, the deployment is carefully staged across regions over a period of time. Deployment will begin in the West US 2 and North Central US regions with remaining regions following over a few days.
## Known Issues
@ -55,4 +55,3 @@ Microsoft is aware of a security vulnerability in the public versions of .NET Co
#### CoreFX
#### CoreCLR

Просмотреть файл

@ -42,6 +42,6 @@ The following packages and binaries are updated by the April 2018 update:
## Notable Fixes and Commits
#### CoreFX
### CoreFX
[`[1e4cbe3]`](https://github.com/dotnet/corefx/pull/27634/commits/1e4cbe30140735b944d7918d7a8384ec5f45f183) : Adding support for ncurses 6.1 TERM format on System.Console.
[`[1e4cbe3]`](https://github.com/dotnet/corefx/pull/27634/commits/1e4cbe30140735b944d7918d7a8384ec5f45f183) : Adding support for ncurses 6.1 TERM format on System.Console.

Просмотреть файл

@ -48,9 +48,9 @@ The update addresses the vulnerability by correcting how .NET Core applications
| Package name | Vulnerable versions | Secure versions |
| :--- | :--- | :--- |
System.Private.ServiceModel | 4.0.0, 4.1.0, 4.1.1 <br> 4.3.0, 4.3.1 <br>4.4.0, 4.4.1, 4.4.2 <br> 4.5.0, 4.5.1 | 4.1.2 or later <br> 4.3.2 or later <br> 4.4.3 or later <br> 4.5.2 or later |
System.ServiceModel.Duplex | 4.0.0, 4.1.0, 4.1.1 <br> 4.3.0, 4.3.1 <br>4.4.0, 4.4.1, 4.4.2 <br> 4.5.0, 4.5.1 | 4.1.2 or later <br> 4.3.2 or later <br> 4.4.3 or later <br> 4.5.2 or later |
System.ServiceModel.Http | 4.0.0, 4.1.0, 4.1.1 <br> 4.3.0, 4.3.1 <br>4.4.0, 4.4.1, 4.4.2 <br> 4.5.0, 4.5.1 | 4.1.2 or later <br> 4.3.2 or later <br> 4.4.3 or later <br> 4.5.2 or later |
System.ServiceModel.NetTcp | 4.0.0, 4.1.0, 4.1.1 <br> 4.3.0, 4.3.1 <br>4.4.0, 4.4.1, 4.4.2 <br> 4.5.0, 4.5.1 | 4.1.2 or later <br> 4.3.2 or later <br> 4.4.3 or later <br> 4.5.2 or later |
System.ServiceModel.Primitives | 4.0.0, 4.1.0, 4.1.1 <br> 4.3.0, 4.3.1 <br>4.4.0, 4.4.1, 4.4.2 <br> 4.5.0, 4.5.1 | 4.1.2 or later <br> 4.3.2 or later <br> 4.4.3 or later <br> 4.5.2 or later |
System.ServiceModel.Security | 4.0.0, 4.1.0, 4.1.1 <br> 4.3.0, 4.3.1 <br>4.4.0, 4.4.1, 4.4.2 <br> 4.5.0, 4.5.1 | 4.1.2 or later <br> 4.3.2 or later <br> 4.4.3 or later <br> 4.5.2 or later |
System.Private.ServiceModel | 4.0.0, 4.1.0, 4.1.1 <br/> 4.3.0, 4.3.1 <br/>4.4.0, 4.4.1, 4.4.2 <br/> 4.5.0, 4.5.1 | 4.1.2 or later <br/> 4.3.2 or later <br/> 4.4.3 or later <br/> 4.5.2 or later |
System.ServiceModel.Duplex | 4.0.0, 4.1.0, 4.1.1 <br/> 4.3.0, 4.3.1 <br/>4.4.0, 4.4.1, 4.4.2 <br/> 4.5.0, 4.5.1 | 4.1.2 or later <br/> 4.3.2 or later <br/> 4.4.3 or later <br/> 4.5.2 or later |
System.ServiceModel.Http | 4.0.0, 4.1.0, 4.1.1 <br/> 4.3.0, 4.3.1 <br/>4.4.0, 4.4.1, 4.4.2 <br/> 4.5.0, 4.5.1 | 4.1.2 or later <br/> 4.3.2 or later <br/> 4.4.3 or later <br/> 4.5.2 or later |
System.ServiceModel.NetTcp | 4.0.0, 4.1.0, 4.1.1 <br/> 4.3.0, 4.3.1 <br/>4.4.0, 4.4.1, 4.4.2 <br/> 4.5.0, 4.5.1 | 4.1.2 or later <br/> 4.3.2 or later <br/> 4.4.3 or later <br/> 4.5.2 or later |
System.ServiceModel.Primitives | 4.0.0, 4.1.0, 4.1.1 <br/> 4.3.0, 4.3.1 <br/>4.4.0, 4.4.1, 4.4.2 <br/> 4.5.0, 4.5.1 | 4.1.2 or later <br/> 4.3.2 or later <br/> 4.4.3 or later <br/> 4.5.2 or later |
System.ServiceModel.Security | 4.0.0, 4.1.0, 4.1.1 <br/> 4.3.0, 4.3.1 <br/>4.4.0, 4.4.1, 4.4.2 <br/> 4.5.0, 4.5.1 | 4.1.2 or later <br/> 4.3.2 or later <br/> 4.4.3 or later <br/> 4.5.2 or later |

Просмотреть файл

@ -44,4 +44,4 @@ The update addresses the vulnerability by correcting how .NET Core applications
| Package name | Vulnerable versions | Secure versions |
| :--- | :--- | :--- |
System.Net.Http| 2.0.20126.16343, 2.0.20505, 2.0.20710, 4.0.0, 4.1.0, 4.1.1, 4.1.2, 4.3.0, 4.3.1, 4.3.2, 4.3.3 | 4.3.4 or later
System.Net.Http| 2.0.20126.16343, 2.0.20505, 2.0.20710, 4.0.0, 4.1.0, 4.1.1, 4.1.2, 4.3.0, 4.3.1, 4.3.2, 4.3.3 | 4.3.4 or later

Просмотреть файл

@ -74,9 +74,8 @@ Updated packages at the top of the table and marked with an *.
| Microsoft.NETCore.DotNetHostPolicy | 1.0.3 |
| Microsoft.NETCore.DotNetHostResolver | 1.0.1 |
| Microsoft.NETCore.Platforms | 1.0.2 |
| Microsoft.NETCore.Targets | 1.0.1 |
| Microsoft.NETCore.Windows.ApiSets | 1.0.1 |
| Microsoft.NETCore.Targets | 1.0.1 |
| Microsoft.NETCore.Windows.ApiSets | 1.0.1 |
## Microsoft.NETCore.App (1.0.3)

Просмотреть файл

@ -30,8 +30,8 @@ Updated packages at the top of the table and marked with an *.
| Microsoft.NETCore.DotNetHostPolicy | 1.0.3 |
| Microsoft.NETCore.DotNetHostResolver | 1.0.1 |
| Microsoft.NETCore.Platforms | 1.0.2 |
| Microsoft.NETCore.Targets | 1.0.1 |
| Microsoft.NETCore.Windows.ApiSets | 1.0.1 |
| Microsoft.NETCore.Targets | 1.0.1 |
| Microsoft.NETCore.Windows.ApiSets | 1.0.1 |
## Microsoft.NETCore.App (1.0.4)

