.NET September 2022 Updates

[dcwhittaker]

Microsoft released the following .NET Updates in September 2022.

.NET Releases

• .NET 6.0.9 and .NET SDK 6.0.109 (Download)
• .NET Core 3.1.29 and .NET SDK 3.1.423 (Download)

This issue will be updated if there are any additional releases during the month.

Security Advisories

Microsoft has published the following security advisories for .NET 6 and .NET Core 3.1. The associated vulnerabilities are resolved in this month's releases.

• CVE 2022-38013 | .NET Denial of Service Vulnerability
  • Announcement
  • Discussion

These advisories may provide additional information (beyond just installing the latest update) to guide developers on mitigating these vulnerabilities in affected applications. Please see the linked repository discussion issues if you have questions.

Which CVEs apply to my .NET 6 app?

Your app may be affected by many security vulnerabilities if you have not been installing .NET 6 patches.

Which CVEs apply to my .NET 6 app? makes it easy to tell how many CVEs affect your app, given the .NET 6 patch version you currently have deployed.

.NET Support Policies

Microsoft support policies are defined in the following documents:

• Currently Supported Releases
• Microsoft .NET Support Policy
• .NET Core OS Lifecycle Policy