May Security Release: Patches available for Azure DevOps Server 2019, TFS 2018.3.2, TFS 2018.1.2, TFS 2017.3.1, and TFS 2015.4.2
May 14, 2019Erin Dormier

Summary
This post announces the May 2019 security release for Azure DevOps Server and Team Foundation Server, providing patches for Azure DevOps Server 2019, TFS 2018 (Update 3.2 and 1.2), TFS 2017 (Update 3.1), and TFS 2015 (Update 4.2). It details specific CVEs addressed (CVE-2019-0872, CVE-2019-0971, CVE-2019-0979) related to vulnerabilities in Test Plans, the Repos API, and the User hub. Installation verification steps, including file versions, are provided for each patched version.