You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: release-notes/1.0/1.0.14/1.0.14-download.md
+8-14Lines changed: 8 additions & 14 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -7,9 +7,9 @@
7
7
8
8
See the [Release Notes](https://github.com/dotnet/core/blob/main/release-notes/1.0/1.0.14/1.0.14.md) for details about what is included in this update.
| Windows |[x86][dotnet-dev-win-x86.exe]\|[x64][dotnet-dev-win-x64.exe]|[x86][dotnet-dev-win-x86.zip]\|[x64][dotnet-dev-win-x64.zip]|[x86][dotnet-win-x86.exe]\|[x64][dotnet-win-x64.exe]|[x86][dotnet-win-x86.zip]\|[x64][dotnet-win-x64.zip]|[Hosting Bundle][DotNetCore-WindowsHosting.exe]<sup>2</sup>|
12
+
| Windows |[x86][dotnet-dev-win-x86.exe]\|[x64][dotnet-dev-win-x64.exe]|[x86][dotnet-dev-win-x86.zip]\|[x64][dotnet-dev-win-x64.zip]|[x86][dotnet-win-x86.exe]\|[x64][dotnet-win-x64.exe]|[x86][dotnet-win-x86.zip]\|[x64][dotnet-win-x64.zip]|[Hosting Bundle][DotNetCore-WindowsHosting.exe]|
@@ -31,6 +31,7 @@ The [.NET Core Docker images](https://hub.docker.com/r/microsoft/dotnet/) have b
31
31
Before installing .NET, you will need to register the Microsoft key, register the product repository, and install required dependencies. This only needs to be done once per machine. Refer to [Setting up Linux for .NET Core][linux-setup] for the requirements.
32
32
33
33
### Develop applications
34
+
34
35
To develop applications using the .NET Core SDK, run the following command. The .NET Core runtime and ASP.NET Core runtime are included.
35
36
36
37
In your command prompt, run the following commands:
Installing from the packages detailed above is recommended or you can install from binary archive, if that better suits your needs. When using binary archives to install, the contents must be extracted to a user location such as `$HOME/dotnet`, a symbolic link created for `dotnet` and a few dependencies installed. Dependency requirements can be seen in the [Linux System Prerequisites](https://github.com/dotnet/core/blob/main/Documentation/linux-prereqs.md) document.
57
+
Installing from the packages detailed above is recommended or you can install from binary archive, if that better suits your needs. When using binary archives to install, the contents must be extracted to a user location such as `$HOME/dotnet`, a symbolic link created for `dotnet` and a few dependencies installed.
58
+
Dependency requirements can be seen in the [Linux System Prerequisites](https://github.com/dotnet/core/blob/main/linux.md) document.
57
59
58
60
```bash
59
61
mkdir -p $HOME/dotnet && tar zxf dotnet.tar.gz -C $HOME/dotnet
| Windows |[x86][dotnet-dev-win-x86.exe]\|[x64][dotnet-dev-win-x64.exe]|[x86][dotnet-dev-win-x86.zip]\|[x64][dotnet-dev-win-x64.zip]|[x86][dotnet-win-x86.exe]\|[x64][dotnet-win-x64.exe]|[x86][dotnet-win-x86.zip]\|[x64][dotnet-win-x64.zip]|[Hosting Bundle][DotNetCore-WindowsHosting.exe]<sup>2</sup>|
12
+
| Windows |[x86][dotnet-dev-win-x86.exe]\|[x64][dotnet-dev-win-x64.exe]|[x86][dotnet-dev-win-x86.zip]\|[x64][dotnet-dev-win-x64.zip]|[x86][dotnet-win-x86.exe]\|[x64][dotnet-win-x64.exe]|[x86][dotnet-win-x86.zip]\|[x64][dotnet-win-x64.zip]|[Hosting Bundle][DotNetCore-WindowsHosting.exe]|
@@ -30,6 +30,7 @@ The [.NET Core Docker images](https://hub.docker.com/r/microsoft/dotnet/) have b
30
30
Before installing .NET, you will need to register the Microsoft key, register the product repository, and install required dependencies. This only needs to be done once per machine. Refer to [Setting up Linux for .NET Core][linux-setup] for the requirements.
31
31
32
32
### Develop applications
33
+
33
34
To develop applications using the .NET Core SDK, run the following command. The .NET Core runtime and ASP.NET Core runtime are included.
34
35
35
36
In your command prompt, run the following commands:
Installing from the packages detailed above is recommended or you can install from binary archive, if that better suits your needs. When using binary archives to install, the contents must be extracted to a user location such as `$HOME/dotnet`, a symbolic link created for `dotnet` and a few dependencies installed. Dependency requirements can be seen in the [Linux System Prerequisites](https://github.com/dotnet/core/blob/main/Documentation/linux-prereqs.md) document.
56
+
Installing from the packages detailed above is recommended or you can install from binary archive, if that better suits your needs. When using binary archives to install, the contents must be extracted to a user location such as `$HOME/dotnet`, a symbolic link created for `dotnet` and a few dependencies installed.
57
+
Dependency requirements can be seen in the [Linux System Prerequisites](https://github.com/dotnet/core/blob/main/linux.md) document.
56
58
57
59
```bash
58
60
mkdir -p $HOME/dotnet && tar zxf dotnet.tar.gz -C $HOME/dotnet
A tampering vulnerability exists in NuGet software when executed in a Linux or Mac environment. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. Exploitation of the vulnerability requires that an attacker can login as any other user on that machine. At that point, the attacker will be able to replace or add to files that were created by a NuGet restore operation in the current users account.
33
+
A tampering vulnerability exists in NuGet software when executed in a Linux or Mac environment. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system.
34
+
An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. Exploitation of the vulnerability requires that an attacker can login as any other user on that machine.
35
+
At that point, the attacker will be able to replace or add to files that were created by a NuGet restore operation in the current users account.
34
36
35
37
The security update addresses the vulnerability by correcting how NuGet restore creates file permissions for all files extracted to the client machine.
0 commit comments