Merge pull request #980 from zamont/addreleasenotesuwp547

Update release notes for the UWP 5.x releases for March 2019
pull/985/head
Holly Muenchow 2019-03-13 15:16:50 -07:00 committed by GitHub
commit c96c4783d8
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 10 additions and 1 deletions

View File

@ -4,6 +4,9 @@ You can see what was included in each .NET Native 1.4 ([Microsoft.NETCore.Univer
When using Visual Studio these packages require Visual Studio 2015 Update 3 or later.
### 5.2.9 (March 13th, 2019)
- Fix for a domain spoofing vulnerability which causes the meaning of a URI to change when International Domain Name encoding is applied. An attacker who successfully exploited the vulnerability could redirect a URI. (https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0657)
### 5.2.6 (July 27th, 2018)
- Fixed CVE-2018-8356: Security Feature Bypass in X509 Certificate Validation: https://github.com/dotnet/announcements/issues/73

View File

@ -4,6 +4,9 @@ You can see what was included in each .NET Native 1.6 ([Microsoft.NETCore.Univer
When using Visual Studio these packages require Visual Studio 2017 or later.
### UWP 5.3.10 (March 13th, 2019)
- Fix for a domain spoofing vulnerability which causes the meaning of a URI to change when International Domain Name encoding is applied. An attacker who successfully exploited the vulnerability could redirect a URI. (https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0657)
### UWP 5.3.7 (July 27th, 2018)
- Fixed CVE-2018-8356: Security Feature Bypass in X509 Certificate Validation: https://github.com/dotnet/announcements/issues/73

View File

@ -3,6 +3,9 @@ You can see what was included in each .NET Native 1.7 ([Microsoft.NETCore.Univer
When using Visual Studio these packages require Visual Studio 2017 or later.
### UWP 5.4.7 | UWP 6.0.15 | UWP 6.1.12 | UWP 6.2.7 (.NET native tools 1.7.6) (March 13th, 2019)
- Fix for a domain spoofing vulnerability which causes the meaning of a URI to change when International Domain Name encoding is applied. An attacker who successfully exploited the vulnerability could redirect a URI. (https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0657)
### UWP 6.1.7 (.NET native tools 1.7.3) (July 27th, 2018)
- Fixed CVE-2018-8356: Security Feature Bypass in X509 Certificate Validation: https://github.com/dotnet/announcements/issues/73
@ -16,7 +19,7 @@ When using Visual Studio these packages require Visual Studio 2017 or later.
- Fixed an unhandled exception when ClientWebSocket loses connection to server. [518456]
- Fixed a regression in the 1.7 toolchain causing winmd file corruption when the file stream is left open. [496929]
### UWP 5.4.4 (.NET native tools 1.7.3) (July 27th, 2018)
### UWP 5.4.4 (.NET native tools 1.7.1) (July 27th, 2018)
- Fixed CVE-2018-8356: Security Feature Bypass in X509 Certificate Validation: https://github.com/dotnet/announcements/issues/73
### UWP 5.4.2 (.NET native tools 1.7.1) (January 9th, 2018)