{"id":59217,"date":"2020-06-10T10:20:54","date_gmt":"2020-06-10T18:20:54","guid":{"rendered":"https:\/\/devblogs.microsoft.com\/devops\/?p=59217"},"modified":"2021-03-30T18:06:34","modified_gmt":"2021-03-31T02:06:34","slug":"june-patches-for-azure-devops-server-and-team-foundation-server","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/devops\/june-patches-for-azure-devops-server-and-team-foundation-server\/","title":{"rendered":"June patches for Azure DevOps Server and Team Foundation Server"},"content":{"rendered":"<p>This month, we are releasing fixes for security vulnerabilities that impact our self-hosted product, <a href=\"https:\/\/azure.microsoft.com\/services\/devops\/server\/\">Azure DevOps Server 2019<\/a>, as well as the following older Team Foundation Server releases: TFS 2017 and TFS 2018. The following vulnerabilities will be fixed with this patch:<\/p>\n<ul>\n<li><a href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1327\">CVE-2020-1327<\/a> &#8211; Ensure that Azure DevOps Server sanitizes user inputs.<\/li>\n<li>Adding support for SHA2 in SSH on Azure DevOps.<\/li>\n<\/ul>\n<h3>Azure DevOps Server 2019.1.1 Patch 3<\/h3>\n<p>If you have Azure DevOps Server 2019 Update 1.1, you should install <a href=\"https:\/\/aka.ms\/azdev2019.1patch\">Azure DevOps Server 2019 Update 1.1 Patch 3<\/a>.<\/p>\n<p><strong>Verifying Installation<\/strong><\/p>\n<ul>\n<li>\n<p>Option 1: Run <code>devops2019.1.1patch3.exe CheckInstall<\/code> from a command prompt. <code>devops2019.1.1patch3.exe<\/code> is the file that is downloaded from the link above. The output of the command will either say that the patch has been installed, or that is not installed.<\/p>\n<\/li>\n<li>\n<p>Option 2: Check the version of the following file: <code>[INSTALL_DIR]\\Azure DevOps Server 2019\\Application Tier\\Web Services\\bin\\Microsoft.VisualStudio.Services.Feed.Server.dll<\/code>. By default, Azure DevOps Server 2019 is installed to <code>c:\\Program Files\\Azure DevOps Server 2019<\/code>. After installing Azure DevOps Server 2019.1.1 Patch 3, the version will be 17.153.30128.8.<\/p>\n<\/li>\n<\/ul>\n<h3>Azure DevOps Server 2019.0.1 Patch 6<\/h3>\n<p>If you have Azure DevOps Server 2019, you should first update to <a href=\"https:\/\/go.microsoft.com\/fwlink\/?LinkId=2089023\">Azure DevOps Server 2019.0.1<\/a>. Once on 2019.0.1, install <a href=\"https:\/\/aka.ms\/azdev2019.0.1patch\">Azure DevOps Server 2019.0.1 Patch 6<\/a>.<\/p>\n<p><strong>Verifying Installation<\/strong><\/p>\n<ul>\n<li>\n<p>Option 1: Run <code>devops2019.0.1patch6.exe CheckInstall<\/code> from a command prompt. <code>devops2019.0.1patch6.exe<\/code> is the file that is downloaded from the link above. The output of the command will either say that the patch has been installed, or that is not installed.<\/p>\n<\/li>\n<li>\n<p>Option 2: Check the version of the following file: <code>[INSTALL_DIR]\\Application Tier\\Web Services\\bin\\Microsoft.TeamFoundation.Framework.Server.dll<\/code>. By default, Azure DevOps Server 2019 is installed to <code>c:\\Program Files\\Azure DevOps Server 2019<\/code>. After installing Azure DevOps Server 2019.0.1 Patch 6, the version will be 17.143.30129.2.<\/p>\n<\/li>\n<\/ul>\n<h3>TFS 2018 Update 3.2 Patch 11<\/h3>\n<p>If you have TFS 2018 Update 2 or Update 3, you should first update to <a href=\"https:\/\/go.microsoft.com\/fwlink\/?LinkId=2008534\">TFS 2018 Update 3.2<\/a>. Once on Update 3.2, install <a href=\"https:\/\/aka.ms\/tfs2018.3.2patch11\">TFS 2018 Update 3.2 Patch 11<\/a>.<\/p>\n<p><strong>Verifying Installation<\/strong><\/p>\n<ul>\n<li>\n<p>Option 1: Run <code>tfs2018.3.2patch11.exe CheckInstall<\/code> from a command prompt. <code>tfs2018.3.2patch11.exe<\/code> is the file that is downloaded from the link above. The output of the command will either say that the patch has been installed, or that is not installed.<\/p>\n<\/li>\n<li>\n<p>Option 2: Check the version of the following file: <code>[TFS_INSTALL_DIR]\\Application Tier\\Web Services\\bin\\Microsoft.TeamFoundation.WorkItemTracking.Web.dll<\/code>. By default, TFS 2018 is installed to <code>c:\\Program Files\\Microsoft Team Foundation Server 2018<\/code>. After installing TFS 2018 Update 3.2 Patch 11, the version will be 16.131.30128.10.<\/p>\n<\/li>\n<\/ul>\n<h3>TFS 2017 Update 3.1 Patch 11<\/h3>\n<p>If you have TFS 2017, you should first update to <a href=\"https:\/\/go.microsoft.com\/fwlink\/?LinkId=857134\">TFS 2017 Update 3.1<\/a>. Once on Update 3.1, install <a href=\"https:\/\/aka.ms\/tfs2017.3.1patch\">TFS 2017 Update 3.1 Patch 11<\/a>.<\/p>\n<p><strong>Verifying Installation<\/strong><\/p>\n<ul>\n<li>\n<p>Option 1: Run <code>tfs2017.3.1patch11.exe CheckInstall<\/code> from a command prompt. <code>tfs2017.3.1patch11.exe<\/code> is the file that is downloaded from the link above. The output of the command will either say that the patch has been installed, or that is not installed.<\/p>\n<\/li>\n<li>\n<p>Option 2: Check the version of the following file: <code>[TFS_INSTALL_DIR]\\Application Tier\\Web Services\\bin\\Microsoft.TeamFoundation.Server.WebAccess.Admin.dll<\/code>. TFS 2017 is installed to <code>c:\\Program Files\\Microsoft Team Foundation Server 15.0<\/code> by default. After installing TFS 2017 Update 3.1 Patch 11, the version will be 15.117.30128.0.<\/p>\n<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>This month, we are releasing fixes for security vulnerabilities that impact our self-hosted product, Azure DevOps Server 2019, as well as the following older Team Foundation Server releases: TFS 2017 and TFS 2018.<\/p>\n","protected":false},"author":1006,"featured_media":56758,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[253,1],"tags":[],"class_list":["post-59217","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-azure-devops-server","category-devops"],"acf":[],"blog_post_summary":"<p>This month, we are releasing fixes for security vulnerabilities that impact our self-hosted product, Azure DevOps Server 2019, as well as the following older Team Foundation Server releases: TFS 2017 and TFS 2018.<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/posts\/59217","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/users\/1006"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/comments?post=59217"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/posts\/59217\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/media\/56758"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/media?parent=59217"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/categories?post=59217"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/tags?post=59217"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}