Setup Matters

There is a Windows DLL redirection behavior that an attacker could use to escalate privileges using a Burn bundle. All versions of WiX are affected by this vulnerability. FireGiant has prepared mitigations for this behavior that we're releasing today in WiX v4.0.4 and WiX v3.14. We recommending upgrading to these versions as soon as possible.

We delayed the meeting we were supposed to have on 30-Jan that was also supposed to be when we shipped WiX v5.0.0-rc.1. We did not delay the meeting because we're behind schedule on WiX v5.0.0-rc.1. Well, to clarify, we didn't delay the meeting only because we're behind schedule on WiX v5.0.0-rc.1. We also had a security issue reported against WiX and those delightful and dedicated folks at FireGiant were kind enough to sponsor Rob and me to mitigate the issue and prepare new releases. Read on for details.

Day six under winter weather watches, warnings, and advisories. Temperatures hover in single digits (°F) and wind chills fall below zero (°F). Reaching toward the back of the pantry for crumbs. On the upside: Plenty of time to work on WiX v5 features because who wants to go outside?!

Welcome to the first WiX Online Meeting of 2024! If years follow the "Star Trek Even-Numbered Movies Are Good" rule, we can expect 2024 to be great, just like other even-numbered years like 2020...oh no.

Today is our last Online Meeting of 2023. Our normal fortnightly schedule would have us meeting on 26-December, but as the week between Christmas and New Year's Day shouldn't require changing out of pajamas or speaking to other people, we decided to start the new year out fresh and have our next meeting on 2-January-2024. See you then!

Here in the United States, the recent Thanksgiving holiday serves as the unofficial start of winter, the winter holiday season, overly-indulgent shopping, six weeks of "holiday diet cheat days" -- it all ties together. In that vein, Rob and I signed up for a couple more WiX v5 work items even as the new year (and our first scheduled prerelease of WiX v5) rapidly approaches...