You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Mac OS X | 10.11, 10.12* | x64 | [Apple Support Sitemap](https://support.apple.com/sitemap) <br> [Apple Security Updates](https://support.apple.com/HT201222)
24
+
Mac OS X | 10.11, 10.12* | x64 | [Apple Support Sitemap](https://support.apple.com/sitemap) <br/> [Apple Security Updates](https://support.apple.com/HT201222)
25
25
26
26
\* Supported by latest patch release of .NET Core 1.0
Red Hat Enterprise Linux <br> CentOS <br> Oracle Linux | 7 | x64 | [Red Hat support policy](https://access.redhat.com/support/policy/updates/errata/) <br> [CentOS lifecycle](https://wiki.centos.org/FAQ/General#head-fe8a0be91ee3e7dea812e8694491e1dde5b75e6d) <br> [Oracle Linux lifecycle](https://www.oracle.com/a/ocom/docs/elsp-lifetime-069338.pdf)
32
+
Red Hat Enterprise Linux <br/> CentOS <br/> Oracle Linux | 7 | x64 | [Red Hat support policy](https://access.redhat.com/support/policy/updates/errata/) <br/> [CentOS lifecycle](https://wiki.centos.org/FAQ/General#head-fe8a0be91ee3e7dea812e8694491e1dde5b75e6d) <br/> [Oracle Linux lifecycle](https://www.oracle.com/a/ocom/docs/elsp-lifetime-069338.pdf)
Ubuntu <br> Linux Mint | 16.04, 18.04 (1.1) <br> 17 | x64 | [Ubuntu lifecycle](https://wiki.ubuntu.com/Releases) <br> [Linux Mint end of life announcements](https://forums.linuxmint.com/search.php?keywords=%22end+of+life%22&terms=all&author=&sc=1&sf=titleonly&sr=posts&sk=t&sd=d&st=0&ch=300&t=0&submit=Search)
35
+
Ubuntu <br/> Linux Mint | 16.04, 18.04 (1.1) <br/> 17 | x64 | [Ubuntu lifecycle](https://wiki.ubuntu.com/Releases) <br/> [Linux Mint end of life announcements](https://forums.linuxmint.com/search.php?keywords=%22end+of+life%22&terms=all&author=&sc=1&sf=titleonly&sr=posts&sk=t&sd=d&st=0&ch=300&t=0&submit=Search)
Copy file name to clipboardExpand all lines: release-notes/1.0/1.0.0-known-issues.md
+36-29
Original file line number
Diff line number
Diff line change
@@ -9,10 +9,12 @@ See the [.NET Core prequisites document](https://github.com/dotnet/core/blob/mai
9
9
## NegotiateStream's functionality relies on gssapi implementation
10
10
11
11
```NegotiateStream``` relies on the gssapi implementation available on the platform:
12
+
12
13
* On Linux, the default gssapi implementation typically provided is [MIT's krb5 library](https://web.mit.edu/kerberos/), which is available on all the linux platforms.
13
14
* On OS X, the default implementation is the heimdal-based GSS.framework.
14
15
15
16
On both Linux and OS X, NegotiateStream uses SPNEGO and relies on the underlying implementation for supporting Kerberos and NTLM as the underlying security protocol:
17
+
16
18
* On OS X, GSS.framework supports the SPNEGO mechanism with Kerberos and NTLM as the available security protocols.
17
19
* On Linux, the MIT krb5 library supports SPENGO mechanism and Kerberos as the available security protocol. The implementation can also be made to support NTLM by installing the [GSS-NTLMSSP plugin](https://fedorahosted.org/gss-ntlmssp/) or another plugin with similar functionality. The fallback to NTLM is thus dependent on runtime availability of such a plugin. On RHEL and CentOS, the GSS-NTLMSSP plugin is available from the package managers. The same is also available on Ubuntu 16. It may be available for installable on other distributions and versions of Linux. There's no compile time dependency on this plugin.
