dotnet / dotnet/announcements

.NET February 2023 Updates

Open
#246 0 comments 0 reactions 0 assignees View on GitHub
.NET 6.0 .NET 7.0 Monthly-Update Patch-Tuesday Security
Dominant language
No language data
Stars
1.4k
Forks
53
PR merge metrics
No merged PRs in 30d

Description

Microsoft released the following [.NET Updates in February 2022](https://devblogs.microsoft.com/dotnet/february-2022-updates/).

.NET Releases

* [.NET 7.0.3 and .NET SDK 7.0.103](https://github.com/dotnet/core/blob/main/release-notes/7.0/7.0.3/7.0.3.md) ([Download](https://dotnet.microsoft.com/download/dotnet-core/7.0))
* [.NET 6.0.14 and .NET SDK 6.0.114](https://github.com/dotnet/core/blob/main/release-notes/6.0/6.0.14/6.0.14.md) ([Download](https://dotnet.microsoft.com/download/dotnet-core/6.0))

This issue will be updated if there are any additional releases during the month.

Security Advisories

Microsoft has published the following security advisories for .NET. The associated vulnerabilities are resolved in this month's releases.

* [CVE 2023-21808 |.NET Remote Code Execution Vulnerability](https://www.cve.org/CVERecord?id=CVE-2023-21808)
* [Announcement](https://github.com/dotnet/announcements/issues/247)
* [Discussion](https://github.com/dotnet/runtime/issues/82112)

These advisories may provide additional information (beyond just installing the latest update) to guide developers on mitigating these vulnerabilities in affected applications. Please see the linked repository discussion issues if you have questions.

## Which CVEs apply to my .NET app?

Your app may be affected by many security vulnerabilities if you have not been installing .NET patches.

[Which CVEs apply to my .NET 6 app?](https://github.com/dotnet/core/blob/main/release-notes/6.0/cve.md) makes it easy to tell how many CVEs affect your app, given the .NET 6 patch version you currently have deployed.

.NET Support Policies


Microsoft support policies are defined in the following documents:

* [Currently Supported Releases](https://github.com/dotnet/core/blob/main/releases.md)
* [Microsoft .NET Support Policy](https://dotnet.microsoft.com/platform/support/policy/)
* [.NET Core OS Lifecycle Policy](https://github.com/dotnet/core/blob/master/os-lifecycle-policy.md)

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.