WiX Toolset Changelog

What's new in WiX Toolset 3.11.2

Sep 19, 2019
  • The following bugs were fixed:
  • DTF vulnerable to "Zip Slip" #6075 with fix by @robmen
  • Files:
  • Wix311.exe is the installer for the WiX Toolset build tools.
  • Wix311exe.zip contains the wix311.exe installer inside a .zip file, useful if your IT department prevents direct downloading of .exe files.
  • Wix311-binaries.zip contains the files that make up the WiX Toolset and is useful if you don't want to install the toolset -- for example, if you're just checking WiX into source control.
  • Wix311-debug.zip contains a reference copy of the WiX source code and symbol (.pdb) files, both of which are useful when debugging problems with WiX.

New in WiX Toolset 3.11.1 (May 4, 2018)

  • WiX v3.10.4 and WiX v3.11.1 are important security releases of WiX. We strongly encourage all users of WiX to upgrade to WiX v3.11.1. If you must remain on a WiX v3.10 release, we highly recommend upgrading to WiX v3.10.4.
  • This security release addresses a DLL hijacking vulnerability in Burn introduced in WiX v3.10.2—ironically while fixing a more prevalent DLL hijacking vulnerability. This vulnerability differs from the previous vulnerability as it requires malicious code to already be executing. Thus it is not a remote execution vulnerability but can be used to escalate privileges.
  • The fix is a small code change to protect bundles when launched elevated. There are no additional changes.

New in WiX Toolset 4.0.0.5205 (Apr 6, 2017)

  • leshy84: WIXBUG:5548 - fix WiX Burn (mbahost) not to leave del*.tmp files in temp directory

New in WiX Toolset 4.0.4305.0 (Jul 6, 2016)

  • @barnson: WIXBUG:5306: Warn against ServiceConfig and ServiceConfigFailureActions.
  • @barnson: Fix WIXBUG:5294 - Move MsiProperty check from ProcessMsiPackageCommand to the compiler for the earliest feedback.
  • @barnson: Prevent bad use of ".." in payload names. Fixes wixtoolset/issues#4265.
  • FabienL: WIXBUG:4976 - Add support for .net framework 4.6.1 in netfxExtension
  • SeanHall: WIXBUG:4810 - Fix bug where mbapreq tried to do something other than HELP or INSTALL.
  • SeanHall: WIXBUG:5234 - Make Burn grab a file handle to the original bundle so it can still access compressed payloads even if the original bundle was deleted after initialization (e.g. when a bundle uses Burn's built-in update mechanism). Also, when launching the clean room Burn process, pass a file handle of the original exe to the process on the command line. Use this file handle when using the attached container.
  • SeanHall: WIXBUG:5238 - Get the engine's file handle as soon as possible. Also, when launching Burn processes, pass a file handle of the exe to the process on the command line.

New in WiX Toolset 4.0.3922.0 (Mar 24, 2016)

  • SeanHall: WIXFEAT:4951 - Make the BAFunctions interface binary, make WixStdBA forward all BA messages to BAFunctions, and give BAFunctions access to the theme and localization.
  • PavelAnfimov: WIXBUG:4772 - Add support for Windows XP for ShelExecUnelevated.
  • DavidFlamme: WIXBUG:4785 - Fixing memory leak in InstallPackage.cs MikeGC: WIXBUG:4878 - fix iniutil memory leak
  • jchoover: WIXBUG:4899 - Modified WixStdBA handling of XmlGetAttribute to handle S_FALSE.
  • BobArnson: Work around Dev14 change that breaks XP compatibility even when used with v140_xp toolset. Fixes WIXBUG:4902 and WIXBUG:4908.
  • @barnson: Correct file name of local name for Web package per wixtoolset/issues#4904
  • MikeGC: Add simple combo box support to ThmUtil.
  • @barnson: Fix up bad/old links in Learning WiX topic.
  • HeathS: WIXFEAT:5230 - Support adding users to Performance Log users group
  • HeathS: WIXBUG:5229 - Allow processes to terminate with 0 exit code
  • HeathS: WIXBUG:5241 - Call OnExecutePackageComplete only when OnExecutePackageBegin was called
  • @barnson: WIXBUG:5185 - correct LPWSTR to LPCWSTR
  • @barnson: Write VersionMajor/VersionMinor Uninstall values:
  • Partial fix for wixtoolset/issues#5171. (Does not write InstallLocation.)
  • @barnson for @firegiantco: Fix wixtoolset/issues#5221:
  • Use better logic to determine when to send the Burn ancestors switches.

