July 25, 2020 - There's bugs in them releases
Last Week in .NET - Week Ending 25 July 2020 More on CVE-2020-1147 Do you deserialize XML to a DataSet? This is about CVE-2020-1147 . More details on CVE-2020-1147 -- that Remote Code Execution Vulnerability for .NET Core. Turns out it has to do with deserializing XML into a DataSet. If this is something you do; stop reading and go patch your application to .NET Core to 3.1.6, .NET Core 2.1.20; and .NET 5 Preview 7. Make sure to update the SDK running on your developer machines as well. There's ...