Просмотреть файл

@ -39,17 +39,17 @@ The [.NET Core Docker images](https://hub.docker.com/r/microsoft/dotnet/) have b
## Closed issues for this release
#### CoreCLR
### CoreCLR
* [`[640a13cae]`](https://github.com/dotnet/coreclr/commit/640a13cae) Fix debugging on OS X Sierra (#10078) (#10103)
* [`[dafae2f23]`](https://github.com/dotnet/coreclr/commit/dafae2f23) GetAllocatedBytesForCurrentThread unpredictably returns inaccurate values (#10277)
* [`[8123965bc]`](https://github.com/dotnet/coreclr/commit/8123965bc) Eliminate EncodingForwarder performance impact (#10805)
#### CoreFX
### CoreFX
* [`[9933227ad9]`](https://github.com/dotnet/corefx/commit/9933227ad9) [HttpClient perf] Ensure CURLOPT_TCP_NODELAY is set by CurlHandler (#16895)
* [`[47d83388b3]`](https://github.com/dotnet/corefx/commit/47d83388b3) Add Xamarin support to System.ValueTuple package (#16447)
* [`[8d774a8244]`](https://github.com/dotnet/corefx/commit/8d774a8244) Update AspNetCoreHosting keyword (#16477)
* [`[8d774a8244]`](https://github.com/dotnet/corefx/commit/8d774a8244) Update AspNetCoreHosting keyword (#16477)
* [`[ed4a5c8b97]`](https://github.com/dotnet/corefx/commit/ed4a5c8b97) Adding updates to packages to update SqlClient in the 1.1.x release (#17635)
* [`[Microsoft Common Vulnerabilities and Exposures CVE-2017-0248]`](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0248) Fix for a security feature bypass vulnerability when .NET Core components do not completely validate certificates.
* [`[Microsoft Common Vulnerabilities and Exposures CVE-2017-0247]`](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0247) .NET Core HTML Encode Unicode Multibyte Vulnerability (System.Text.Encodings.Web) - this is not part of Shared Framework.

Просмотреть файл

@ -50,4 +50,4 @@ The [.NET Core Docker images](https://hub.docker.com/r/microsoft/dotnet/) have b
### ASP.NET Core
* Please see the [ASP.NET Core release page](https://github.com/aspnet/home/releases/1.0.5) for details on fixes from ASP.NET Core, MVC, Entity Framework Core and others.
* Please see the [ASP.NET Core release page](https://github.com/aspnet/home/releases/1.0.5) for details on fixes from ASP.NET Core, MVC, Entity Framework Core and others.

Просмотреть файл

@ -73,7 +73,7 @@ The [.NET Core Docker images](https://hub.docker.com/r/microsoft/dotnet/) have b
* [`[2278610]`](https://github.com/dotnet/coreclr/commit/2278610) Fix resource lookup recursion issue (#13945)
* [`[ad68ca9]`](https://github.com/dotnet/coreclr/commit/ad68ca9) Remove EOL openSuSE 42.1 (#13691)
* [`[0cb88b8]`](https://github.com/dotnet/coreclr/commit/0cb88b8) Remove FreeBSD 10.1/OpenSuSE 13.2 and Fedora 23 (#13635)
* [`[0ac7078]`](https://github.com/dotnet/coreclr/commit/0ac7078) Port of https://github.com/dotnet/coreclr/pull/12795 to release/1.1.0 (#12942)
* [`[0ac7078]`](https://github.com/dotnet/coreclr/commit/0ac7078) Port of <https://github.com/dotnet/coreclr/pull/12795> to release/1.1.0 (#12942)
## CoreFX

Просмотреть файл

@ -58,4 +58,4 @@ The security update addresses the vulnerability by ensuring that .NET Core compo
Microsoft is aware of a Denial of Service vulnerability in all public versions of .NET core due to improper processing of XML documents. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET application. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to a .NET Core application.
The update addresses the vulnerability by correcting how .NET core handles XML document processing.
The update addresses the vulnerability by correcting how .NET core handles XML document processing.

