March patches for Azure DevOps Server and Team Foundation Server

Gloridel Morales

This month, we are releasing fixes for security vulnerabilities that impact our self-hosted product, Azure DevOps Server 2019, as well as the following older Team Foundation Server releases: TFS 2015, TFS 2017 and TFS 2018.

The following vulnerabilities will be fixed with this patch:

Azure DevOps Server 2019.1.1 Patch 1

If you have Azure DevOps Server 2019 Update 1.1, you should install Azure DevOps Server 2019 Update 1.1 Patch 1.

Verifying Installation

  • Option 1: Run devops2019.1.1patch1.exe CheckInstall, devops2019.1.1patch1.exe is the file that is downloaded from the link above. The output of the command will either say that the patch has been installed, or that is not installed.

  • Option 2: Check the version of the following file: [INSTALL_DIR]\Azure DevOps Server 2019\Application Tier\Web Services\bin\Microsoft.VisualStudio.Services.Feed.Server.dll. Azure DevOps Server 2019 is installed to c:\Program Files\Azure DevOps Server 2019 by default. After installing Azure DevOps Server 2019.1.1 Patch 1, the version will be 17.153.29904.2.

Azure DevOps Server 2019.0.1 Patch 5

If you have Azure DevOps Server 2019, you should first update to Azure DevOps Server 2019.0.1. Once on 2019.0.1, install Azure DevOps Server 2019.0.1 Patch 5.

Verifying Installation

  • Option 1: Run devops2019.0.1patch5.exe CheckInstall, devops2019.0.1patch5.exe is the file that is downloaded from the link above. The output of the command will either say that the patch has been installed, or that is not installed.

  • Option 2: Check the version of the following file: [INSTALL_DIR]\Application Tier\Web Services\bin\Microsoft.TeamFoundation.Framework.Server.dll. Azure DevOps Server 2019 is installed to c:\Program Files\Azure DevOps Server 2019 by default. After installing Azure DevOps Server 2019.0.1 Patch 5, the version will be 17.143.29825.2.

TFS 2018 Update 3.2 Patch 9

If you have TFS 2018 Update 2 or Update 3, you should first update to TFS 2018 Update 3.2. Once on Update 3.2, install TFS 2018 Update 3.2 Patch 9.

Verifying Installation

  • Option 1: Run tfs2018.3.2patch9.exe CheckInstall, tfs2018.3.2patch9.exe is the file that is downloaded from the link above. The output of the command will either say that the patch has been installed, or that is not installed.

  • Option 2: Check the version of the following file: [TFS_INSTALL_DIR]\Application Tier\Web Services\bin\Microsoft.TeamFoundation.WorkItemTracking.Web.dll. TFS 2018 is installed to c:\Program Files\Microsoft Team Foundation Server 2018 by default. After installing TFS 2018 Update 3.2 Patch 9, the version will be 16.131.29825.3.

TFS 2018 Update 1.2 Patch 8

If you have TFS 2018 RTW or Update 1, you should first update to TFS 2018 Update 1.2. Once on Update 1.2, install TFS 2018 Update 1.2 Patch 8.

Verifying Installation

  • Option 1: Run tfs2018.1.2patch8.exe CheckInstall, tfs2018.1.2patch8.exe is the file that is downloaded from the link above. The output of the command will either say that the patch has been installed, or that is not installed.

  • Option 2: Check the version of the following file: [TFS_INSTALL_DIR]\Application Tier\Web Services\bin\Microsoft.TeamFoundation.Server.WebAccess.Admin.dll. TFS 2018 is installed to c:\Program Files\Microsoft Team Foundation Server 2018 by default. After installing TFS 2018 Update 1.2 Patch 8, the version will be 16.122.29825.4.

TFS 2017 Update 3.1 Patch 10

If you have TFS 2017, you should first update to TFS 2017 Update 3.1. Once on Update 3.1, install TFS 2017 Update 3.1 Patch 10.

Verifying Installation

  • Option 1: Run tfs2017.3.1patch10.exe CheckInstall, tfs2017.3.1patch10.exe is the file that is downloaded from the link above. The output of the command will either say that the patch has been installed, or that is not installed.

  • Option 2: Check the version of the following file: [TFS_INSTALL_DIR]\Application Tier\Web Services\bin\Microsoft.TeamFoundation.Server.WebAccess.Admin.dll. TFS 2017 is installed to c:\Program Files\Microsoft Team Foundation Server 15.0 by default. After installing TFS 2017 Update 3.1 Patch 10, the version will be 15.117.29825.0.

TFS Update 2015.4.2 Patch 5

If you have TFS 2015, you should first update to TFS 2015 Update 4.2. Once on Update 4.2, install TFS 2015 Update 4.2 Patch 5.

