This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(51.2, 20%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMI%3C/text%3E%3C/svg%3E)
Hi
One of my developer friends wants to develop asp.net systems and run on linux with the Kestrel web server, but I am worried if any vulnerabilities are disclosed, who will give an update? Microsoft? As it was developed and released by Microsoft(https://stackify.com/what-is-kestrel-web-server/).
Can anyone clarify for me about the security and patch update? Also, how long it will continue to support.
Thanks in advance.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(211.20000000000002, 61%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBS%3C/text%3E%3C/svg%3E)
Kestrel is part of the .net core runtime and no longer a separate repo. It’s patched when you install a .net runtime patch.
Asp.net core follows the node model. There a long term support (LTS) releases good for a little over 2 years, and minor release good for 3 months after the next release. There is a new version every year. 3.1 is the current LTS, and 6.0 will be the next due soon.