Download .Net Core 2.1.2 / 2.0.9 / 1.1.9 / 1.0.12

Microsoft has released .Net Core versions 2.1.2, 2.0.9, 1.1.9 and 1.0.12. This is a modular platform for creating web applications and services that run on Linux, macOS, and Windows. Of course it uses .Net and you can compare it to Node.js or Go. The whole is released under a mix of MIT, Apache 2 and CC BY 4.0 licenses. These releases feature the following announcement on the .Net Blog:

.NET Core July 2018 Update

Today, we are releasing the .NET Core July 2018 Update. This update includes .NET Core 1.0.12, .NET Core 1.1.9, .NET Core 2.0.9 and .NET Core 2.1.2.

Security:

.NET Core Security Feature Bypass Vulnerability (CVE-2018-8356)
Microsoft is aware of a security feature bypass vulnerability that exists when .NET Core does not correctly validate certificates. An attacker who successfully exploited this vulnerability could present an expired certificate when challenged. The update addresses the vulnerability by correcting how .NET Core applications handle certificate validation.

ASP.NET Core Security Feature Bypass Vulnerability (CVE-2018-8171)
Microsoft is aware of a security feature bypass in ASP.NET Core when the number of incorrect login attempts is not validated. An attacker who successfully exploited this vulnerability could try an infinite number of authentication attempts. The update addresses the vulnerability by correcting how ASP.NET Core validates the number of incorrect login attempts.

ASP.NET Core Denial Of Service Vulnerability
Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core 2.0 and 2.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Microsoft is aware of a denial of service vulnerability in ASP.NET Core when a malformed request is terminated. An attacker who successfully exploited this vulnerability could cause a denial of service attack. The update addresses the vulnerability by correcting how ASP.NET Core handles such requests.