These are the customer-reported issues addressed in 15.9.7:

• Crashes when expanding variables!.
• /DEBUG:FASTLINK + C7 + PCH crashes debugger.
• Native C++ application crashes because of stack corruption with VS 2017 15.9.2.
• Incorrect Release Mode code.
• Xamarin Unobserved Task Exception WebRequest.
• Link /SOURCELINK option seems to do nothing. This fixes Source Link for Managed C++ Debugging.
• Fixed an issue with corruption of AVX/MPX/AVX512 registers while Debugging.
• Update of Microsoft.VCLibs.140.00.UWPDestkop framework packages for C++ UWP DesktopBridge applications adding support for ARM64.
• Corrected incorrect version of VCToolsRedistVersion in Microsoft.VCToolsVersion.default.props.
• Corrected unsigned embedded dll for VC Redist installers.
• SSDT/Web Tools: We fixed an issue where SQL LocalDB was not installed on Polish, Turkish, and Czech locales.
• SSDT: We fixed an issue affecting SQL Server Analysis Services (Method not found exception when clicking on UI).
• SSDT: We fixed an accessibility issue which was causing the contents of a table not to be visible in the result window when using High-Contrast mode.

Security Advisory Notices

• WorkflowDesigner XOML deserialization allows code execution.
• .NET Framework and Visual Studio Spoofing Vulnerability. 

These are the customer-reported issues addressed in 15.7.1:

• This release includes a fix that reduces memory usage and GC pressure during solution load.

Microsoft Security Advisory for .NET Core Denial Of Service Vulnerability

CVE-2018-0765

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET Core and .NET native version 2.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

Microsoft is aware of a denial of service vulnerability that exists when .NET Framework and .NET Core improperly process XML documents. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Framework, .NET Core, or .NET native application.

The update addresses the vulnerability by correcting how .NET Framework, .NET Core, and .NET native applications handle XML document processing.

If your application is an ASP.NET Core application, developers are also advised to update to ASP.NET Core 2.0.8. 

Comprehensive Rust 🦀 

This is a three day Rust course developed by the Android team. The course covers the full spectrum of Rust, from basic syntax to advanced topics like generics and error handling. It also includes Android-specific content on the last day. 

We're pleased to announce the availability of a new major version, Rx v6.0.

• 🚀 First update in 2.5 years, with support for .NET 7.0, .NET 6.0, .NET Standard 2.0, .NET Framework 4.7.2
• ✂️ Support for trimming
• 🪲 Now using .snupkg for symbols
• 💥 New options for dealing with unhandled exceptions
• 🛠️ Modernised tooling and DevOps processes to reflect .NET as of H1 2023
• 💪 288 hours of effort went into this release.
• 🤞 Much more to come in v7.0 in H2 2023 

• DateTime.Now = Cannot provide the value: host value not found
• MSVC codegen error vector reverse_iterator x64 C++17 debug build
• C2440 error building atlenc.h with /permissive- in VS 16.4 Preview 1
• Last Visual Studio update broke NTLM authentication on Android (seems like new version of Momo would be a reason)
• Visual Studio 16.3.1 fails at compiling template code (e.g. from Basler Pylon SDK)
• Using TypeScript 3.7 for IntelliSense
• XCode 11.3 is too new all of a sudden after update to 8.4
• You uploaded an APK or Android App Bundle with invalid or missing signing information for some of its files. You need to create a valid signed APK or Android App Bundle.
• Unable to Run UWP project
• JavaScript IntelliSense not working after update 16.4.1
• Xib : Xcode is to new(rendering problem when using custom components)
• Storyboard error: 'Xcode is too new'
• Stability improvements for debugging watchOS applications.
• Adds Xcode 11.3 SDK support.
• Fixed crash when fstack-protector-strong flag is enabled.
• Fixed some inconsistent behavior with Debugger.

