Azure DevOps Server 2022 - Scrum Bug

Azure DevOps Server 2022

A collection of 5 posts

Cow walking through an Indian Marketplace

Azure DevOps Featured

Security state of the Azure DevOps Marketplace

This report focusses on the Azure Pipelines extensions in the Marketplace. At the time of compiling the report there are 1460 extensions in the "Azure Pipelines" category. More than 500 have one or more vulnerabilities or vulnerable dependencies.

Definitive solution for log4shell in Azure DevOps Server Search

Azure DevOps Server 2022

Definitive solution for log4shell in Azure DevOps Server Search

Last year around this time the log4shell bug in log4j was made public. Older versions of Team Foundation Server and Azure DevOps Server ship with Elastic Search to power its advanced search features. The version that ships with these versions is quite old and was never truly fixed, only patched.

Azure DevOps 2020 and 2019 (and 2018) patch for log4j vulnerability

Azure DevOps Featured

Azure DevOps 2020 and 2019 (and 2018) patch for log4j vulnerability

Azure DevOps can be configured with advanced Code Search. That feature relies on Elastic Search. Depending on the age of your server, JVM version and Elastic Search version this may result in your setup being vulnerable to CVE-2021-44228.

Package Feeds consuming most data in Azure DevOps Server

Package Feeds consuming most data in Azure DevOps Server

The Collection database of a client saw some explosive growth and I was asked to figure out where the storage had gone to.

Connect any version of Visual Studio to Azure DevOps or Azure DevOps Server

Azure DevOps Featured

Connect any version of Visual Studio to Azure DevOps or Azure DevOps Server

Visual Studio has been around for a long time and there are still people developing in Visual Basic 6 or Visual Studio 2008. Even if you're using a more recent IDE, you could need one or more hotfixes and/or service packs.