Просмотреть файл

@ -1,26 +1,26 @@
Known issues & workarounds
==========================
# Known issues & workarounds
- [Preview 2 tooling known issues](#preview-2-tooling-known-issues)
- [OpenSSL dependency on OS X](#openssl-dependency-on-os-x)
- [`brew` refusing to link `openssl`](#brew-refusing-to-link-openssl)
- [Running .NET Core CLI on Nano Server](#running-net-core-cli-on-nano-server)
- [Users of zsh (z shell) don't get `dotnet` on the path after install](#users-of-zsh-z-shell-dont-get-dotnet-on-the-path-after-install)
- [`app.config` file needs to be checked out before publishing](#appconfig-file-needs-to-be-checked-out-before-publishing)
- [`dotnet` commands in the root of the file system fails](#dotnet-commands-in-the-root-of-the-file-system-fails)
- [On dev builds of the tools, restoring default project from dotnet new fails](#on-dev-builds-of-the-tools-restoring-default-project-from-dotnet-new-fails)
- [Running `dotnet` on Debian distributions causes a segmentation fault](#running-dotnet-on-debian-distributions-causes-a-segmentation-fault)
- [Uninstalling/reinstalling the PKG on OS X](#uninstallingreinstalling-the-pkg-on-os-x)
- [OpenSSL dependency on OS X](#openssl-dependency-on-os-x)
- [`brew` refusing to link `openssl`](#brew-refusing-to-link-openssl)
- [Running .NET Core CLI on Nano Server](#running-net-core-cli-on-nano-server)
- [Users of zsh (z shell) don't get `dotnet` on the path after install](#users-of-zsh-z-shell-dont-get-dotnet-on-the-path-after-install)
- [`app.config` file needs to be checked out before publishing](#appconfig-file-needs-to-be-checked-out-before-publishing)
- [`dotnet` commands in the root of the file system fails](#dotnet-commands-in-the-root-of-the-file-system-fails)
- [On dev builds of the tools, restoring default project from dotnet new fails](#on-dev-builds-of-the-tools-restoring-default-project-from-dotnet-new-fails)
- [Running `dotnet` on Debian distributions causes a segmentation fault](#running-dotnet-on-debian-distributions-causes-a-segmentation-fault)
- [Uninstalling/reinstalling the PKG on OS X](#uninstallingreinstalling-the-pkg-on-os-x)
- [Preview 3 tooling known issues](#preview-3-tooling-known-issues)
- [Installing VS 2017 RC or dotnet CLI preview3 prevents Visual Studio 2015 .NET Core tooling from working](#installing-vs-2017-rc-or-dotnet-cli-preview3-prevents-visual-studio-2015-net-core-tooling-from-working)
- [Restore required before using the .NET Core tooling Preview 3](#restore-required-before-using-the-net-core-tooling-preview-3)
- [`dotnet test` has changed from Preview 2 `dotnet test`](#dotnet-test-has-changed-from-preview-2-dotnet-test)
- [Installing VS 2017 RC or dotnet CLI preview3 prevents Visual Studio 2015 .NET Core tooling from working](#installing-vs-2017-rc-or-dotnet-cli-preview3-prevents-visual-studio-2015-net-core-tooling-from-working)
- [Restore required before using the .NET Core tooling Preview 3](#restore-required-before-using-the-net-core-tooling-preview-3)
- [`dotnet test` has changed from Preview 2 `dotnet test`](#dotnet-test-has-changed-from-preview-2-dotnet-test)
- [What is this document about?](#what-is-this-document-about)
- [What is a "known issue"?](#what-is-a-known-issue)
# Preview 2 tooling known issues
## Preview 2 tooling known issues
### OpenSSL dependency on OS X
## OpenSSL dependency on OS X
OS X "El Capitan" (10.11) comes with 0.9.8 version of OpenSSL. .NET Core depends on versions >= 1.0.1 of OpenSSL. You can update the version by using [Homebrew](https://brew.sh), [MacPorts](https://www.macports.org/) or manually. The important bit is that you need to have the required OpenSSL version on the path when you work with .NET Core.
With Homebrew, you can run the following commands to get this done:
@ -45,7 +45,7 @@ sudo port -f uninstall openssl @0.9.8
You can verify whether you have the right version using the `openssl version` command from the Terminal.
## `brew` refusing to link `openssl`
### `brew` refusing to link `openssl`
```console
Warning: Refusing to link: openssl
@ -54,9 +54,11 @@ deprecated system version while using the headers from the Homebrew version.
Instead, pass the full include/library paths to your compiler e.g.:
-I/usr/local/opt/openssl/include -L/usr/local/opt/openssl/lib
```
This is due to a recent update from `brew` where it refuses to link `openssl`. The installation steps have been updated with instructions on how to deal with this.
## Users of zsh (z shell) don't get `dotnet` on the path after install
### Users of zsh (z shell) don't get `dotnet` on the path after install
There is a known issue in oh-my-zsh installer that interferes with how `path_helper` works on OS X systems. In short,
the said installer creates a `.zshrc` file which contains the exploded path at the time of installation. This clobbers
any dynamically generated path, such as the one generated by `path_helper`.
@ -72,7 +74,8 @@ ln -s /usr/local/share/dotnet/dotnet /usr/local/bin
**Workaround 2:** edit your `.zshrc` and/or `.zshprofile` files to add the `/usr/local/share/dotnet` to the $PATH.
## `app.config` file needs to be checked out before publishing
### `app.config` file needs to be checked out before publishing
If you have an `app.config` file in source control that places locks on local files (such as TFS), you will receive the following error during publishing:
```console
@ -81,7 +84,8 @@ Failed to make the following project runnable: <project name> reason: Access to
To resolve this, checkout the `app.config` file from the source control prior to publishing.
## `dotnet` commands in the root of the file system fails
### `dotnet` commands in the root of the file system fails
If you run any `dotnet` command on project and code files that reside in the root of the file system (`/` in Linux/macOS or `C:\` in Windows) it may fail due to security reasons. The most common error that is encountered is:
> Object reference not set to an instance of an object.
@ -90,9 +94,10 @@ This affects the situation where the actual code files are in the root. So, the
**Workaround:** use a directory to store your projects and source files.
**More information:** https://github.com/NuGet/Home/issues/3038
**More information:** <https://github.com/NuGet/Home/issues/3038>
### On dev builds of the tools, restoring default project from dotnet new fails
## On dev builds of the tools, restoring default project from dotnet new fails
When using non-release versions of the CLI, `dotnet restore` will fail to restore `Microsoft.NETCore.App` because for that particular version it exists on a NuGet feed that is not configured on the machine. This behavior is by design and does not happen with public releases (such as RC2).
**Workaround:** create a `NuGet.config` file in the project directory which contains the following:
@ -109,48 +114,55 @@ When using non-release versions of the CLI, `dotnet restore` will fail to restor
</configuration>
```
## Running `dotnet` on Debian distributions causes a segmentation fault
### Running `dotnet` on Debian distributions causes a segmentation fault
If a Debian machine is set in a certain way it may cause the native host (`dotnet`) to produce a segmentation fault. The culprit is the failed installation of the `libicu` dependency due to mirror package repository setup. If you fail to set up mirror package repositories, `apt-get` may not be able to resolve the dependency and the host will fail at runtime.
**Affects:** the native host
**Workaround:** make sure that all of the [native pre-requisites](../../Documentation/prereqs.md) are installed correctly. You can usually do this by running `apt-get` package manager.
## Uninstalling/reinstalling the PKG on OS X
### Uninstalling/reinstalling the PKG on OS X
OS X doesn't really have an uninstall capacity for PKGs like Windows has for
MSIs. There is, however, a way to remove the bits as well as the "recipe" for
dotnet. More information can be found on [this SuperUser question](https://superuser.com/questions/36567/how-do-i-uninstall-any-apple-pkg-package-file).
# Preview 3 tooling known issues
## Preview 3 tooling known issues
### Installing VS 2017 RC or dotnet CLI preview3 prevents Visual Studio 2015 .NET Core tooling from working
## Installing VS 2017 RC or dotnet CLI preview3 prevents Visual Studio 2015 .NET Core tooling from working
Symptoms:
Opening a project.json solution in Visual Studio 2015 fails with `error: Error reading '{some root path}\.vs\restore.dg'`
Workaround:
- Copy the full command line that is failing, something like C:\Program Files\dotnet\dotnet.exe restore "C:\Users\user\Desktop\SampleApp\.vs\restore.dg"
- Open a command prompt and navigate to the project directory, e.g. cd C:\Users\user\Desktop\SampleApp\
- Run the copied command from this directory
- Reload the project in Visual Studio
## Restore required before using the .NET Core tooling Preview 3
### Restore required before using the .NET Core tooling Preview 3
You have to run `dotnet restore` before you try any of the CLI commands in the Preview 3 tooling. The restore call is needed to bring in the needed targets that comprise main functionality of the Preview 3 tooling. You will get the following error if
you don't restore on macOS/Linux machines:
> /usr/local/share/dotnet/sdk/1.0.0-preview3-004056/Microsoft.Common.CurrentVersion.targets(1107,5): error MSB3644: The reference assemblies for framework ".NETFramework,Version=v4.0" were not found. To resolve this, install the SDK or Targeting Pack for this framework version or retarget your application to a version of the framework for which you have the SDK or Targeting Pack installed. Note that assemblies will be resolved from the Global Assembly Cache (GAC) and will be used in place of reference assemblies. Therefore your assembly may not be correctly targeted for the framework you intend.
> /usr/local/share/dotnet/sdk/1.0.0-preview3-004056/Microsoft.Common.CurrentVersion.targets(1107,5): error MSB3644: The reference assemblies for framework ".NETFramework,Version=v4.0" were not found. To resolve this, install the SDK or Targeting Pack for this framework version or retarget your application to a version of the framework for which you have the SDK or Targeting Pack installed. Note that assemblies will be resolved from the Global Assembly Cache (GAC) and will be used in place of reference assemblies. Therefore your assembly may not be correctly targeted for the framework you intend.
If you don't get this error on a Windows machine, that is most likely due to the fact that the targeting pack for .NET Framework 4.0 are installed. To be sure that you have the targets, run restore again if you are not sure.
## `dotnet test` has changed from Preview 2 `dotnet test`
### `dotnet test` has changed from Preview 2 `dotnet test`
As part of the overall Preview 3 work, `dotnet test` command has been been revised and is quite different in usage and behavior then Preview 2 `dotnet test` command. Please consult the official [dotnet test
docs](https://learn.microsoft.com/dotnet/articles/core/preview3/tools/dotnet-test) for more information and expect more documentation in coming days.
# What is this document about?
## What is this document about?
This document outlines the known issues and workarounds for the current state of
the CLI tools. Issues will also have a workaround and affects sections if necessary. You can use this page to
get information and get unblocked.
# What is a "known issue"?
## What is a "known issue"?
A "known issue" is a major issue that block users in doing their everyday tasks and that affect all or
most of the commands in the CLI tools. If you want to report or see minor issues, you can use the [issues list](https://github.com/dotnet/cli/issues).