18
20
@@ -21,24 +23,27 @@ On both Linux and OS X, NegotiateStream uses SPNEGO and relies on the underlying
21
23
There are some combinations of Kerberos/NTLM and SignOnly/EncryptAndSign/etc. that cause the native ```gss_wrap``` call used by ```NegotiateStream``` on a Unix client to fail when connected to a ```NegotiateStream``` on a Windows server. Here are the failing combinations of credentials and protection level passed in to ```AuthenticateAsClientAsync```:
22
24
23
25
On Linux:
24
-
- Kerberos creds with Sign: Server complains that signature is valid but that the contents are not encrypted.
25
-
- NTLM creds with EncrypAndSign: Server rejects signature.
26
-
- NTLM creds with Sign: Server rejects signature.
26
+
27
+
* Kerberos creds with Sign: Server complains that signature is valid but that the contents are not encrypted.
28
+
* NTLM creds with EncrypAndSign: Server rejects signature.
29
+
* NTLM creds with Sign: Server rejects signature.
27
30
28
31
On OS X:
29
-
- Kerberos creds with Sign: Server complains that signature is valid but the contents are not encrypted.
30
-
- NTLM creds with EncryptAndSign: Server complains about message format.
31
-
- NTLM creds with Sign: gss_wrap fails on client side.
32
+
33
+
* Kerberos creds with Sign: Server complains that signature is valid but the contents are not encrypted.
34
+
* NTLM creds with EncryptAndSign: Server complains about message format.
35
+
* NTLM creds with Sign: gss_wrap fails on client side.
32
36
33
37
A fix for this issue has been pushed to MIT Kerberos source <https://github.com/krb5/krb5/pull/436>, which will make the fix available for all Unix platforms, starting with krb5-1.15. Red Hat reports the fix will be backported to RHEL 7.
34
38
35
-
-https://github.com/dotnet/corefx/issues/6767
39
+
*<https://github.com/dotnet/corefx/issues/6767>
36
40
37
41
### Socket.Connect and ConnectAsync instance methods support only one IPAddress
38
42
39
43
The Socket class provides instance and extension Connect and ConnectAsync methods, each with multiple overloads. Some of these overloads take an IPAddress, some take an array of IPAddresses, some take a string host name, and others take an EndPoint. On Linux and on OS X, only some of these methods are functional in this release, due to the capabilities of the underlying platform. Specifically, any of these overloads that may need to work with multiple addresses will throw a PlatformNotSupportedException; that includes not only the overloads that take an array of IPAddress instances, but also the overloads that take a string host, as well as the overloads that take an EndPoint if a DnsEndPoint is supplied (when the DNS lookup is performed, the host name may end up mapping to multiple addresses).
40
44
41
45
As a workaround, a new Socket instance may be created for each address to be tried, e.g.
46
+
42
47
```C#
43
48
publicstaticclassSocketUtilities
44
49
{
@@ -72,13 +77,13 @@ public static class SocketUtilities
72
77
}
73
78
```
74
79
75
-
-https://github.com/dotnet/corefx/issues/9235
80
+
*<https://github.com/dotnet/corefx/issues/9235>
76
81
77
82
## HttpClient handler header parsing strictness on Linux and OS X
78
83
79
84
HttpClient response header parsing logic on Linux and on OS X fairly strictly follows the RFC. Certain "invalid" headers, such as with spaces between the header name and the colon, might be accepted by other browsers or even by HttpClient on Windows, but could be rejected when run on Linux or on OS X.
80
85
81
-
-https://github.com/dotnet/corefx/issues/9240
86
+
*<https://github.com/dotnet/corefx/issues/9240>
82
87
83
88
## X509 certificate stores not supported on NTFS and FAT volumes on Unix
84
89
@@ -105,8 +110,7 @@ When this dependency is not met, an application making direct or indirect use of
105
110
106
111
Since .NET Core loads libcrypto and libssl via rpath probing, these libraries can be copied into the working directory of an application before being copied to another machine. But when trying to use this configuration, users should be advised that the Homebrew version of libssl has an absolute path dependency on libcrypto. The local copy of libssl may need to be modified to search for libcrypto via rpath with the `install_name_tool` utility.
