This month, we are releasing fixes for security vulnerabilities that impact TFS 2015, TFS 2017, TFS 2018, and Azure DevOps Server 2019. CVE-2019-1305: cross site scripting (XSS) vulnerability in Repos CVE-2019-1306: remote code execution vulnerability in Wiki Here are the versions impacted: Azure DevOps Server 2019 Update 1 Patch 1 If you ha...

Today, we are announcing the availability of Azure DevOps Server 2019 Update 1. Azure DevOps Server brings the Azure DevOps experience to self-hosted environments. Customers with strict requirements for compliance can run Azure DevOps Server on-premises and have full control over the underlying infrastructure. This release includes a ton of new fe...

For the August release, we are releasing patches for Azure DevOps Server 2019.0.1, TFS 2018 Update 3.2, and TFS 2017 Update 3.1. This month, there are no security fixes; these patches include functional changes. Azure DevOps Server 2019.0.1: We added information to service connections to clarify that they are authorized for all pipelines by defaul...

Today, we are announcing the release of Azure DevOps Server 2019 Update 1 RC2. This is our last planned prerelease before our final release of Azure DevOps Server 2019 Update 1. This second release candidate includes some bug fixes since RC1. You can upgrade from Azure DevOps Server 2019 Update 1 RC1 or previous versions of Azure DevOps Server or T...

For the July security release, we are releasing fixes for vulnerabilities that impact Azure DevOps Server 2019, TFS 2018, TFS 2017, TFS 2015, TFS 2013, TFS 2012, and TFS 2010. Thanks to everyone who has been participating in our Azure DevOps Bounty Program. CVE-2019-1072: remote code execution vulnerability in work item tracking CVE-2019-1076: cr...

Today, we are announcing the release of Azure DevOps Server 2019 Update 1 RC1. Azure DevOps Server, formerly known as Team Foundation Server or TFS, is a self-hosted package that customers can run in their own environment, on-premises, or inside VMs on the cloud and includes all of the Azure DevOps services: Pipelines, Boards, Repos, Artifacts and ...

Today, we are releasing Azure DevOps Server 2019.0.1 RTW. Azure DevOps Server (formerly Team Foundation Server) brings the Azure DevOps experience to self-hosted environments. Customers with strict requirements for compliance can run Azure DevOps Server on-premises and have full control over the underlying infrastructure. This release includes bug...

For the May security release, we are releasing fixes for vulnerabilities that impact Azure DevOps Server 2019, TFS 2018, TFS 2017, and TFS 2015. Thanks to everyone who has been participating in our Azure DevOps Bounty Program. We have now added the ability to patch TFS 2015, so customers do not need to install a full release to get the security fi...

Today, we are releasing Azure DevOps Server 2019.0.1 RC. This is a go-live release, meaning it is supported on production instances, and you will be able to upgrade to our final release. Azure DevOps Server 2019.0.1 includes bug fixes for Azure DevOps Server 2019. You can find the details of the fixes in our release notes. You can upgrade to Azure...

For the April security release, we are releasing fixes for vulnerabilities that impact Azure DevOps Server 2019, TFS 2018, TFS 2017, and TFS 2015. These vulnerabilities were found through our Azure DevOps Bounty Program. Thanks to everyone who has been participating in this program. CVE-2019-0857: spoofing vulnerability in the Wiki CVE-2019-0866:...