Microsoft Visual Studio 2017 15.9.0 Updates to [15.9.1-15.9.31]

Шо новенького

Изменения
• The Windows 10 October 2018 Update SDK (build 17763) is now the default selected SDK for the Universal Windows Platform development workload
Исправления
• Fixed a bug where Visual Studio would fail to build projects using the Microsoft Xbox One XDK

Шо новенького

Исправления
• MFC EXE (binary) size is 5 times bigger in VS 15.8 (_MSC_VER = 1915).
• Key 'OPENSSH' is not supported.
• Windows magnifier can no longer track keyboad cursor.
• Analysis fails with immediately-invoked lamba in while loop.
• Xamarin iOS designer not working with 15.9 and Xamarin.iOS 12.2.1.10.
• We improved the reliability of incremental linking for large C++ projects.
• LNK2001 "unresolved external symbol" errors for certain vector deleting destructors will now be resolved.
• Compiler execution time has been improved for code that makes heavy use of chained, inline functions involving lambdas or local classes as parameter or return types.

Шо новенького

Исправления
• Visual Studio 15.9 - duplicate loads open files on solution reload.
• Issues with reloading and IntelliSense with Unity projects and Visual Studio 2017 15.9.x.

Шо новенького

Исправления
• Visual Studio 15.9 duplicate loads open files on solution reload.
• All users can now connect to on-premise TFS servers through Team Explorer.
• Visual Studio 15.8.3 no longer expands metadata in ItemDefinitionGroup for project-defined items during GUI builds (worked in Visual Studio 15.8.2).
• Visual Studio has multiple tabs for the same file.
• System.ArgumentException: The parameter is incorrect. (Exception from HRESULT: 0x80070057 (E_INVALIDARG)).
• LNK4099 PDB not found.
• Asset Catalog empty.
• /analyze fails for C++ code using /ZW.
• C++ compiler code optimization bug.
• Xamarin.iOS can't select image asset for Image View.
• iOS projects referencing a shared project containing image assets in an asset catalog fail to load on windows.
• Image not populating on iOS splashscreen in VS 15.8.6.
• Possible bad codegen on union/bitfield assignment in VS2017 15.8.
• Fix C# UWP Store 1201 Submission Issue.
• Fix C# UWP package creation error APPX1101: Payload contains two or more files with the same destination path 'System.Runtime.CompilerServices.Unsafe.dll'.
• Error MT2002: Failed to resolve 'System.Runtime.CompilerServices.AsyncValueTaskMethodBuilder' reference from 'System.Threading.Tasks.Extensions...'" when building a Xamarin.iOS project.
• Redirecting to a relative url doesn't work when using AndroidClientHandler.
• Debug information for typedefs of unnamed enums compiled with the C compiler is now restored.
• The spectre-mitigated x86 version of delayimp.lib is now built with /Qspectre mitigations enabled.
• Changes were made to how Asset Catalogs in Xamarin.iOS projects are loaded in order to reduce solution load time.
• We have updated Xamarin.Forms templates to use the latest version.
• We have fixed an issue with ASP.NET Core Web Applications being debugged through Kestrel that would show the error message "Unable to configure HTTPS endpoint. No server certificate was specified...".
• Enabling the AppInsights site extension in App Service from Visual Studio now happens through the use of specific Application Settings.
• CVE-2018-8599 Vulnerability of Elevation of Privilege via Diagnostics Hub Standard Collector Service fixed by ensuring the Diagnostics Hub Standard Collector Services properly impersonates file operations.

Шо новенького

Исправления:
• VSX1000: No enough information has been provided to MSBuild in order to establish a connection to a Remote Server.
• Visual C++ 2017 Redistributable for ARM64 is not available via visualstudio.com.
• VC Runtime Redistributable Update for VS 15.9 deletes Registry Key. This fix may have an increased chance of requiring a reboot of the machine in order to install an updated VC++ Redistributable package.
• Incorrect codegen in managed c++ with List to List assignment.
• Can't connect to mac build host after Visual Studio 15.9.4 update.
• Resource directories missed in incremental builds with AndroidAarLibrary items.
• Lots of external assembly references - JNI ERROR (app bug): local reference table overflow (max=512).
• The Unity Editor has been updated to 2018.3. For more information, please visit the Unity website.
• SSDT: We enabled SQL projects to build schemas that have non-clustered columnstore indexes on an indexed views.
• SSDT: We fixed a significant performance issue in the schema compare tool when generating a script.
• SSDT: We fixed the schema drift detection logic in the schema compare tool which forced a new comparison to reenable scripting and publishing actions.
• Visual Studio Remote Code Execution Vulnerability CVE-2019-0546 (when the C++ compiler improperly handles specific combinations of C++ constructs)

Шо новенького

Исправления:
• Installation failures of the Unity Editor component in China.
• Starting a new nanoFramework project from a template.
• Deployment errors after VS2017 update.
• Android Deploy failed - Error ADB0010.
• Error in German translation: info bar "session closed unexpectedly".
• Visual Studio 2017 create offline layout problem: Failed to load from stream for non-ENU layouts.
• Extension auto-update can leave extension disabled.