107
112
108
-
-https://github.com/dotnet/corefx/issues/9171
109
-
113
+
*<https://github.com/dotnet/corefx/issues/9171>
110
114
111
115
## Debian users may experience unexpected failure when using SSL/TLS
112
116
@@ -116,13 +120,13 @@ Metadata from the server can cause OpenSSL 1.0.1 to consider the cross-certified
116
120
117
121
Microsoft has no specific guidance to offer users affected by this configuration state. This is currently tracked as [bug 812488 in the Debian bug system](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=812488).
118
122
119
-
-https://github.com/dotnet/corefx/issues/9244
123
+
*<https://github.com/dotnet/corefx/issues/9244>
120
124
121
125
## HttpClient.GetAsync may fail while handling multiple "WWW-Authenticate: Basic" headers
122
126
123
127
HttpClient.GetAsync on Windows is unable to process and throws an exception if a server response includes more than one "WWW-Authenticate: Basic" header with different realms.
124
128
125
-
-https://github.com/dotnet/corefx/issues/9124
129
+
*<https://github.com/dotnet/corefx/issues/9124>
126
130
127
131
## Universal C Runtime dependency on Windows
128
132
@@ -132,14 +136,14 @@ If the dependency is not present, applications will fail to run and errors will
132
136
```The program can't start because api-ms-win-crt-runtime-1-1-0.dll is missing from your computer. Try reinstalling the program to fix this problem.```
133
137
The UCRT dependency can be installed via Windows Update (name: "Update for Universal C Runtime in Windows", per <https://support.microsoft.com/kb/2999226>) and, as a recommended update, it will be installed automatically if the user uses the default settings for Windows Update. It can also be downloaded from [Microsoft Download Center](https://www.microsoft.com/download/details.aspx?id=48234).
134
138
135
-
-https://github.com/dotnet/corefx/issues/9083
136
-
-https://github.com/dotnet/corefx/issues/9389
139
+
*<https://github.com/dotnet/corefx/issues/9083>
140
+
*<https://github.com/dotnet/corefx/issues/9389>
137
141
138
142
## Exceptions due to user limits on OS X
139
143
140
144
When an app exceeds a user limit (ulimit) on OS X and an exception is thrown, the exception may be for an "internal error" (0x8007054F) rather than representing the actual error that occured. The workaround is to manually increase the ulimit.
141
145
142
-
-https://github.com/dotnet/coreclr/issues/5782
146
+
*<https://github.com/dotnet/coreclr/issues/5782>
143
147
144
148
## Unexpected OutOfMemoryExceptions on Unix
145
149
@@ -152,23 +156,26 @@ If an application experiences this problem and/or is expected to create a large
152
156
If an app has a static assembly reference to an assembly that is missing (this is not common), or if an app attempts to use Assembly.Load with an assembly that is missing and is using a handler for the Resolving event to load assemblies from custom locations, the Resolving event may return an invalid reference, which could result in a crash.
153
157
154
158
The workaround to address the above problem is one of the following:
155
-
- Load the assembly using `LoadFromAssemblyName` instead of Assembly.Load.
156
-
- Create a custom `AssemblyLoadContext` and override its Load method to resolve the assembly.
If global.json file has an UTF-16 BOM, dotnet commands will fail (due to not supporting a UTF-16 BOM) with the error:
168
+
163
169
```
164
170
A JSON parsing exception occurred: * Line 1, Column 2 Syntax error: Malformed token
165
171
```
172
+
166
173
This situation may arise when using tools that by default produce UTF-16 files with the BOM, such as PowerShell's Out-File cmdlet.
167
174
168
175
A workaround is to either remove the BOM or change the file's encoding. Visual Studio by default uses UTF-8. If you are using PowerShell, you can specify the encoding for the Out-File cmdlet with the -Encoding argument, `Out-File -Encoding utf8`.
