WiX.Toolset.UnofficialFork 3.10.2

WiX Toolset v3.10 (unofficial)

This package contains the binaries needed to compile Windows Installer XML (WiX) setup projects. Just add this NuGet package to your WiX setup projects and you're done (no setup required on build servers etc.). Note that you still need to install WiX Toolset in Visual Studio to get the editor experience.

       File issues with the NuGet package at https://github.com/jozefizso/WiX.Toolset.NuGet

There is a newer version of this package available.
See the version list below for details.

Requires NuGet 2.7 or higher.

Install-Package WiX.Toolset.UnofficialFork -Version 3.10.2
dotnet add package WiX.Toolset.UnofficialFork --version 3.10.2
<PackageReference Include="WiX.Toolset.UnofficialFork" Version="3.10.2" />
For projects that support PackageReference, copy this XML node into the project file to reference the package.
paket add WiX.Toolset.UnofficialFork --version 3.10.2
The NuGet Team does not provide support for this client. Please contact its maintainers for support.

Release Notes

WiX v3.10.2 is the latest recommended maintenance release of WiX v3.10 with a series of mitigations for a serious Windows vulnerability affecting all bootstrapper bundles. We strongly recommend upgrading to WiX v3.10.2 so you can ship safe bundles.

For more information about the vulnerabilities, the mitigations, and the release, see https://www.firegiant.com/blog/2016/1/20/wix-v3.10.2-released/

There are two breaking changes due to this security fix:
* A bundle cannot be named Setup.exe. When an executable is named Setup.exe, Windows loads additional DLLs in an insecure manner. To prevent such a guaranteed vulnerability, Light.exe now yields an error if the bundle output is named Setup.exe. As Setup.exe might be a common file name, this breaking change is especially annoying. Unfortunately, Windows loads the additional DLLs in a way that Burn code cannot mitigate.
* The process that loads the bootstrapper application is no longer the process the user started. Attempts to use ::GetModuleFileName to locate the source media (i.e., with loose files next to the bundle .exe) will fail. A workaround is to use the new WixBundleSourceProcessPath and WixBundleSourceProcessFolder variables to find the original process. In general, this shouldn't be a serious problem--bootstrapper applications can already carry all the files they need using Payload elements.

Dependencies

This package has no dependencies.

This package is not used by any popular GitHub repositories.

Version History

Version Downloads Last updated
3.11.1 3,017 6/25/2018
3.11.0 3,375 5/10/2017
3.10.3 747 7/26/2016
3.10.3-ext 349 7/26/2016
3.10.2 58,834 2/8/2016
3.10.2-ext2 330 5/4/2016
3.10.1 645 11/12/2015