April Security Release: Patches available for Azure DevOps Server 2019, TFS 2018.3.2, TFS 2018.1.2, TFS 2017.3.1, and the release of TFS 2015.4.2

This post announces the April 2019 security release for Azure DevOps Server 2019, TFS 2018 (Update 3.2 and Update 1.2), TFS 2017 (Update 3.1), and TFS 2015 (Update 4.2). It details specific CVEs addressed, including spoofing, remote code execution, XSS, and HTML injection vulnerabilities found through the Azure DevOps Bounty Program. For each affected version, it provides the specific patch to install, the file to check for verifying installation, and the resulting version number.