[wix-users] WiX v3.10.2 Important Security Fix Release [P]

[Steven Ogilvie]

Classification: Public
Could you label the 3.10.2 source, currently it is in Develop and should be labeled in Master?

Thanks,

Steve




This message has been marked as Public by Steven Ogilvie on January-22-16 9:31:49 AM.

The above classification labels were added to the message by TITUS Message Classification. 
For more information visit www.titus.com.

-----Original Message-----
From: wix-users [mailto:wix-users-bounces at lists.wixtoolset.org] On Behalf Of Rob Mensching
Sent: January-21-16 7:55 PM
To: WiX Toolset Users Mailing List <wix-users at lists.wixtoolset.org>
Subject: Re: [wix-users] WiX v3.10.2 Important Security Fix Releas

No, BootstrapperApplications work fine on Win7 and Windows 2008R2 and all the other supported platforms.

What doesn't work is WinForms in some (at the moment, unknown) version of NETFX (Andreas will hopefully provide more specifics) on Windows 7 and Windows 2008R2 due to an issue in the way WinForms uses GDI+ when the process modifies the DLL search order to remove the application folder (as Burn does to avoid being DLL Hijacked).

Hopefully the WinForms issue is already fixed in a supported NETFX (v4.5.2, v4.6, or v4.6.1). 

_____________________________________________________________
 Short replies here. Complete answers over there: http://www.firegiant.com/


-----Original Message-----
From: wix-users [mailto:wix-users-bounces at lists.wixtoolset.org] On Behalf Of Steven Ogilvie
Sent: Thursday, January 21, 2016 4:44 PM
To: WiX Toolset Users Mailing List <wix-users at lists.wixtoolset.org>
Subject: Re: [wix-users] WiX v3.10.2 Important Security Fix Release

Sorry, so this is an issue with 3.10.2? that Bootstrapper will not work in Windows 7, Windows 2008R2?

Thanks,

Steve


-----Original Message-----
From: wix-users [mailto:wix-users-bounces at lists.wixtoolset.org] On Behalf Of Rob Mensching
Sent: January-21-16 7:41 PM
To: WiX Toolset Users Mailing List <wix-users at lists.wixtoolset.org>
Subject: Re: [wix-users] WiX v3.10.2 Important Security Fix Release 

This is an old WinForms issue exposed by the security fixes implemented in WiX v3.10.2. 

____________________________________________________________________
WiX Toolset Users Mailing List provided by FireGiant http://www.firegiant.com/