{"id":66386,"date":"2023-02-14T10:53:32","date_gmt":"2023-02-14T18:53:32","guid":{"rendered":"https:\/\/devblogs.microsoft.com\/devops\/?p=66386"},"modified":"2023-03-22T12:10:50","modified_gmt":"2023-03-22T20:10:50","slug":"february-patches-for-azure-devops-server-2","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/devops\/february-patches-for-azure-devops-server-2\/","title":{"rendered":"Updated: February patches for Azure DevOps Server"},"content":{"rendered":"<p><strong>2\/17 Update:<\/strong> After installing Azure DevOps Server 2020.1.2 Patch 5 notifications were not getting delivered. To address this issue, we are re-releasing the patch. If you installed Patch 5, you should download and re-install the patch from the link provided in the instructions below.<\/p>\n<p>This month, we are releasing fixes that impact our self-hosted product, <a href=\"https:\/\/azure.microsoft.com\/services\/devops\/server\/\">Azure DevOps Server<\/a>.<\/p>\n<p>The following will be fixed with this patch:<\/p>\n<ul>\n<li><a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2023-21564\">CVE-2023-21564<\/a>: Azure DevOps Server Cross-Site Scripting Vulnerability<\/li>\n<li><a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2023-21553\">CVE-2023-21553<\/a>: Azure DevOps Server Remote Code Execution Vulnerability<\/li>\n<li>Updated MSBuild and VSBuild tasks to support Visual Studio 2022.<\/li>\n<li>Update methodology of loading reauthentication to prevent XSS attack vector.<\/li>\n<li>Azure DevOps Server 2022 Proxy reports the following error: VS800069: This service is only available in on-premises Azure DevOps.<\/li>\n<li>Fixed shelvesets accessibility issue via web UI.<\/li>\n<\/ul>\n<h3>Azure DevOps Server 2022 Patch 2<\/h3>\n<p>If you have Azure DevOps Server 2022, you should install <a href=\"https:\/\/aka.ms\/azdev2022patch2\">Azure DevOps Server 2022 Patch 2<\/a>. Check out the <a href=\"https:\/\/learn.microsoft.com\/azure\/devops\/server\/release-notes\/azuredevops2022?view=azure-devops#azure-devops-server-2022-patch-2-release-date-february-14-2023\">release notes<\/a> for more details.<\/p>\n<p><strong>Verifying Installation<\/strong><\/p>\n<ul>\n<li>Run <code>devops2022patch2.exe CheckInstall<\/code>, <code>devops2022patch2.exe<\/code> is the file that is downloaded from the link above. The output of the command will either say that the patch has been installed, or that it is not installed.<\/li>\n<\/ul>\n<h3>Azure DevOps Server 2020.1.2 Patch 5<\/h3>\n<p>If you have Azure DevOps Server 2020.1.1, you should first update to <a href=\"https:\/\/go.microsoft.com\/fwlink\/?LinkId=2195318\">Azure DevOps Server 2020.1.2<\/a>. Once on 2020.1.2, install <a href=\"https:\/\/aka.ms\/azdev2020.1.2patch5\">Azure DevOps Server 2020.1.2 Patch 5<\/a>. Check out the <a href=\"https:\/\/learn.microsoft.com\/azure\/devops\/server\/release-notes\/azuredevops2020u1?view=azure-#azure-devops-server-2020-update-12-patch-5-release-date-february-14-2023\">release notes<\/a> for more details.<\/p>\n<p><strong>Verifying Installation<\/strong><\/p>\n<ul>\n<li>Run <code>devops2020.1.2patch5.exe CheckInstall<\/code>, <code>devops2020.1.2patch5.exe<\/code> is the file that is downloaded from the link above. The output of the command will either say that the patch has been installed, or that it is not installed.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>2\/17 Update: After installing Azure DevOps Server 2020.1.2 Patch 5 notifications were not getting delivered. To address this issue, we are re-releasing the patch. If you installed Patch 5, you should download and re-install the patch from the link provided in the instructions below. This month, we are releasing fixes that impact our self-hosted product, [&hellip;]<\/p>\n","protected":false},"author":1006,"featured_media":54061,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[253,7256],"tags":[],"class_list":["post-66386","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-azure-devops-server","category-patches"],"acf":[],"blog_post_summary":"<p>2\/17 Update: After installing Azure DevOps Server 2020.1.2 Patch 5 notifications were not getting delivered. To address this issue, we are re-releasing the patch. If you installed Patch 5, you should download and re-install the patch from the link provided in the instructions below. This month, we are releasing fixes that impact our self-hosted product, [&hellip;]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/posts\/66386","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/users\/1006"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/comments?post=66386"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/posts\/66386\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/media\/54061"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/media?parent=66386"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/categories?post=66386"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/devops\/wp-json\/wp\/v2\/tags?post=66386"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}