Просмотреть файл

@ -2,7 +2,6 @@
We're still working out the best way to present contributors and trying to be as accurate as possible. The list below is generated with the following command listed below in an attempt to capture all contributions which have gone into .NET Core SDK 1.0. Where multiple email addresses were returned for a single person, the counts were aggregated with the email address reported the most commits.
```bash
git shortlog -sne --no-merges --until release/1.1.0@{2017-02-25}
```
@ -159,5 +158,3 @@ When you navigate to a contributors commit page, the results are not filtered by
- [Mattias Karlsson (1)](https://github.com/dotnet/cli/commits/rel/1.0.0-preview2.1?author=mattias@devlead.se)
- [Lakshmi Priya (1)](https://github.com/dotnet/cli/commits/rel/1.0.0-preview2.1?author=Priya91@users.noreply.github.com)
- [Kai Eichinger (1)](https://github.com/dotnet/cli/commits/rel/1.0.0-preview2.1?author=cH40z-Lord@outlook.com)

Просмотреть файл

@ -33,9 +33,9 @@
- [`[adbba76]`](https://github.com/dotnet/coreclr/commit/adbba76) Update PreRelease label for release/1.1.0 branch
- [`[88fbc55]`](https://github.com/dotnet/coreclr/commit/88fbc55) Exclude smallFrame.sh test for ARM (#7080)
- [`[ef5ceb0]`](https://github.com/dotnet/coreclr/commit/ef5ceb0) Correct the virtual overload of Stream.CopyTo (#7082)
- [`[19346e5]`](https://github.com/dotnet/coreclr/commit/19346e5) Task<T> Exceptions to ThrowHelper (#7076)
- [`[19346e5]`](https://github.com/dotnet/coreclr/commit/19346e5) Task\<T> Exceptions to ThrowHelper (#7076)
- [`[2142296]`](https://github.com/dotnet/coreclr/commit/2142296) Make Stream.CopyTo virtual (#7070)
- [`[0e1c7eb]`](https://github.com/dotnet/coreclr/commit/0e1c7eb) Array<T> exceptions to ThrowHelper (#7059)
- [`[0e1c7eb]`](https://github.com/dotnet/coreclr/commit/0e1c7eb) Array\<T> exceptions to ThrowHelper (#7059)
- [`[365fab0]`](https://github.com/dotnet/coreclr/commit/365fab0) [Linux][LLDB][GDB/JIT] Add support for lldb 'breakpoint set' for jitted code (#6956)
- [`[527edfc]`](https://github.com/dotnet/coreclr/commit/527edfc) Move genIncRegBy() to codegenclassic.h (#7063)
- [`[b9402ad]`](https://github.com/dotnet/coreclr/commit/b9402ad) [ARM] Remove ARM_HAZARD_AVOIDANCE (#7019)
@ -43,7 +43,7 @@
- [`[4aae240]`](https://github.com/dotnet/coreclr/commit/4aae240) Fix GTF_ flag collision
- [`[cea91c3]`](https://github.com/dotnet/coreclr/commit/cea91c3) Add proper support for custom installed llvm tool chain. (#7050)
- [`[237245c]`](https://github.com/dotnet/coreclr/commit/237245c) fix helpers' flag: ULDiv, ULMod can throw Div-by-zero exception (#7052)
- [`[a90f60e]`](https://github.com/dotnet/coreclr/commit/a90f60e) ArraySegment<T> exceptions to ThrowHelper (#7058)
- [`[a90f60e]`](https://github.com/dotnet/coreclr/commit/a90f60e) ArraySegment\<T> exceptions to ThrowHelper (#7058)
- [`[fc4444c]`](https://github.com/dotnet/coreclr/commit/fc4444c) Exclude two more tests for ARM (#7062)
- [`[e6621d0]`](https://github.com/dotnet/coreclr/commit/e6621d0) Prevent build output contamination while building test overlay
- [`[0a3506e]`](https://github.com/dotnet/coreclr/commit/0a3506e) Allow mapping LCID and culture names mapping for neutral culture (#7049)
@ -231,7 +231,7 @@
- [`[3c44321]`](https://github.com/dotnet/coreclr/commit/3c44321) Disable tests that timeout for jit32
- [`[bfcd630]`](https://github.com/dotnet/coreclr/commit/bfcd630) Specify packages.builds by default in build-packages command
- [`[a641d3a]`](https://github.com/dotnet/coreclr/commit/a641d3a) Makes FCallMemcpy unwindable (#6753)
- [`[c037777]`](https://github.com/dotnet/coreclr/commit/c037777) Apply correct symbolic name _ARM_ instead of _TARGET_ARM_ (#6756)
- [`[c037777]`](https://github.com/dotnet/coreclr/commit/c037777) Apply correct symbolic name \_ARM_instead of \_TARGET_ARM_ (#6756)
- [`[a7bac8b]`](https://github.com/dotnet/coreclr/commit/a7bac8b) printing dumpling url at upload time.
- [`[b6be3a0]`](https://github.com/dotnet/coreclr/commit/b6be3a0) Fix build break from new alignments
- [`[62f246c]`](https://github.com/dotnet/coreclr/commit/62f246c) Adding new generics tests (#6709)
@ -386,7 +386,7 @@
- [`[e4c3163]`](https://github.com/dotnet/coreclr/commit/e4c3163) Add in-memory logging for virtual memory operations.
- [`[ef0aa6a]`](https://github.com/dotnet/coreclr/commit/ef0aa6a) Add errno.h
- [`[37e7654]`](https://github.com/dotnet/coreclr/commit/37e7654) Rename PCMI->pLast and other cleanup of virtual memory code.
- [`[4c4d51c]`](https://github.com/dotnet/coreclr/commit/4c4d51c) Exposed List<T>.ConvertAll
- [`[4c4d51c]`](https://github.com/dotnet/coreclr/commit/4c4d51c) Exposed List\<T>.ConvertAll
- [`[2d944f9]`](https://github.com/dotnet/coreclr/commit/2d944f9) GC update from CoreRT (#6487)
- [`[856ae89]`](https://github.com/dotnet/coreclr/commit/856ae89) porting changes from .net native to CoreCLR
- [`[2ce817e]`](https://github.com/dotnet/coreclr/commit/2ce817e) Update CrossGen doc for "Unable to load Jit" error
@ -447,7 +447,7 @@
- [`[4ba6e74]`](https://github.com/dotnet/coreclr/commit/4ba6e74) Documentation: Add additional terminologies in the glossary.md (#6372)
- [`[7c218f9]`](https://github.com/dotnet/coreclr/commit/7c218f9) More verbose logging for arm32 umount
- [`[f915aeb]`](https://github.com/dotnet/coreclr/commit/f915aeb) GCInfo: Support versioning.
- [`[32a020e]`](https://github.com/dotnet/coreclr/commit/32a020e) Remove include of <utility> from seh.cpp (#6359)
- [`[32a020e]`](https://github.com/dotnet/coreclr/commit/32a020e) Remove include of \<utility> from seh.cpp (#6359)
- [`[8cdcdf1]`](https://github.com/dotnet/coreclr/commit/8cdcdf1) Fix is_blittable partial specializations (#6357)
- [`[45cff61]`](https://github.com/dotnet/coreclr/commit/45cff61) Fix bug: inlinee did not copy inlinee bbFlags to caller bbFlags.
- [`[e0d4def]`](https://github.com/dotnet/coreclr/commit/e0d4def) Add the proposal for embedded statement removal.
@ -477,7 +477,7 @@
- [`[bbf1d3e]`](https://github.com/dotnet/coreclr/commit/bbf1d3e) Fix package build in build-packages.sh to use dotnet instead of corerun
- [`[88bebd8]`](https://github.com/dotnet/coreclr/commit/88bebd8) Fix libc path for macOS El Capitan (#6302)
- [`[4a13a02]`](https://github.com/dotnet/coreclr/commit/4a13a02) Add to model.xml several members we wish to expose in the FX (#6310)
- [`[e977438]`](https://github.com/dotnet/coreclr/commit/e977438) Add Lazy<T>(T value) constructor (#6304)
- [`[e977438]`](https://github.com/dotnet/coreclr/commit/e977438) Add Lazy\<T>(T value) constructor (#6304)