Verifying Installation

  • Option 1: Run tfs2015.4.2patch11.exe CheckInstall, tfs2015.4.2patch11.exe is the file that is downloaded from the link above. The output of the command will either say that the patch has been installed, or that is not installed.

  • Option 2: Check the version of the following file: [TFS_INSTALL_DIR]\Application Tier\Web Services\bin\Microsoft.TeamFoundation.Framework.Server.dll. TFS 2015 is installed to c:\Program Files\Microsoft Team Foundation Server 14.0 by default. After installing TFS 2015 Update 4.2 Patch 5, the version will be 14.114.29825.0.

12 comments

Discussion is closed. Login to edit/delete existing comments.

  • nikita egorov 0

    Tell me, please, when will Azure DevOps Server 2020 be released?

    • Gloridel MoralesMicrosoft employee 0

      Hi Nikita, we plan to release Azure DevOps Server 2020 late this summer.

      • River Yang 0

        Which means the multi-stage-CI/CD will be available at the end of the summer this year, but not 2019. Is this correct?
        We’ve been waiting for whole year… + manually created A LOT projects in release with GUI…
        It will be a challenge to change all of them when new features become available.

        Hopefully there will be a better way.

  • Christian Hanna 0

    Hi,
    when downloading the tfs2018.3.2patch9.exe I’m missing all the meta data like “File version” “Product name” “Product version” “Digital signature”…
    Those meta data are available for devops2019.1.1patch1.exe
    Is there a special reason for that?
    Thx

    • Gloridel MoralesMicrosoft employee 0

      Hi Christian, I apologize for the inconvenience. I uploaded the signed version of the patch.

  • Heidrich, Jens 0

    Unfortunately the patch got stuck at detecting that the app pool is stopped, it continued anyways and broke our TFS.
    Error Message: Could not load file or assembly ‘SharpSvn.DLL’ or one of its dependencies.

    So we rolled back to a former machine backup.

    • Zaenglein, Markus 0

      @Jens, @Martin
      I have done a comparison between bevor and after Patching and discovered twice of ‘SharpSvn.DLL’ located directly in “bin” Folder, before only “bin\NativeBinaries\amd64”.

      So I deleted “bin\SharpSvn.dll” and the Web-Tier reloaded successfully.
      By now I haven’t encountered any issues, but I am not totally happy with that solution either.

      Can anyone tell me it’s safe?

  • Todd Powell 0

    I believe I downloaded the correct patch (for Azure DevOps Server 2019 Update 1.1), but when I try to run it I get the following. Not sure why it’s failing…

    C:\Installs>devops2019.1.1patch1.exe
    Microsoft (R) AzureDevOpsPatch – Azure DevOps Server update tool – version 17.153.29904.2
    Copyright (c) Microsoft Corporation. All rights reserved.

    Logging going to ‘C:\ProgramData\Microsoft\Azure DevOps\Server Configuration\Logs\Patch_2020-03-27_09-06-37.log’

    Checking SOFTWARE\Microsoft\TeamFoundationServer\17.0 to see if Azure DevOps Server is installed
    Found InstallPath: C:\Program Files\Azure DevOps Server 2019\
    Found InstallVersion: 17.153.29207.5
    Latest patch installed on machine is version 17.153.29226.8
    Patch 17.153.29904.2 is the same or later version as the patch installed on machine, patch can be installed.
    The Application Tier is configured.
    The Search Tier is not configured.
    The Proxy Tier is not configured.
    This patch does not apply to Azure DevOps Server version 17.153.29207.5.

    • Gloridel MoralesMicrosoft employee 0

      Hi Todd, it seems that the version you have installed is Azure DevOps 2019 Update 1. We release Update 1.1 in December. Please check out the Azure DevOps Server 2019 Update 1.1 RTW blog for details about installing Update 1.1 and then install the patch.

  • Sean Dobson 0

    Hi,

    I am struggling to install this patch on our Azure DevOps Server.

    I am getting the following error –
    Microsoft (R) AzureDevOpsPatch – Azure DevOps Server update tool – version 17.153.29904.2
    Copyright (c) Microsoft Corporation. All rights reserved.

    Logging going to ‘C:\ProgramData\Microsoft\Azure DevOps\Server Configuration\Logs\Patch_2020-04-07_10-03-41.log’

    Checking SOFTWARE\Microsoft\TeamFoundationServer\17.0 to see if Azure DevOps Server is installed
    Found InstallPath:
    Found InstallVersion: 17.153.29425.3
    Could not find Patch version in registry, no patches installed.
    The Application Tier is configured.
    The Search Tier is configured.
    The Proxy Tier is not configured.
    This patch does not apply to Azure DevOps Server version 17.153.29425.3.

    We are running 2019 1.1 as we have Collections running in SQL 2019, however when viewing the About the following is shown –

    About Azure DevOps Server
    Version Dev17.M153.4

    © Microsoft Corporation. All rights reserved.

    Thanks

Feedback usabilla icon