Table of Contents

Version 3.119.3

Security & stability release · Preview only · NuGet · GitHub Release

Highlights

This release extends Spectre mitigations to Linux native builds, updates four native dependencies to their latest versions, and fixes two crashes — an AoT failure when IlcDisableReflection=true and a Linux ARM64 crash caused by missing fontconfig in the cross-compile sysroot. Community contributor ❤️ @sshumakov drove the Spectre hardening across both Windows and Linux.

Breaking Changes

None in this release.

Security

  • Spectre mitigation for Linux — Enables the Spectre mitigation compiler flag for libSkiaSharp.so on Linux builds. ❤️ @sshumakov (#3502)
  • Spectre mitigation for Windows — Enables /Qspectre for libSkiaSharp.dll on Windows builds. ❤️ @sshumakov (#3496)

Bug Fixes

  • Fixed AoT crash when IlcDisableReflection=true — Resolved a crash that occurred in NativeAOT-compiled apps with reflection disabled. (#3485)
  • Fixed Linux ARM64 crash from missing fontconfig — Added fontconfig to the cross-compile sysroot so Linux ARM64 builds no longer crash at startup. (#3494)

Dependencies

  • libpng → 1.6.54 — Picks up upstream bug fixes and security patches. (#3452)
  • libexpat → 2.7.3 — Updated from 2.6.4 with multiple upstream CVE fixes. (#3458)
  • brotli → 1.2.0 — Updated to the latest upstream release. (#3469)
  • libwebp → 1.6.0 — Updated to the latest upstream release. (#3478)
  • Removed unused dependencies — Cleaned up unused native dependencies across platforms. (#3463)

Platform Support

Platform What's New
🪟 Windows Spectre mitigation
🐧 Linux Spectre mitigation, ARM64 fontconfig crash fix
🎨 Core API AoT IlcDisableReflection crash fix
📦 General libpng 1.6.54, libexpat 2.7.3, brotli 1.2.0, libwebp 1.6.0

Community Contributors ❤️

Contributor What They Did
@sshumakov Added Spectre mitigations for both Windows and Linux native libraries

Preview 1 (February 11, 2026)

Security hardening with Spectre mitigations for Windows and Linux, four native dependency updates, and two crash fixes (AoT and Linux ARM64).

Full Changelog

Edit this page