Шо новенького

Исправления:
• Crashes when expanding variables!.
• /DEBUG:FASTLINK + C7 + PCH crashes debugger.
• Native C++ application crashes because of stack corruption with VS 2017 15.9.2.
• Incorrect Release Mode code.
• Xamarin Unobserved Task Exception WebRequest.
• Link /SOURCELINK option seems to do nothing. This fixes Source Link for Managed C++ Debugging.
• Fixed an issue with corruption of AVX/MPX/AVX512 registers while Debugging.
• Update of Microsoft.VCLibs.140.00.UWPDestkop framework packages for C++ UWP DesktopBridge applications adding support for ARM64.
• Corrected incorrect version of VCToolsRedistVersion in Microsoft.VCToolsVersion.default.props.
• Corrected unsigned embedded dll for VC Redist installers.
• SSDT/Web Tools: We fixed an issue where SQL LocalDB was not installed on Polish, Turkish, and Czech locales.
• SSDT: We fixed an issue affecting SQL Server Analysis Services (Method not found exception when clicking on UI).
• SSDT: We fixed an accessibility issue which was causing the contents of a table not to be visible in the result window when using High-Contrast mode.
• Security Issue: WorkflowDesigner XOML deserialization allows code execution.
• Security Issue:.NET Framework and Visual Studio Spoofing Vulnerability.

Шо новенького

Исправления:
• ModelBus-enabled text transformation fails on 15.8.
• SSDT: Fix to improve performance of loading solutions with multiple projects.

Шо новенького

Исправления:
• SSDT: We fixed a crash in the SSIS Foreach Loop container.
• A few .NET native for UWP customer issues were fixed in .NET native tools 2.2 (UWP 6.2.4).
• We have corrected dual signing of Visual C++ Redistributable installers.
Исправления безопасности:
• A remote code execution vulnerability exists when the Visual Studio C++ Redistributable Installer improperly validates input before loading dynamic link library (DLL) files.
• Unity Editor Remote Code Execution Vulnerability.
• .NET Core NuGet Tampering Vulnerability.

Шо новенького

Исправления:
• We have fixed an issue with debugging using Docker when a web proxy is configured.
• In debugging using Docker, you will now experience improved error handling for failures related to drive sharing configuration (for example, expired credentials).

Шо новенького

Исправления:
• Access violation C++ /CLI 15.9.5 ISO C++ Latest Draft Standard since 15.9.5.
• PGO Code Gen Bug - Vectorized instruction accessing memory OOB.
• We have implemented a C++ compiler fix to correct exception handling support for code using setjmp/longjmp in Release mode.
• We have implemented a C++ linker fix regarding information in PDB where the incorrect module info could result in heap corruption when producing a stripped PDB file either by PDBCopy.exe or by link.exe when option /PDBSTRIPPED is specified.
• We have corrected dual signing of the ARM64 Visual C++ Redistributable installer.

Шо новенького

Исправления:
• Fixed a bug that caused Code Analysis to stop running on some C++ projects.
• Fixed a bug in the Schema Compare Tool where adding tables with an empty schema failed but was shown as successful.
• Fixed a TypeScript build issue when the selected language version is lower than the latest installed.
• Fixed a Database unresolved reference to object error.
• Improved performance issues on loading Visual Studio.
• Fixed known issue: No snapshot created for C++ native code in Memory Usage tool in the Diagnostic Tools window while debugging..

Шо новенького

Исправления:
• Fixed a bug causing Visual Studio 2017 crashes when switching branches.
• Fixed a bug causing internal compiler error (fbtctree.cpp', line 5540) during code analysis.
• Fixed a performance regression in memcpy/memset for Ryzen processors.
• Updated Service Fabric tooling to support the 6.5 Service Fabric release.
• Enabled screen reader to announce TeamExplorer's notifications properly on .NET 4.8.
• VS2017 15.8 Internal compiler error ('msc1.cpp', line 1518): Conflict between preprocessor and #import.
• ICE in PREfast 19.16.27023.1 (15.9 RTW).
Исправления безопасности:
• Visual Studio Extension Auto Update Vulnerability
• Visual Studio WorkFlowMarkUpDeserializerRCE Vulernability
• ASP.NET Core Spoofing Vulnerability

Шо новенького

Исправления:
• Updated signing of VC Redist packages to enable continued deployment on Windows XP. This fix may have an increased chance of requiring a reboot of the machine in order to install an updated VC++ Redistributable package.
• Fixed in issue where GoToDefinition does not work for JavaScript in script blocks of cshtml files.
• Calling pmr monotonic_buffer_resource release will corrupt memory.
• Fix for HRESULT E_FAIL build error in some C++ projects when upgrading to 15.9.13
• Fixed security issue CVE-2019-1211 Git for Visual Studio Elevation of Privilege Vulnerability

Шо новенького

Исправления:
• Assembly does not match code for function
• System.InvalidProgramException: Common Language Runtime detected an invalid program. when instrumenting x64 projects
• Cross-EH mode inlining of noexcept code produces unexpected behavior
• Corrected issue with HTML Help Workshop failing to repair.