- [`[0105a94]`](https://github.com/dotnet/coreclr/commit/0105a94) ARM64: Temporarrily disable email notification
- [`[4ec1a49]`](https://github.com/dotnet/coreclr/commit/4ec1a49) Provide guidance for common build-failure scenario. (#6164)
- [`[3ec09b8]`](https://github.com/dotnet/coreclr/commit/3ec09b8) Add ICloneable back to several globalization types on Unix (#6307)
@ -517,7 +517,7 @@
- [`[adb2188]`](https://github.com/dotnet/coreclr/commit/adb2188) active exception regression fix (#6117)
- [`[39703ca]`](https://github.com/dotnet/coreclr/commit/39703ca) Fix !PrintException (pe) -lines bug where line number/source info is not being displayed. (#6241)
- [`[3e9d463]`](https://github.com/dotnet/coreclr/commit/3e9d463) Expose missing members of Array to prep for dotnet/corefx#9998. (#6230)
- [`[de4f885]`](https://github.com/dotnet/coreclr/commit/de4f885) ARM64: In GetDelegateTarget a portion of the _WIN64 code was under _TARGET_AMD64_ whereas at other places (like NDirectStubLinker::DoNDirect & InlinedCallFrame::HasFunction ) related code is under _WIN64. Make the code in GetDelegateTarget to be in sync with other functions and remove ifdef _TARGET_ADM64_. Without this change for arm64 InlinedCallFrame::m_datum stores unmanaged target pointer but StackWalker assumes it to be a NDirectMethodDesc and tries to dereference it and crashes.
- [`[de4f885]`](https://github.com/dotnet/coreclr/commit/de4f885) ARM64: In GetDelegateTarget a portion of the \_WIN64 code was under \_TARGET_AMD64_ whereas at other places (like NDirectStubLinker::DoNDirect & InlinedCallFrame::HasFunction ) related code is under \_WIN64. Make the code in GetDelegateTarget to be in sync with other functions and remove ifdef \_TARGET_ADM64_. Without this change for arm64 InlinedCallFrame::m_datum stores unmanaged target pointer but StackWalker assumes it to be a NDirectMethodDesc and tries to dereference it and crashes.
- [`[3a89fda]`](https://github.com/dotnet/coreclr/commit/3a89fda) Fix exceptions in GC wave 2 (#6220)
- [`[cdb8a21]`](https://github.com/dotnet/coreclr/commit/cdb8a21) Implement GT_NEG decomposition
- [`[6530924]`](https://github.com/dotnet/coreclr/commit/6530924) Refactor and cleanup work for passing and returning struct types
@ -784,7 +784,7 @@
- [`[ac9b335]`](https://github.com/dotnet/coreclr/commit/ac9b335) Delete unnecessary cruft from internal mscorlib reference assembly (#5756)
- [`[f522b50]`](https://github.com/dotnet/coreclr/commit/f522b50) Pass --long-gc and --gcsimulator to long GC and GCSimulator CI jobs, respectively
- [`[616afb6]`](https://github.com/dotnet/coreclr/commit/616afb6) Keep mutex alive to avoid race condition in openmutexpos4 test
- [`[f6cd99c]`](https://github.com/dotnet/coreclr/commit/f6cd99c) Specialize Comparer<T> for enums to avoid boxing (#5503)
- [`[f6cd99c]`](https://github.com/dotnet/coreclr/commit/f6cd99c) Specialize Comparer\<T> for enums to avoid boxing (#5503)
- [`[de69718]`](https://github.com/dotnet/coreclr/commit/de69718) Partial revert "Fix problem with virtual memory commit in OOM scenario on Linux (#5609)" (#5744)
- [`[63d9a2e]`](https://github.com/dotnet/coreclr/commit/63d9a2e) Undo StompWriteBarrierResize reordering (#5740)
- [`[af687f4]`](https://github.com/dotnet/coreclr/commit/af687f4) Add check for gnu/lib-names.h (#5727)
@ -1002,7 +1002,7 @@
- [`[d79118c]`](https://github.com/dotnet/coreclr/commit/d79118c) Add noexcept to some non-throwing new overloads.
- [`[a97eacb]`](https://github.com/dotnet/coreclr/commit/a97eacb) Fxing the case of COMPlus_GCStress Removing Build dependency for GC Stress
- [`[8aeb642]`](https://github.com/dotnet/coreclr/commit/8aeb642) Remove a redundant recursive call to `gtSetEvalOrder`.
- [`[a755577]`](https://github.com/dotnet/coreclr/commit/a755577) Recognize Vector<T> constructors for small ints
- [`[a755577]`](https://github.com/dotnet/coreclr/commit/a755577) Recognize Vector\<T> constructors for small ints
- [`[0588c3c]`](https://github.com/dotnet/coreclr/commit/0588c3c) Add fedora23 badges to Readme.
- [`[6825093]`](https://github.com/dotnet/coreclr/commit/6825093) Disable failing test to enable corefx runs.
- [`[a453d31]`](https://github.com/dotnet/coreclr/commit/a453d31) ARM64: A few Test List Update
@ -1160,7 +1160,7 @@
- [`[5309106]`](https://github.com/dotnet/corefx/commit/5309106) Conditional compilation of MethodBuilder support in LambdaCompiler
- [`[ef41d0b]`](https://github.com/dotnet/corefx/commit/ef41d0b) Using TypeCode for Ldind and Stind emit.
- [`[e8d9dac]`](https://github.com/dotnet/corefx/commit/e8d9dac) Make MetadataReader.UTF8Decoder public (#11354)
- [`[8970dd0]`](https://github.com/dotnet/corefx/commit/8970dd0) Making Expression<TDelegate> constructor internal again
- [`[8970dd0]`](https://github.com/dotnet/corefx/commit/8970dd0) Making Expression\<TDelegate> constructor internal again
- [`[40b544d]`](https://github.com/dotnet/corefx/commit/40b544d) Removing some unncessary allocations in LambdaCompiler
- [`[d6300dc]`](https://github.com/dotnet/corefx/commit/d6300dc) Remove unreachable throw statement
- [`[1c68612]`](https://github.com/dotnet/corefx/commit/1c68612) Remove Options from common types for TPL Dataflow
@ -1216,7 +1216,7 @@
- [`[568b066]`](https://github.com/dotnet/corefx/commit/568b066) Use GetDeclaredMethod for cloning
- [`[704fab3]`](https://github.com/dotnet/corefx/commit/704fab3) More test coverage for nullable Comparers
- [`[2f6f9c3]`](https://github.com/dotnet/corefx/commit/2f6f9c3) Respond to PR feedback
- [`[d371832]`](https://github.com/dotnet/corefx/commit/d371832) Add some tests for Comparer<T>
- [`[d371832]`](https://github.com/dotnet/corefx/commit/d371832) Add some tests for Comparer\<T>
- [`[b39ba74]`](https://github.com/dotnet/corefx/commit/b39ba74) Make PathInternal.HasIllegalCharacters implementation faster on Windows
- [`[59e41af]`](https://github.com/dotnet/corefx/commit/59e41af) Fix System.Runtime.Test for 32bit architecture (#11245)
- [`[f36087f]`](https://github.com/dotnet/corefx/commit/f36087f) fix coreclr issue #7005
@ -1293,7 +1293,7 @@
- [`[589f5a1]`](https://github.com/dotnet/corefx/commit/589f5a1) Central nupkg versioning & library assm versioning
- [`[3b45360]`](https://github.com/dotnet/corefx/commit/3b45360) Change the check range for BaseAddress and EntryPointAddress
- [`[c3a3681]`](https://github.com/dotnet/corefx/commit/c3a3681) Allow to use clang 3.9 in build-native.sh
