Skip to content

Commit

Permalink
Notes for 5.0.0-rc.2, v4.0.5, and v3.14.1.
Browse files Browse the repository at this point in the history
  • Loading branch information
barnson committed Mar 23, 2024
1 parent cd1cfac commit 62448fa
Show file tree
Hide file tree
Showing 3 changed files with 19 additions and 5 deletions.
17 changes: 14 additions & 3 deletions src/Docusaurus/docs/releasenotes.md
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,14 @@ WiX v5 marks the first of our annual releases. We intentionally made WiX v5 high

[Read more about them in `WiX v5 for WiX v4 users`.](fivefour/index.md)

WiX v5.0.0-rc.1 was released on 8-March-2024. WiX v5.0.0 is scheduled for release on 5-April-2024, the 20th anniversary of the first open-source release of WiX.

### WiX v5 releases

WiX v5.0.0 is scheduled for release on 5-April-2024, the 20th anniversary of the first open-source release of WiX.

- WiX v5.0.0-rc.2 was released on 22-March-2024. It contains [fixes for a small number of bugs](https://github.com/wixtoolset/issues/milestone/24?closed=1) and for security vulnerabilities that FireGiant also fixed in WiX v3.14.1 and WiX v4.0.5. For details, see [the FireGiant blog post](https://www.firegiant.com/blog/2024/3/22/wix-security-releases-available-redux/), [the first security advisory](https://github.com/wixtoolset/issues/security/advisories/GHSA-jx4p-m4wm-vvjg), and [the second security advisory](https://github.com/wixtoolset/issues/security/advisories/GHSA-rf39-3f98-xr7r).
- WiX v5.0.0-rc.1 was released on 8-March-2024.



### Contributors
Expand All @@ -44,9 +51,9 @@ Here are the people who contributed to WiX v5:
- [@mwileczka](https://github.com/wixtoolset/Harvesters/commits?author=mwileczka)


## WiX v4.0.4 {#v4}
## WiX v4.0.5 {#v4}

WiX v4.0.4 mitigates a Windows DLL redirection vulnerability in Burn. All versions of WiX are affected by this vulnerability. We recommending upgrading to this version as soon as possible.
WiX v4.0.5, released on Friday, 22-Mar-2024, contains fixes for two security vulnerabilities. All versions of WiX are affected by this vulnerability. We recommending upgrading to this version as soon as possible. For details, see [the FireGiant blog post](https://www.firegiant.com/blog/2024/3/22/wix-security-releases-available-redux/), [the first security advisory](https://github.com/wixtoolset/issues/security/advisories/GHSA-jx4p-m4wm-vvjg), and [the second security advisory](https://github.com/wixtoolset/issues/security/advisories/GHSA-rf39-3f98-xr7r).


### Platforms
Expand Down Expand Up @@ -139,6 +146,10 @@ wix --version

## Previous WiX v4 releases

> WiX v4.0.4 was released Tuesday, 6-Feb-2024
WiX v4.0.4 mitigates a Windows DLL redirection vulnerability in Burn. All versions of WiX are affected by this vulnerability. We recommending upgrading to this (or a later) version as soon as possible.

> WiX v4.0.3 was released Monday, 13-Nov-2023
WiX v4.0.3 is a maintenance release of WiX v4 that [fixes a small number of even smaller bugs](https://github.com/wixtoolset/issues/milestone/23?closed=1).
Expand Down
4 changes: 2 additions & 2 deletions src/Docusaurus/docs/tools/wixext/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -63,8 +63,8 @@ You might need to specify a version for WiX extension packages (such as when the

```xml
<ItemGroup>
<PackageReference Include="WixToolset.Bal.wixext" Version="5.0.0-preview.1" />
<PackageReference Include="WixToolset.Util.wixext" Version="5.0.0-preview.1" />
<PackageReference Include="WixToolset.Bal.wixext" Version="5.0.0-preview.2" />
<PackageReference Include="WixToolset.Util.wixext" Version="5.0.0-preview.2" />
</ItemGroup>
```

Expand Down
Original file line number Diff line number Diff line change
@@ -0,0 +1,3 @@
# WiX Toolset security releases available

FireGiant has fixed two security vulnerabilities in WiX v3.14.1, WiX v4.0.5, and WiX v5.0.0-rc.2. For details, see [the FireGiant blog post](https://www.firegiant.com/blog/2024/3/22/wix-security-releases-available-redux/), [the first security advisory](https://github.com/wixtoolset/issues/security/advisories/GHSA-jx4p-m4wm-vvjg), and [the second security advisory](https://github.com/wixtoolset/issues/security/advisories/GHSA-rf39-3f98-xr7r).

0 comments on commit 62448fa

Please sign in to comment.