WiX.Toolset.UnofficialFork 3.10.2

This package contains the binaries needed to compile Windows Installer XML (WiX) setup projects. Just add this NuGet package to your WiX setup projects and you're done (no setup required on build servers etc.). Note that you still need to install WiX Toolset in Visual Studio to get the editor experience.

       File issues with the NuGet package at https://github.com/jozefizso/WiX.Toolset.NuGet

There is a newer version of this package available.
See the version list below for details.

Requires NuGet 2.7 or higher.

Install-Package WiX.Toolset.UnofficialFork -Version 3.10.2
dotnet add package WiX.Toolset.UnofficialFork --version 3.10.2
<PackageReference Include="WiX.Toolset.UnofficialFork" Version="3.10.2" />
For projects that support PackageReference, copy this XML node into the project file to reference the package.
paket add WiX.Toolset.UnofficialFork --version 3.10.2
The NuGet Team does not provide support for this client. Please contact its maintainers for support.
#r "nuget: WiX.Toolset.UnofficialFork, 3.10.2"
For F# scripts that support #r syntax, copy this into the source code to reference the package.

Release Notes

WiX v3.10.2 is the latest recommended maintenance release of WiX v3.10 with a series of mitigations for a serious Windows vulnerability affecting all bootstrapper bundles. We strongly recommend upgrading to WiX v3.10.2 so you can ship safe bundles.

For more information about the vulnerabilities, the mitigations, and the release, see https://www.firegiant.com/blog/2016/1/20/wix-v3.10.2-released/

There are two breaking changes due to this security fix:
* A bundle cannot be named Setup.exe. When an executable is named Setup.exe, Windows loads additional DLLs in an insecure manner. To prevent such a guaranteed vulnerability, Light.exe now yields an error if the bundle output is named Setup.exe. As Setup.exe might be a common file name, this breaking change is especially annoying. Unfortunately, Windows loads the additional DLLs in a way that Burn code cannot mitigate.
* The process that loads the bootstrapper application is no longer the process the user started. Attempts to use ::GetModuleFileName to locate the source media (i.e., with loose files next to the bundle .exe) will fail. A workaround is to use the new WixBundleSourceProcessPath and WixBundleSourceProcessFolder variables to find the original process. In general, this shouldn't be a serious problem--bootstrapper applications can already carry all the files they need using Payload elements.

Dependencies

This package has no dependencies.

NuGet packages

This package is not used by any NuGet packages.

GitHub repositories

This package is not used by any popular GitHub repositories.

Version History

Version Downloads Last updated
3.11.2 3,638 9/20/2019
3.11.2-ext2 297 11/28/2019
3.11.2-ext1 185 11/19/2019
3.11.1 12,759 6/25/2018
3.11.0 3,992 5/10/2017
3.10.3 1,514 7/26/2016
3.10.3-ext 665 7/26/2016
3.10.2 155,670 2/8/2016
3.10.2-ext2 620 5/4/2016
3.10.1 2,798 11/12/2015
Show less