Hello, WiX v4.0.4 world.

YoutacRandS-VA · Feb 7, 2024 · 0a07134 · 0a07134
1 parent b79b380
commit 0a07134
Show file tree

Hide file tree

Showing 4 changed files with 17 additions and 8 deletions.
diff --git a/src/Docusaurus/docs/intro.md b/src/Docusaurus/docs/intro.md
@@ -42,7 +42,7 @@ wix --version
 WiX v4 is available as an MSBuild SDK for building from the command line using `dotnet build` from the .NET SDK or the .NET Framework-based `MSBuild` from Visual Studio. SDK-style projects have smart defaults that make for simple .wixproj project authoring. For example, here's a minimal .wixproj that builds an MSI from the .wxs source files in the project directory:
 
 ```xml
-<Project Sdk="WixToolset.Sdk/4.0.3">
+<Project Sdk="WixToolset.Sdk/4.0.4">
 </Project>
 ```
 

diff --git a/src/Docusaurus/docs/releasenotes.md b/src/Docusaurus/docs/releasenotes.md
@@ -5,11 +5,9 @@ sidebar_position: 30
 # Release notes
 
 
-## WiX v4.0.3 {#v4}
+## WiX v4.0.4 {#v4}
 
-> WiX v4.0.3 was released Monday, 13-Nov-2023
-
-WiX v4.0.3 is a maintenance release of WiX v4 that [fixes a small number of even smaller bugs](https://github.com/wixtoolset/issues/milestone/23?closed=1).
+WiX v4.0.4 mitigates a Windows DLL redirection vulnerability in Burn. All versions of WiX are affected by this vulnerability. We recommending upgrading to this version as soon as possible.
 
 
 ### Platforms
@@ -66,7 +64,7 @@ WiX v4.0.3 is a maintenance release of WiX v4 that [fixes a small number of even
 To update your .wixproj MSBuild projects from previous WiX v4 releases, update the `Project` element's `Sdk` attribute:
 
 ```xml
-<Project Sdk="WixToolset.Sdk/4.0.3">
+<Project Sdk="WixToolset.Sdk/4.0.4">
 ```
 
 For `PackageReference`s to WiX v4 extensions, update their `Version` attribute. For example:
@@ -102,6 +100,10 @@ wix --version
 
 ## Previous WiX v4 releases
 
+> WiX v4.0.3 was released Monday, 13-Nov-2023
+
+WiX v4.0.3 is a maintenance release of WiX v4 that [fixes a small number of even smaller bugs](https://github.com/wixtoolset/issues/milestone/23?closed=1).
+
 > WiX v4.0.2 was released Wednesday, 13-Sep-2023
 
 WiX v4.0.2 is a maintenance release of WiX v4 that fixes a number of bugs that escaped detection in WiX v4.0.0 and v4.0.1:

diff --git a/src/Docusaurus/docs/tools/msbuild.md b/src/Docusaurus/docs/tools/msbuild.md
@@ -7,7 +7,7 @@ sidebar_position: 20
 WiX v4 is available as an MSBuild SDK. SDK-style projects have smart defaults that make for simple .wixproj project authoring. For example, here's a minimal .wixproj that builds an MSI from the .wxs source files in the project directory:
 
 ```xml
-<Project Sdk="WixToolset.Sdk/4.0.3">
+<Project Sdk="WixToolset.Sdk/4.0.4">
 </Project>
 ```
 
@@ -143,7 +143,7 @@ You can then reference `MyProductNameProperty`, for example, in other properties
 To make property values available as preprocessor variables in your WiX authoring, add them to the `DefineConstants` property. For example:
 
 ```xml
-<Project Sdk="WixToolset.Sdk/4.0.3">
+<Project Sdk="WixToolset.Sdk/4.0.4">
   <PropertyGroup Label="Globals">
      <DefineConstants>MyProductNameProperty=$(MyProductNameProperty);</DefineConstants>
   </PropertyGroup>

diff --git a/src/Docusaurus/news/2024-02-06-wix-v4.0.4-available.md b/src/Docusaurus/news/2024-02-06-wix-v4.0.4-available.md
@@ -0,0 +1,7 @@
+# WiX Toolset v4.0.4 and v3.14 available
+
+[WiX v4.0.4][rel] and [v3.14][wix3] mitigate a Windows DLL redirection vulnerability in Burn. All versions of WiX are affected by this vulnerability. We recommending upgrading to these versions as soon as possible. Read more about it at [the FireGiant blog][fg].
+
+[rel]: /docs/releasenotes#v4
+[wix3]: https://github.com/wixtoolset/wix3/releases/tag/wix314rtm
+[fg]: https://www.firegiant.com/blog/2024/2/6/wix-security-releases-available/