Шо новенького

Исправления:
• Security Vulnerability NPM Package Elevation of Privilege

Шо новенького

Исправления:
• May allow mitigation of a Per-Monitor awareness related crash in Visual Studio
• Git for Visual Studio Remote Excecution Vulnerability due to too lax restrictions on submodule names
• Git for Visual Studio Remote Excecution Vulnerability due to incorrect quoting of command-line arguments
• Git for Visual Studio Arbitrary File Overwrite Vulnerability due to usage of non-letter drive names during clone
• Git for Visual Studio Remote Excecution Vulnerability due to unawareness of NTFS Alternate Data Streams
• Git for Visual Studio Arbitrary File Overwrite Vulnerability due to not refusing to write out tracked files containing backslashes
• Git for Visual Studio Remote Execution Vulnerability due to too lax validation of submodule names in recursive clones

Шо новенького

Исправления:
• Fixed an issue in C++ optimizer where the impact of writing to unknown memory inside a call wasn’t properly accounted for in the caller.
• Fixed ASP.NET Core Denial of Service Vulnerability
• Fixed ASP.NET Core Remote Code Execution Vulnerability

Шо новенького

Исправления:
• SQL server test configuration error
• Fixed SQL server object explorer causing a crash when customers sort data of a table

Шо новенького

Исправления:
• Fixed a bug where the .NET Profiling tools couldn't be installed on non-enterprise versions of Visual Studio 2017 when using an offline installer.
• Fixed C++ compiler bug where a static_cast in a decltype would evaluate incorrectly. To minimize disruptions to existing codebases, in VS2017 this fix takes effect when the (newly added) /d1decltypeIdentityConversion switch is thrown.
• New Spectre mitigation options in C++ compiler: /Qspectre-load & /Qspectre-load-cf for speculative load hardening.
• Security fix of Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability

Шо новенького

Исправления:
• VS2017 C++ sometimes set wrong exception frame.
• Fixed Microsoft Visual Studio Elevation of Privilege Vulnerability
• Fixed Visual Studio Extension Installer Service Elevation of Privilege Vulnerability
• Fixed Git for Visual Studio Credential Leak Vulnerability due to insufficient validation on URLs

Шо новенького

Исправления:
• Fixed C++ compiler bug for proper folding of inline variable dynamic initializers. Ported from the VS 2019 16.0 release.
• Security improvements in vctip.exe.
• A change to enable Enterprise IT administrators and deployment engineers to configure tools like Microsoft Update client & SCCM to determine applicability of VS2017 updates hosted on Microsoft Update Catalog & WSUS.
• Fixed .NET Core Denial of Service Vulnerability

Шо новенького

Исправления:
• Fixed a bug in the C++ linker missing imports when using umbrella LIBs with difference casing on postfix of DLL name.
• Fixed a bug in the ARM64 C++ compiler where the wrong values could be restored after setjmp.
• Fixed C++ compiler bug for proper folding of inline variable dynamic initializers.
• Made a change that enables Enterprise IT administrators and deployment engineers to configure tools like Microsoft Update client & SCCM to determine applicability of VS2017 updates hosted on Microsoft Update Catalog & WSUS.
• Fixed Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerabilities
• Fixed .NET Core Denial of Service Vulnerabilities

Шо новенького

Исправления:
• Fixed Compiler CodeGen regression for calling a virtual function with V15.9
• Fixed 1.0 and 2.0 .NET Core runtimes have been marked as "out of support" in the setup UI and made optional for all scenarios.
• Fixed Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
• Fixed Visual Studio Elevation of Privilege Vulnerability
• Fixed .NET Core Denial of Service Vulnerability

Шо новенького

Исправления:
• Visual Studio 2017 15.9.23 or cl 19.16.27040 problem with inline static class member (renew)
• Fixed ASP.NET Core Denial of Service Vulnerability

Шо новенького

Исправления:
• Fixed Diagnostics Hub Standard Collector Elevation of Privilege Vulnerabilities
• Fixed Visual Studio Remote Code Execution Vulnerability
• Fixed Visual Studio Remote Code Execution Vulnerability
• Fixed Microsoft ASP.NET Core Security Feature Bypass Vulnerability

Шо новенького

Исправления:
• .NET Core SDK 2.1.519 updated into Visual Studio 2019

Шо новенького

Исправления:
• 15.9.12 - linker crash during code generation
• v141 generates movaps for unaligned assignments on x64
• Fixed Visual Studio Tampering Vulnerability (CVE-2020-17100 )

Шо новенького

Исправления:
• Fixed a C++ compiler crash when compiling a call to a function taking generic arguments in C++/CLI.
• Fixed Git for Visual Studio Remote Code Execution Vulnerability

Шо новенького

Исправления:
• Fixed Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
• Fixed Visual Studio Installer Remote Code Execution Vulnerability