Re: XSS vulnerability on JQuery < 3.5.0 - ProGet 5.3.4
Please verify if you will or will not upgrade JQuery to a more recent version.
If not, is it possible to manually update JQuery myself? If so, please provide steps.
Re: XSS vulnerability on JQuery < 3.5.0 - ProGet 5.3.4
Please verify if you will or will not upgrade JQuery to a more recent version.
If not, is it possible to manually update JQuery myself? If so, please provide steps.
Faulting application name: ProGet.Service.exe, version: 5.2.0.73, time stamp: 0x5ccca72c
Faulting module name: KERNELBASE.dll, version: 6.3.9600.20040, time stamp: 0x60adc0a6
Exception code: 0xe0434352
Fault offset: 0x0000000000007afc
Faulting process id: 0x4bc
Faulting application start time: 0x01d7889840bf6f50
Faulting application path: C:\Program Files\ProGet\Service\ProGet.Service.exe
Faulting module path: C:\Windows\system32\KERNELBASE.dll
Report Id: 7f3dca1e-f48b-11eb-815a-00155d101fb1
Faulting package full name:
Faulting package-relative application ID:
The description for Event ID 1325 from source ASP.NET 4.0.30319.0 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
An unhandled exception occurred and the process was terminated.
Application ID: ProGet.Service.exe
Process ID: 1212
Exception: System.Net.HttpListenerException
Message: Access is denied
StackTrace:
Server stack trace:
at System.Net.HttpListener.AddAllPrefixes()
at System.Net.HttpListener.Start()
at Inedo.Web.Server.HttpListenerHost.Start(WebServerConfiguration settings)
at System.Runtime.Remoting.Messaging.StackBuilderSink._PrivateProcessMessage(IntPtr md, Object[] args, Object server, Object[]& outArgs)
at System.Runtime.Remoting.Messaging.StackBuilderSink.SyncProcessMessage(IMessage msg)
Exception rethrown at [0]:
at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
at Inedo.Web.Server.HttpListenerHost.Start(WebServerConfiguration settings)
at Inedo.Web.Server.IntegratedServer.ProcessRequests()
at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)
at System.Threading.ThreadHelper.ThreadStart()
Application: ProGet.Service.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.Net.HttpListenerException
Server stack trace:
at System.Net.HttpListener.AddAllPrefixes()
at System.Net.HttpListener.Start()
at Inedo.Web.Server.HttpListenerHost.Start(WebServerConfiguration settings)
at System.Runtime.Remoting.Messaging.StackBuilderSink._PrivateProcessMessage(IntPtr md, Object[] args, Object server, Object[]& outArgs)
at System.Runtime.Remoting.Messaging.StackBuilderSink.SyncProcessMessage(IMessage msg)
at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(System.Runtime.Remoting.Messaging.IMessage, System.Runtime.Remoting.Messaging.IMessage)
at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(System.Runtime.Remoting.Proxies.MessageData ByRef, Int32)
at Inedo.Web.Server.HttpListenerHost.Start(Inedo.Web.Server.WebServerConfiguration)
at Inedo.Web.Server.IntegratedServer.ProcessRequests()
at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
at System.Threading.ThreadHelper.ThreadStart()
I'm attempting to upgrade ProGet v3.8.6 to the latest ProGet v5.
I tried using both InedoHub and legacy installer but both did not succeed.
The InedoHub fails with the below error.
When using the legacy installer, I first installed version 5.2.32 which succeeds successfully. But the service won't start. Event viewer shows an error with the application. I then tried to install version 5.3.34 and it fails. I followed your upgrade guidance. See below.
The purpose of this upgrade is because the jquery version in ProGet v3.8.6 failed our security scan.
How do I upgrade to latest ProGet v5?
Does ProGet v5 have a newer version of jquery? If so, what is the version?