February patches for Azure DevOps Server
Feb 13, 2024Gloridel Morales
Summary
This post details the February patches for Azure DevOps Server, including fixes for a remote code execution vulnerability (CVE-2024-20667) and a bug where the disk space used by the proxy cache folder was calculated incorrectly and not cleaned up. It also provides instructions for verifying the installation of these patches.
More from the Azure Pipelines Supply Chain Security trail
- Axios npm Supply Chain Compromise – Guidance for Azure Pipelines Customers
- Automate your open-source dependency scanning with Advanced Security
- One Pipeline to Rule Them All: Ensuring CodeQL Scanning Results and Dependency Scanning Results Go to the Intended Repository
- April Patches for Azure DevOps Server and Team Foundation Server
- Introducing Pull Request Annotation for CodeQL and Dependency Scanning in GitHub Advanced Security for Azure DevOps