- [`[1d04509]`](https://github.com/dotnet/corefx/commit/1d04509) On Linux, we were reporting the starting *stack* address for a thread via ProcessThread.StartAddress. This property is supposed to return the *code* address of the start of the thread. We have no way of getting that info on Linux, so we'll just report it as IntPtr.Zero, as we already do on OSX (and apparently sometimes on Windows).
- [`[1d04509]`](https://github.com/dotnet/corefx/commit/1d04509) On Linux, we were reporting the starting _stack_ address for a thread via ProcessThread.StartAddress. This property is supposed to return the _code_ address of the start of the thread. We have no way of getting that info on Linux, so we'll just report it as IntPtr.Zero, as we already do on OSX (and apparently sometimes on Windows).
- [`[a949151]`](https://github.com/dotnet/corefx/commit/a949151) Add boundary condition tests for the inputs to HashAlgorithm.ComputeHash
- [`[68a93df]`](https://github.com/dotnet/corefx/commit/68a93df) Small clarification to avoid any confusion
- [`[13d8332]`](https://github.com/dotnet/corefx/commit/13d8332) Add section on how to file security bugs
@ -1626,7 +1626,7 @@
- [`[9affe80]`](https://github.com/dotnet/corefx/commit/9affe80) Updating CoreFx dependencies to beta-24310-04
- [`[74df1e6]`](https://github.com/dotnet/corefx/commit/74df1e6) Updating External dependencies to beta-24310-00
- [`[99dd849]`](https://github.com/dotnet/corefx/commit/99dd849) Make Queue.Enumerator.Current inlineable by the JIT
- [`[603c29e]`](https://github.com/dotnet/corefx/commit/603c29e) Make Stack<T>.Enumerator.Current inlineable by the JIT (#9942)
- [`[603c29e]`](https://github.com/dotnet/corefx/commit/603c29e) Make Stack\<T>.Enumerator.Current inlineable by the JIT (#9942)
- [`[6574a3f]`](https://github.com/dotnet/corefx/commit/6574a3f) Direct readers to the docs for .NET Standard (#9707)
- [`[ec7b9e8]`](https://github.com/dotnet/corefx/commit/ec7b9e8) Fix handling of errors from Process.Start
- [`[75594f0]`](https://github.com/dotnet/corefx/commit/75594f0) ARM-CI: Change Linux ARM Emulator job setup
@ -1665,7 +1665,7 @@
- [`[30bfa3e]`](https://github.com/dotnet/corefx/commit/30bfa3e) Remove some random data from System.Reflection.Emit.Tests
- [`[1de20c9]`](https://github.com/dotnet/corefx/commit/1de20c9) Escape Messages of InnerExceptions in DataContractSerializer
- [`[b5cfc77]`](https://github.com/dotnet/corefx/commit/b5cfc77) Respond to PR feedback
- [`[d33bf45]`](https://github.com/dotnet/corefx/commit/d33bf45) Add ImmutableArray IList and IList<T> tests
- [`[d33bf45]`](https://github.com/dotnet/corefx/commit/d33bf45) Add ImmutableArray IList and IList\<T> tests
- [`[0283a72]`](https://github.com/dotnet/corefx/commit/0283a72) Cleanup System.Reflection.Emit.Lightweight tests
- [`[3e714b8]`](https://github.com/dotnet/corefx/commit/3e714b8) Support filtering to TestTFM
- [`[2932668]`](https://github.com/dotnet/corefx/commit/2932668) port System.Native to be g++ compatible (#9791)
@ -1678,7 +1678,7 @@
- [`[79a7c57]`](https://github.com/dotnet/corefx/commit/79a7c57) Add instructions for targeting .NET Core with MSBuild projects (#9403)
- [`[9cd4b3c]`](https://github.com/dotnet/corefx/commit/9cd4b3c) arm: resolve objcopy version to be used
- [`[dd6e920]`](https://github.com/dotnet/corefx/commit/dd6e920) Additional guard against missing network files.
- [`[a947049]`](https://github.com/dotnet/corefx/commit/a947049) Guard file reads in /sys/class/net/<iface> directories
- [`[a947049]`](https://github.com/dotnet/corefx/commit/a947049) Guard file reads in /sys/class/net/\<iface> directories
- [`[cc0354c]`](https://github.com/dotnet/corefx/commit/cc0354c) Set KeySizeValue instead of doing gymnastics in LegalKeySizes.
- [`[a09e463]`](https://github.com/dotnet/corefx/commit/a09e463) Add locks to WinRT Console Color functions
- [`[5256d80]`](https://github.com/dotnet/corefx/commit/5256d80) Update Sys.IO.Compression tests to inherit ZipFileTestBase
@ -2032,9 +2032,9 @@
- [`[a9df42d]`](https://github.com/dotnet/corefx/commit/a9df42d) Make Platforms/Targets pkgs work w/packages.config
- [`[3e3ab10]`](https://github.com/dotnet/corefx/commit/3e3ab10) Support building on all supported distros
- [`[48da580]`](https://github.com/dotnet/corefx/commit/48da580) Improve tracing in CurlHandler
- [`[704f56d]`](https://github.com/dotnet/corefx/commit/704f56d) Fix ValueTask<T>.ToString behavior with null results
- [`[704f56d]`](https://github.com/dotnet/corefx/commit/704f56d) Fix ValueTask\<T>.ToString behavior with null results
- [`[3355f6f]`](https://github.com/dotnet/corefx/commit/3355f6f) Update NETStandard.Library reference to 1.6
- [`[eecacdc]`](https://github.com/dotnet/corefx/commit/eecacdc) Remove implicit casts from ValueTask<T>
- [`[eecacdc]`](https://github.com/dotnet/corefx/commit/eecacdc) Remove implicit casts from ValueTask\<T>
- [`[66ed6f0]`](https://github.com/dotnet/corefx/commit/66ed6f0) Reenable ALC test
- [`[fdd2ded]`](https://github.com/dotnet/corefx/commit/fdd2ded) Update BuildTools version
- [`[d04f336]`](https://github.com/dotnet/corefx/commit/d04f336) Disable API Compat on Unix
@ -2081,7 +2081,7 @@
- [`[114cf22]`](https://github.com/dotnet/corefx/commit/114cf22) Adding versioning.md which contains documentation on how versioning is calculated. (#8734)
- [`[41f9406]`](https://github.com/dotnet/corefx/commit/41f9406) Fixing integration error within Http tests.
- [`[91f1698]`](https://github.com/dotnet/corefx/commit/91f1698) Use SchSendAuxRecord in SslStream on Windows.
- [`[5f5af10]`](https://github.com/dotnet/corefx/commit/5f5af10) Remove redundant code from Stack<T>.Contains
- [`[5f5af10]`](https://github.com/dotnet/corefx/commit/5f5af10) Remove redundant code from Stack\<T>.Contains
- [`[b0b96be]`](https://github.com/dotnet/corefx/commit/b0b96be) Add file with package versions for external packages
- [`[6fe44da]`](https://github.com/dotnet/corefx/commit/6fe44da) Add check to ensure test user deteled.
- [`[0eb598b]`](https://github.com/dotnet/corefx/commit/0eb598b) Move tests that don't specify a target group their own directory.
@ -2603,4 +2603,4 @@
- [`[78e34c6]`](https://github.com/dotnet/cli/commit/78e34c6) Move PullNupkgFilesFromBlob into FinalizeBuild.
- [`[54ab5b8]`](https://github.com/dotnet/cli/commit/54ab5b8) Create supported-os-matrix.md (#1923)
- [`[9155fbf]`](https://github.com/dotnet/cli/commit/9155fbf) Update known-issues.md (#3148)
- [`[78a70f0]`](https://github.com/dotnet/cli/commit/78a70f0) Remove duplicated install scripts.
- [`[78a70f0]`](https://github.com/dotnet/cli/commit/78a70f0) Remove duplicated install scripts.

