July Security Release: Patches available for Azure DevOps Server and Team Foundation Server

This post announces the July 2019 security release for Azure DevOps Server and Team Foundation Server, providing patches for vulnerabilities including remote code execution in work item tracking (CVE-2019-1072) and cross-site scripting in Pull Requests (CVE-2019-1076). It also addresses a functional bug fix for incorrect email notification dates. Detailed installation instructions and version verification steps are provided for Azure DevOps Server 2019.0.1, TFS 2018 (Update 3.2, Update 1.2), TFS 2017 Update 3.1, TFS 2015 Update 4.2, TFS 2013 Update 5, TFS 2012 Update 4, and TFS 2010 SP1.