New in WiX Toolset 4.0.3826.0 (Mar 10, 2016)

  • SeanHall: WIXBUG:4857 - Fix DTF custom actions in Win10 Apps and Features.
  • SeanHall: Make VS2015 C++ custom action project template reference VS2015 WiX libs.
  • BMurri: WIXBUG:5132 - fix incomplete usage of kbKeyBitness parameter of RegDelete() function in DUtil's RegUtil.
  • @barnson: Add support for command links to ThmUtil.
  • Command links are supported on Windows Vista and later. On Windows XP, they're plain buttons.
  • @firegiantco via @barnson: ThmUtil cleanups.
  • ThemeControlExists should take a const THEME*.
  • ThemeSetTextControlEx exposed clunky fInvalidateControl and fInvalidateParent arguments in an attempt to force controls to redraw. Replace with fUpdate more generically and, hidden in the code, hide and show the control, which we found to be the cleanest way of getting transparent text redrawn over a graphical background.
  • @barnson: Support system colors in themes.
  • Implements wixtoolset/issues#4787.
  • The following "colors" are supported in Font/@Foreground and Font/@Background with the color indices as used by ::GetSysColor:
  • btnface: COLOR_BTNFACE
  • btntext: COLOR_BTNTEXT
  • graytext: COLOR_GRAYTEXT
  • highlight: COLOR_HIGHLIGHT
  • highlighttext: COLOR_HIGHLIGHTTEXT
  • hotlight: COLOR_HOTLIGHT
  • window: COLOR_WINDOW
  • windowtext: COLOR_WINDOWTEXT

New in WiX Toolset 3.7.1224.0 (Feb 5, 2013)

  • Add to properties for Visual Studio Express for Windows Phone.

New in WiX Toolset 3.7.1222.0 (Feb 5, 2013)

  • SFBUG:3171 - Revert fix for SFBUG:3157; VS2010 doesn't much like the $=RegPath$ .pkgdef syntax, though VS2012 does.
  • SFBUG:3170 - fix text in some IIS7 CA error messages.
  • SFBUG:3174 - update remote payload for NETFX 4.5 due to online changes.

New in WiX Toolset 3.7.1217.0 (Feb 5, 2013)

  • SFBUG:3157 - adjust .pkgdef paths
  • SFBUG:3153 - wixstdba returns approprate return codes when restarting.
  • SFBUG:3102 - find VWD2012 for VsixPackage when VS2012 not installed.
  • Incorporate donated mbapreq localization files.

New in WiX Toolset 3.7.1204.0 (Feb 5, 2013)

  • SFBUG:3152 - build debugging information into .libs like WiX v3.6.

New in WiX Toolset 3.7.1126.0 (Feb 5, 2013)

  • SFBUG:3148 - fix copyright information in versioned resources.
  • Fix SFBUG:3145 - remove NAnt task references
  • SFBUG:3146 - parse and ignore WixLocalization/@Language, which is used only by native code because it can't understand @Culture.
  • SFBUG:3151 - fix declaration of RegReadBinary for x64.
  • SFBUG:3149 - include default logging in Burn for chained MSI packages.
  • SFBUG:3147 - WixTasks.dll must target NETFX3.5.
  • Support splitting large files across cabinets.

New in WiX Toolset 3.7.1119.0 (Feb 5, 2013)

  • Prevent duplicate rows being added for MsiAssemblyName table while creating patches.
  • SFBUG:3140 - correctly handle Burn logs without extensions.