Просмотреть файл

@ -2,7 +2,6 @@
We're still working out the best way to present contributors and trying to be as accurate as possible. The list below is generated with the following command against each repo. The release qualifier is different from the example in some cases. Also, where multiple email addresses were returned for a single person, the counts were aggregated with the email address reported the most commits.
```bash
git shortlog -sne --no-merges --since {2016-05-20} --until {2016-11-08}
```
@ -53,7 +52,6 @@ When you navigate to a contributors commit page, the results are not filtered by
- [Petr Onderka (1)](https://github.com/dotnet/cli/commits/rel/1.0.0-preview2.1?author=gsvick@gmail.com)
- [PiotrP (1)](https://github.com/dotnet/cli/commits/rel/1.0.0-preview2.1?author=piotrp@microsoft.com)
## CoreCLR
- [James Ko (53)](https://github.com/dotnet/coreclr/commits/release/1.1.0/?author=jamesqko@gmail.com)

Просмотреть файл

@ -1,6 +1,6 @@
# .NET Core 1.1 Preview 1 Commits
The following list of the commits is included in .NET Core 1.1.0 Preview 1. The list has been edited to remove unimportant commits, such as updates to the build system and the like.
The following list of the commits is included in .NET Core 1.1.0 Preview 1. The list has been edited to remove unimportant commits, such as updates to the build system and the like.
The list was generated using git rev-list --no-merges --abbrev-commit --oneline --until={2016-10-24} origin..HEAD

Просмотреть файл

@ -2,7 +2,6 @@
We're still working out the best way to present contributors and trying to be as accurate as possible. The list below is generated with the following command against each repo. The release qualifier is different from the example in some cases. Also, where multiple email addresses were returned for a single person, the counts were aggregated with the email address reported the most commits.
```bash
git shortlog -sne --no-merges HEAD..release/1.1.0 --since master@{2016-05-20} --until master@{2016-10-23}
```
@ -53,7 +52,6 @@ When you navigate to a contributors commit page, the results are not filtered by
- [MichaelSimons (1)](https://github.com/dotnet/cli/commits/rel/1.0.0-preview2.1?author=msimons@microsoft.com)
- [Mark Rendle (1)](https://github.com/dotnet/cli/commits/rel/1.0.0-preview2.1?author=mark@markrendle.net)
## CoreCLR
- [James Ko (53)](https://github.com/dotnet/coreclr/commits/release/1.1.0/?author=jamesqko@gmail.com)

Просмотреть файл

@ -15,7 +15,6 @@ Installing the SDK will create new side-by-side directories for each version und
This will be resolved in the final 1.1.0 release and is tracked by [CLI Issue 4466](https://github.com/dotnet/cli/issues/4466).
## C++ Math libraries can behave differently across platforms
This is expected behavior. See discussion in [coreclr issue 4318](https://github.com/dotnet/coreclr/issues/4318)
This is expected behavior. See discussion in [coreclr issue 4318](https://github.com/dotnet/coreclr/issues/4318)

Просмотреть файл

@ -42,4 +42,3 @@ Changes to the .NET Core API surface are can be seen in the [1.0-1.1-api-diff](1
### Contributors
The list of contributors can be found in the [1.1.0 Preview 1 Contributor List](https://github.com/dotnet/core/blob/main/release-notes/1.1/1.1.0-preview1-contibutor-list.md)

Просмотреть файл

@ -90,4 +90,4 @@ Symbol packages for .NET 1.1.1 are available for download from the following loc
* [`[ba0a2d63fc]`](https://github.com/dotnet/corefx/commit/ba0a2d63fc) Add generic context to signature decoder
* [`[b1de2afcda]`](https://github.com/dotnet/corefx/commit/b1de2afcda) Replace SkipBytes and SeekOffset with Offset setter (#12375)
* [`[48b8423fd2]`](https://github.com/dotnet/corefx/commit/48b8423fd2) Implements BlobReader.IndexOf(byte) (#12308)
* [`[acdfab6eec]`](https://github.com/dotnet/corefx/commit/acdfab6eec) Use constants instead of literal numbers (#11547)
* [`[acdfab6eec]`](https://github.com/dotnet/corefx/commit/acdfab6eec) Use constants instead of literal numbers (#11547)

Просмотреть файл

@ -44,4 +44,4 @@ The update addresses the vulnerability by correcting how .NET Core applications
| Package name | Vulnerable versions | Secure versions |
| :--- | :--- | :--- |
System.Net.Http| 2.0.20126.16343, 2.0.20505, 2.0.20710, 4.0.0, 4.1.0, 4.1.1, 4.1.2, 4.3.0, 4.3.1, 4.3.2, 4.3.3 | 4.3.4 or later
System.Net.Http| 2.0.20126.16343, 2.0.20505, 2.0.20710, 4.0.0, 4.1.0, 4.1.1, 4.1.2, 4.3.0, 4.3.1, 4.3.2, 4.3.3 | 4.3.4 or later

Просмотреть файл

@ -39,17 +39,17 @@ The [.NET Core Docker images](https://hub.docker.com/r/microsoft/dotnet/) have b
## Closed issues for this release
#### CoreCLR
### CoreCLR
* [`[640a13cae]`](https://github.com/dotnet/coreclr/commit/640a13cae) Fix debugging on OS X Sierra (#10078) (#10103)
* [`[dafae2f23]`](https://github.com/dotnet/coreclr/commit/dafae2f23) GetAllocatedBytesForCurrentThread unpredictably returns inaccurate values (#10277)
* [`[8123965bc]`](https://github.com/dotnet/coreclr/commit/8123965bc) Eliminate EncodingForwarder performance impact (#10805)
#### CoreFX
### CoreFX
* [`[9933227ad9]`](https://github.com/dotnet/corefx/commit/9933227ad9) [HttpClient perf] Ensure CURLOPT_TCP_NODELAY is set by CurlHandler (#16895)
* [`[47d83388b3]`](https://github.com/dotnet/corefx/commit/47d83388b3) Add Xamarin support to System.ValueTuple package (#16447)
* [`[8d774a8244]`](https://github.com/dotnet/corefx/commit/8d774a8244) Update AspNetCoreHosting keyword (#16477)
* [`[8d774a8244]`](https://github.com/dotnet/corefx/commit/8d774a8244) Update AspNetCoreHosting keyword (#16477)
* [`[ed4a5c8b97]`](https://github.com/dotnet/corefx/commit/ed4a5c8b97) Adding updates to packages to update SqlClient in the 1.1.x release (#17635)
* [`[Microsoft Common Vulnerabilities and Exposures CVE-2017-0248]`](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0248) Fix for a security feature bypass vulnerability when .NET Core components do not completely validate certificates.
* [`[Microsoft Common Vulnerabilities and Exposures CVE-2017-0247]`](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0247) .NET Core HTML Encode Unicode Multibyte Vulnerability (System.Text.Encodings.Web) - this is not part of Shared Framework.

Просмотреть файл

@ -20,7 +20,7 @@ The [.NET Core Docker images](https://hub.docker.com/r/microsoft/dotnet/) have b
## Azure AppServices
Deployment of this update to Azure AppServices is in process. Because AppServices is a high availability service, the deployment is carfully staged across regions over a period of time. Deployment will begin in the West US 2 and North Central US regions with remaining regions following over a few days.
Deployment of this update to Azure AppServices is in process. Because AppServices is a high availability service, the deployment is carefully staged across regions over a period of time. Deployment will begin in the West US 2 and North Central US regions with remaining regions following over a few days.
## Package and Binary updates
@ -58,4 +58,4 @@ The security update addresses the vulnerability by ensuring that .NET Core compo
Microsoft is aware of a Denial of Service vulnerability in all public versions of .NET core due to improper processing of XML documents. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET application. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to a .NET Core application.
The update addresses the vulnerability by correcting how .NET core handles XML document processing.
The update addresses the vulnerability by correcting how .NET core handles XML document processing.

