Updated: Azure DevOps Server and Team Foundation Server patches
Jan 26, 2022Gloridel Morales

Summary
This patch cycle addresses an Elasticsearch vulnerability by upgrading search plugins to use log4j core version 2.17.1 and removing the jndilookup class from log4j binaries. It also fixes issues with email notifications for @mentions, preferred email address updates, and the Project Summary page header, and improves Active Directory user sync. Detailed instructions are provided for patching Azure DevOps Server 2020.1.1, 2020.0.1, 2019.1.1, 2019.0.1, and TFS 2018 Update 3.2, including verification steps and specific guidance for Elasticsearch installations on separate machines.