Security Advisory Notice

CVE-2020-0602 ASP.NET Core Denial of Service Vulnerability
CVE-2020-0603 ASP.NET Core Remote Code Execution Vulnerability
CVE-2020-0605 .NET Core Remote Code Execution Vulnerability
CVE-2020-0606 .NET Core Remote Code Execution Vulnerability

nuget ver 1.6

jque:
GET https://nuget.org/api/v2/Packages()?$orderby=DownloadCount%20desc,Id&$filter=startswith(tolower(Id),'jque')%20and%20IsLatestVersion&$skip=0&$top=90 HTTP/1.1
53691 bytes

signa:
GET https://nuget.org/api/v2/Packages()?$orderby=DownloadCount%20desc,Id&$filter=startswith(tolower(Id),'signa')%20and%20IsLatestVersion&$skip=0&$top=90 HTTP/1.1
11536 bytes

nuget ver 1.8

jque:
GET https://nuget.org/api/v2/Packages()?$orderby=DownloadCount%20desc,Id&$filter=startswith(tolower(Id),'jque')%20and%20IsLatestVersion&$skip=0&$top=90 HTTP/1.1
53694 bytes

signa:
GET https://nuget.org/api/v2/Packages()?$orderby=DownloadCount%20desc,Id&$filter=startswith(tolower(Id),'signa')%20and%20IsLatestVersion&$skip=0&$top=90 HTTP/1.1
11536 bytes

nuget ver 2.0

jque:
GET https://nuget.org/api/v2/package-ids?partialId=jque HTTP/1.0
598 bytes

signa:
GET https://nuget.org/api/v2/package-ids?partialId=signa HTTP/1.0
457 bytes

HTTP/1.1 200 OK
Cache-Control: private
Content-Type: application/json; charset=utf-8
Server: Microsoft-IIS/7.0
X-AspNetMvc-Version: 3.0
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Thu, 28 Jun 2012 07:23:06 GMT
Connection: close
Content-Length: 457

["SignalR","SignalR.Client","SignalR.Client.Silverlight","SignalR.Client.Silverlight5","SignalR.Client.WP7","SignalR.EventStream","SignalR.Hosting.AspNet","SignalR.Hosting.Common","SignalR.Hosting.Owin","SignalR.Hosting.Self","SignalR.Js","SignalR.MicroSliver","SignalR.Ninject","SignalR.RabbitMq","SignalR.Reactive","SignalR.Redis","SignalR.Sample","SignalR.Server","SignalR.StructureMap","SignalR.WebSockets","SignalR.WindowsAzureServiceBus","Signals.js"]

Windows Package Manager will support every Windows 10 version since the Fall Creators Update (1709)! The Windows Package Manager will be delivered with the Desktop App Installer when we ship version 1.0. If you are building software to run on Windows 10 you will have a simple way for your customers to install your software on billions of machines. 

Welcome to the November 2018 release of Visual Studio Code. There are a number of significant updates in this version that we hope you will like, some of the key highlights include:

• Multiline search improvements - Easily create multiline search patterns without using regex.
• Custom title bar on Linux - The custom title and menu bar is now the default on Linux.
• References view - Find All References view includes history of recent searches.
• Snippet comment variables - Snippet variables insert correct comment per language.
• JS/TS callback display - Now you can see the context of anonymous callbacks.
• JSDoc Markdown highlighting - Including syntax highlighting for Markdown code blocks in JSDoc.
• Simplified debug configuration - Better defaults and Quick Pick UI for initial launch configuration.
• Run tasks on folder open - Configure tasks to run when you first open a project folder.
• Choose extension version - Install earlier versions of Marketplace extensions. 

New Breaking Changes

Angular now compiles with Ivy by default. See Ivy compatibility section.

Typescript 3.4 and 3.5 are no longer supported. Please update to Typescript 3.6.

tslib is now listed as a peer dependency rather than a direct dependency. Users not using the CLI will need to manually install tslib via yarn add tslib or npm install tslib --save.