Просмотреть файл

@ -19,7 +19,7 @@ The [.NET Core Docker images](https://hub.docker.com/r/microsoft/dotnet/) have b
## Azure AppServices
Deployment of this update to Azure AppServices is in process. Because AppServices is a high availability service, the deployment is carfully staged across regions over a period of time. Deployment will begin in the West US 2 and North Central US regions with remaining regions following over a few days.
Deployment of this update to Azure AppServices is in process. Because AppServices is a high availability service, the deployment is carefully staged across regions over a period of time. Deployment will begin in the West US 2 and North Central US regions with remaining regions following over a few days.
## Known Issues
@ -49,5 +49,3 @@ The following packages and binaries are updated by the March 2018 update:
Microsoft is aware of a security vulnerability in the public versions of .NET Core where a malicious file or web request could cause a denial of service (DoS) attack. See the following announcement for details.
[CVE-2018-0875](https://github.com/dotnet/announcements/issues/62)

Просмотреть файл

@ -19,7 +19,7 @@ The [.NET Core Docker images](https://hub.docker.com/r/microsoft/dotnet/) have b
## Azure AppServices
Deployment of this update to Azure AppServices is in process. Because AppServices is a high availability service, the deployment is carfully staged across regions over a period of time. Deployment will begin in the West US 2 and North Central US regions with remaining regions following over a few days.
Deployment of this update to Azure AppServices is in process. Because AppServices is a high availability service, the deployment is carefully staged across regions over a period of time. Deployment will begin in the West US 2 and North Central US regions with remaining regions following over a few days.
## Known Issues
@ -49,9 +49,10 @@ The following packages and binaries are updated by the April 2018 update:
## Notable Fixes and Commits
#### CoreFX
### CoreFX
[`[4859394]`](https://github.com/dotnet/corefx/pull/27632/commits/4859394b7e7cbae1bc7257926fbe1cdb1769085a) : Adding support for ncurses 6.1 TERM format on System.Console.
#### CoreCLR
[`[18e410f]`](https://github.com/dotnet/coreclr/pull/16576/commits/18e410ffaa72a2bc390421478a65c6ddd9e19edd) : Fix detection of YMM regs presence
### CoreCLR
[`[18e410f]`](https://github.com/dotnet/coreclr/pull/16576/commits/18e410ffaa72a2bc390421478a65c6ddd9e19edd) : Fix detection of YMM regs presence

Просмотреть файл

@ -48,9 +48,9 @@ The update addresses the vulnerability by correcting how .NET Core applications
| Package name | Vulnerable versions | Secure versions |
| :--- | :--- | :--- |
System.Private.ServiceModel | 4.0.0, 4.1.0, 4.1.1 <br> 4.3.0, 4.3.1 <br>4.4.0, 4.4.1, 4.4.2 <br> 4.5.0, 4.5.1 | 4.1.2 or later <br> 4.3.2 or later <br> 4.4.3 or later <br> 4.5.2 or later |
System.ServiceModel.Duplex | 4.0.0, 4.1.0, 4.1.1 <br> 4.3.0, 4.3.1 <br>4.4.0, 4.4.1, 4.4.2 <br> 4.5.0, 4.5.1 | 4.1.2 or later <br> 4.3.2 or later <br> 4.4.3 or later <br> 4.5.2 or later |
System.ServiceModel.Http | 4.0.0, 4.1.0, 4.1.1 <br> 4.3.0, 4.3.1 <br>4.4.0, 4.4.1, 4.4.2 <br> 4.5.0, 4.5.1 | 4.1.2 or later <br> 4.3.2 or later <br> 4.4.3 or later <br> 4.5.2 or later |
System.ServiceModel.NetTcp | 4.0.0, 4.1.0, 4.1.1 <br> 4.3.0, 4.3.1 <br>4.4.0, 4.4.1, 4.4.2 <br> 4.5.0, 4.5.1 | 4.1.2 or later <br> 4.3.2 or later <br> 4.4.3 or later <br> 4.5.2 or later |
System.ServiceModel.Primitives | 4.0.0, 4.1.0, 4.1.1 <br> 4.3.0, 4.3.1 <br>4.4.0, 4.4.1, 4.4.2 <br> 4.5.0, 4.5.1 | 4.1.2 or later <br> 4.3.2 or later <br> 4.4.3 or later <br> 4.5.2 or later |
System.ServiceModel.Security | 4.0.0, 4.1.0, 4.1.1 <br> 4.3.0, 4.3.1 <br>4.4.0, 4.4.1, 4.4.2 <br> 4.5.0, 4.5.1 | 4.1.2 or later <br> 4.3.2 or later <br> 4.4.3 or later <br> 4.5.2 or later |
System.Private.ServiceModel | 4.0.0, 4.1.0, 4.1.1 <br/> 4.3.0, 4.3.1 <br/>4.4.0, 4.4.1, 4.4.2 <br/> 4.5.0, 4.5.1 | 4.1.2 or later <br/> 4.3.2 or later <br/> 4.4.3 or later <br/> 4.5.2 or later |
System.ServiceModel.Duplex | 4.0.0, 4.1.0, 4.1.1 <br/> 4.3.0, 4.3.1 <br/>4.4.0, 4.4.1, 4.4.2 <br/> 4.5.0, 4.5.1 | 4.1.2 or later <br/> 4.3.2 or later <br/> 4.4.3 or later <br/> 4.5.2 or later |
System.ServiceModel.Http | 4.0.0, 4.1.0, 4.1.1 <br/> 4.3.0, 4.3.1 <br/>4.4.0, 4.4.1, 4.4.2 <br/> 4.5.0, 4.5.1 | 4.1.2 or later <br/> 4.3.2 or later <br/> 4.4.3 or later <br/> 4.5.2 or later |
System.ServiceModel.NetTcp | 4.0.0, 4.1.0, 4.1.1 <br/> 4.3.0, 4.3.1 <br/>4.4.0, 4.4.1, 4.4.2 <br/> 4.5.0, 4.5.1 | 4.1.2 or later <br/> 4.3.2 or later <br/> 4.4.3 or later <br/> 4.5.2 or later |
System.ServiceModel.Primitives | 4.0.0, 4.1.0, 4.1.1 <br/> 4.3.0, 4.3.1 <br/>4.4.0, 4.4.1, 4.4.2 <br/> 4.5.0, 4.5.1 | 4.1.2 or later <br/> 4.3.2 or later <br/> 4.4.3 or later <br/> 4.5.2 or later |
System.ServiceModel.Security | 4.0.0, 4.1.0, 4.1.1 <br/> 4.3.0, 4.3.1 <br/>4.4.0, 4.4.1, 4.4.2 <br/> 4.5.0, 4.5.1 | 4.1.2 or later <br/> 4.3.2 or later <br/> 4.4.3 or later <br/> 4.5.2 or later |

Просмотреть файл

@ -34,7 +34,6 @@ Symbol packages for .NET 1.1 are available for download from the following locat
Changes to the .NET Core API surface are can be seen in the [1.0-1.1-api-diff](1.0-1.1-api-diff/1.0-1.1-api-diff.md)
### WCF
* Please see the [WCF release page](https://github.com/dotnet/wcf/releases/tag/v1.1.0) for details on fixes from the WCF team.