## Line numbers missing from exception call stack on Windows 7
185
191
@@ -197,11 +203,12 @@ catch (Exception ex)
197
203
}
198
204
```
199
205
200
-
-https://github.com/dotnet/coreclr/issues/5828
206
+
*<https://github.com/dotnet/coreclr/issues/5828>
201
207
202
208
## Nano Server TP5
203
209
204
210
When working on TP5 of Nano server, users will encounter the following error if they try to run either portable or self-contained application:
211
+
205
212
```
206
213
Failed to load the dll from [C:\hwapp_s\bin\Debug\netcoreapp1.0\win10-x64\hostpolicy.dll], HRESULT: 0x8007007E
207
214
An error occurred while loading required library hostpolicy.dll from [C:\hwapp_s\bin\Debug\netcoreapp1.0\win10-x64]
@@ -224,14 +231,14 @@ Some libraries that P/Invoke into api-set's and target .NET Framework in our nug
224
231
Some of the api-sets are installed by the UCRT update: <https://support.microsoft.com/kb/2999226>
225
232
and <https://support.microsoft.com/kb/2790113> but these installations may not be a comprehensive fix.
226
233
227
-
- If you're using project.json you can just reference the Microsoft.NETCore.Windows.ApiSets package from your app and be sure to deploy for runtime win7-x86 or win7-x64, as appropriate.
234
+
* If you're using project.json you can just reference the Microsoft.NETCore.Windows.ApiSets package from your app and be sure to deploy for runtime win7-x86 or win7-x64, as appropriate.
228
235
229
-
- If you're using packages.config you'll need to manually download and extract the packages, as appropriate for the bitness of your app:
[Bash on Windows (WSL)](https://learn.microsoft.com/windows/wsl/about) is not yet supported by .NET Core. Attempting to run applications in the environment can experience intermittent crashes.
* Many types have been removed from the 1.3 surface area and moved to 1.4 which remains in pre-release. If you depend on these types update to the 1.4.0 pre-release package.
72
+
* Many types have been removed from the 1.3 surface area and moved to 1.4 which remains in pre-release. If you depend on these types update to the 1.4.0 pre-release package.
73
73
* System.Resources.ReaderWriter - types are now in separate assemblies System.Resources.Reader and System.Resources.Writer
74
74
* System.Runtime.CompilerServices.Unsafe - New static helper methods for dealing with unsafe pointers
75
75
* System.Security.Cryptography
76
-
* ECDsa supports creating keys for arbitrary named and explicit curves (Windows 10, OS X, Linux)
77
-
* ECDsa supports importing and exporting keys via the platform-independent ECParameters type
78
-
* EnvelopedCms is now supported via the System.Security.Cryptography.Pkcs package
76
+
* ECDsa supports creating keys for arbitrary named and explicit curves (Windows 10, OS X, Linux)
77
+
* ECDsa supports importing and exporting keys via the platform-independent ECParameters type
78
+
* EnvelopedCms is now supported via the System.Security.Cryptography.Pkcs package
Copy file name to clipboardExpand all lines: release-notes/1.0/1.0.10.md
+1-2
Original file line number
Diff line number
Diff line change
@@ -19,7 +19,7 @@ The [.NET Core Docker images](https://hub.docker.com/r/microsoft/dotnet/) have b
19
19
20
20
## Azure AppServices
21
21
22
-
Deployment of this update to Azure AppServices is in process. Because AppServices is a high availability service, the deployment is carfully staged across regions over a period of time. Deployment will begin in the West US 2 and North Central US regions with remaining regions following over a few days.
22
+
Deployment of this update to Azure AppServices is in process. Because AppServices is a high availability service, the deployment is carefully staged across regions over a period of time. Deployment will begin in the West US 2 and North Central US regions with remaining regions following over a few days.
23
23
24
24
## Known Issues
25
25
@@ -55,4 +55,3 @@ Microsoft is aware of a security vulnerability in the public versions of .NET Co
0 commit comments