September patches for Azure DevOps Server and Team Foundation Server
Sep 10, 2019Erin Dormier

Summary
This post details the September 2019 security patches for Azure DevOps Server 2019 (Update 1 Patch 1 and 2019.0.1 Patch 3), TFS 2018 (Update 3.2 Patch 7 and Update 1.2 Patch 6), TFS 2017 (Update 3.1 Patch 8), and TFS 2015 (Update 4.2 Patch 3). It provides specific CVEs (CVE-2019-1305 for Repos XSS, CVE-2019-1306 for Wiki RCE), lists impacted versions, and includes detailed file version verification steps for each patch.