WiX v3.10.2 released

An unpleasant first: We had to release a security update for the WiX Toolset. Here’s the recipe:

That’s it, really. Bake and serve and suddenly every executable is potentially a carrier for malware.

WiX v3.10.2 contains mitigations for Burn that avoid the vulnerability. If you ship bundles, you really really need to upgrade to v3.10.2 so you can ship safe bundles.

More details about the release are available in the Setup Matters blog post I wrote.

Download WiX v3.10.2 here.

WiX Toolset v3.10.1 Released

WiX v3.10.1 is a maintenance release of WiX v3.10 with the following important fixes:

Download it here.

As you can see, we had a couple of problems with Windows XP support. Though I ran a few manual tests on XP during and at the end of v3.10, that wasn’t sufficient to uncover the bugs. Next time, I’ll put out an explicit call for testing support from folks still supporting Windows XP and Windows Server 2003. We’re going to need your help to keep bitrot at bay!

Here’s what Rob had to say about this release.

WiX Toolset v3.10 released

Update: WiX v3.10.1 has been released.

As planned, WiX v3.10 was released on (American) Labor Day. The RTM build is v3.10.0.2103.

Download it here.

Update: Rob also had words about WiX v3.10.

Contributors

Highlights

Burn and WixStdBA

Core toolset

Extensions

Libraries

Infrastructure

  • @rseanhall updated the build to use the latest Sandcastle help-build tool and to acquire it via NuGet. [issue]
  • @robmen added an error message that detects when strong-name verification skipping hasn’t been set up for a developer build. [pull request]
  • @rseanhall made maintaining history easier by merging individual history messages into the master history.md. [pull request] [pull request]
  • @robmen fixed an error message. [issue] [pull request]
  • @heaths added support for the Windows 10 SDK. [pull request]

And the rest

WiX v3.10 Release Candidate 2 build available

After shipping “the” WiX v3.10 release candidate back in June, we finished off a couple of features that required us to wait for Visual Studio 2015 RTM to be released. We also took a couple of trivial, small, and minor changes. So it’s time for another release candidate, to make sure WiX v3.10 is ready to ship.

Download it here.

If you find a bug, please report it as soon as possible.

Update: Here’s what Rob has to say about RC2.

Here’s what happened since RC1:

WiX v3.10 Release Candidate build available

The WiX v3.10 Release Candidate build is now available! The focus of the WiX v3.10 release is supporting Visual Studio 2015 and Windows 10. As anticipated — almost like it was intentional — we’ve also fixed a number of bugs and implemented a small number of small features, but nothing big or risky.

We’re now ramping up the bug bar on WiX v3.10. That means bugs have to be really serious to get approved for v3.10. Don’t let that stop you from reporting bugs–we have plenty of numbers left in the v3.x series.

The plan for the RTM release of WiX v3.10 is to wait. Windows 10 ships 29-July and presumably Visual Studio 2015 ships shortly thereafter. As soon as Visual Studio 2015 RTM ships, we’ll put out a call for eyes to take a look and help verify that WiX continues to work with the RTM bits as expected. We’ll allow a short time to get feedback, then declare RTM.

Please download the RC release and help us get v3.10 across the finish line!