August patches for Azure DevOps Server
Aug 8, 2023Gloridel Morales

Summary
This post details the August patches for Azure DevOps Server across multiple versions (2022.0.1, 2020.1.2, 2020.0.2, 2019.1.2, 2019.0.1). Key technical updates include the resolution of CVE-2023-36869 (Azure DevOps Server Spoofing Vulnerability) in all patched versions. For Azure DevOps Server 2020.1.2 and 2019.1.2, the SSH service has been updated to support SHA2-256 and SHA2-512, which is a continuation of the effort to remove weaker encryption methods like RSA. Other fixes include addressing issues with relative links in markdown files, comment navigation on commit pages, performance issues with application tier startup due to a large number of tags, and bugs related to Analysis Owner identity display and CronScheduleJobExtension.
More from the NTLM Removal in Git (libcurl) for Azure DevOps Server trail
- Upcoming Change: NTLM Removal in Git (libcurl) – Impact to Azure DevOps Server Customers
- End of Support for Microsoft products reliant on older Azure DevOps and Visual Studio authentication
- End of SSH-RSA support for Azure Repos
- Reconfigure Azure DevOps Server to use Kerberos instead of NTLM
- Deprecating weak cryptographic standards (TLS 1.0 and 1.1) in Azure DevOps Services