microsoft / azure-pipelines-tasks

Tasks for Azure Pipelines
https://aka.ms/tfbuild
MIT License
3.46k stars 2.6k forks source link

[REGRESSION]: IIS web app deploy task failing in deployment group Error: Malicious entry: bin\xxxl.dll #20168

Closed djfoz closed 1 month ago

djfoz commented 1 month ago

New issue checklist

Task name

IIS web app deploy

Breaking task version

0.242.1

Last working task version

No response

Regression Description

Yesterday our internal release deployments have started failing to IIS (release agent, self hosted) - all fine before yesterday and no changes.

2024-07-18T07:35:21.2451839Z ##[section]Starting: Deploy xx 2024-07-18T07:35:21.2741115Z ============================================================================== 2024-07-18T07:35:21.2742179Z Task : IIS web app deploy 2024-07-18T07:35:21.2743087Z Description : Deploy a website or web application using Web Deploy 2024-07-18T07:35:21.2743894Z Version : 0.242.1 2024-07-18T07:35:21.2744597Z Author : Microsoft Corporation 2024-07-18T07:35:21.2745818Z Help : https://docs.microsoft.com/azure/devops/pipelines/tasks/deploy/iis-web-app-deployment-on-machine-group 2024-07-18T07:35:21.2747153Z ============================================================================== 2024-07-18T07:35:32.1622619Z [command]C:\vstsagent\A1_work_tasks\IISWebAppDeploymentOnMachineGroup_1b467810-6725-4b6d-accd-886174c09bba\0.242.1\node_modules\azure-pipelines-tasks-webdeployment-common\7zip\7zip\7z.exe x -oC:\vstsagent\A1_work_temp\temp_web_package_7417461268205914 C:\vstsagent\A1_work\r2\a\xx\ComponentPackages\xx-0.4.4.5748-pack.zip 2024-07-18T07:35:32.2102385Z 2024-07-18T07:35:32.2104435Z 7-Zip 23.01 (x64) : Copyright (c) 1999-2023 Igor Pavlov : 2023-06-20 2024-07-18T07:35:32.2105470Z 2024-07-18T07:35:32.2106647Z Scanning the drive for archives: 2024-07-18T07:35:32.2107964Z 1 file, 11955128 bytes (12 MiB) 2024-07-18T07:35:32.2108655Z 2024-07-18T07:35:32.2110425Z Extracting archive: C:\vstsagent\A1_work\r2\a\xx\ComponentPackages\xx8-pack.zip 2024-07-18T07:35:34.9102684Z -- 2024-07-18T07:35:34.9104662Z Path = C:\vstsagent\A1_work\r2\a\xx\ComponentPackages\xx-pack.zip 2024-07-18T07:35:34.9106037Z Type = zip 2024-07-18T07:35:34.9107023Z Physical Size = 11955128 2024-07-18T07:35:34.9107761Z 2024-07-18T07:35:34.9200092Z Everything is Ok 2024-07-18T07:35:34.9234038Z 2024-07-18T07:35:34.9256495Z Files: 295 2024-07-18T07:35:34.9258163Z Size: 45544048 2024-07-18T07:35:34.9259065Z Compressed: 11955128 2024-07-18T07:35:34.9800046Z ##[error]Error: Malicious entry: bin\xxx.dll 2024-07-18T07:35:34.9948455Z ##[section]Finishing: Deploy xx

Environment type (Please select at least one enviroment where you face this issue)

Azure DevOps Server type

dev.azure.com (formerly visualstudio.com)

Azure DevOps Server Version (if applicable)

No response

Operation system

Win Server 2016

Relevant log output

2024-07-18T07:35:21.2451839Z ##[section]Starting: Deploy xx
2024-07-18T07:35:21.2741115Z ==============================================================================
2024-07-18T07:35:21.2742179Z Task         : IIS web app deploy
2024-07-18T07:35:21.2743087Z Description  : Deploy a website or web application using Web Deploy
2024-07-18T07:35:21.2743894Z Version      : 0.242.1
2024-07-18T07:35:21.2744597Z Author       : Microsoft Corporation
2024-07-18T07:35:21.2745818Z Help         : https://docs.microsoft.com/azure/devops/pipelines/tasks/deploy/iis-web-app-deployment-on-machine-group
2024-07-18T07:35:21.2747153Z ==============================================================================
2024-07-18T07:35:32.1622619Z [command]C:\vstsagent\A1\_work\_tasks\IISWebAppDeploymentOnMachineGroup_1b467810-6725-4b6d-accd-886174c09bba\0.242.1\node_modules\azure-pipelines-tasks-webdeployment-common\7zip\7zip\7z.exe x -oC:\vstsagent\A1\_work\_temp\temp_web_package_7417461268205914 C:\vstsagent\A1\_work\r2\a\xx\ComponentPackages\xx-0.4.4.5748-pack.zip
2024-07-18T07:35:32.2102385Z 
2024-07-18T07:35:32.2104435Z 7-Zip 23.01 (x64) : Copyright (c) 1999-2023 Igor Pavlov : 2023-06-20
2024-07-18T07:35:32.2105470Z 
2024-07-18T07:35:32.2106647Z Scanning the drive for archives:
2024-07-18T07:35:32.2107964Z 1 file, 11955128 bytes (12 MiB)
2024-07-18T07:35:32.2108655Z 
2024-07-18T07:35:32.2110425Z Extracting archive: C:\vstsagent\A1\_work\r2\a\xx\ComponentPackages\xx8-pack.zip
2024-07-18T07:35:34.9102684Z --
2024-07-18T07:35:34.9104662Z Path = C:\vstsagent\A1\_work\r2\a\xx\ComponentPackages\xx-pack.zip
2024-07-18T07:35:34.9106037Z Type = zip
2024-07-18T07:35:34.9107023Z Physical Size = 11955128
2024-07-18T07:35:34.9107761Z 
2024-07-18T07:35:34.9200092Z Everything is Ok
2024-07-18T07:35:34.9234038Z 
2024-07-18T07:35:34.9256495Z Files: 295
2024-07-18T07:35:34.9258163Z Size:       45544048
2024-07-18T07:35:34.9259065Z Compressed: 11955128
2024-07-18T07:35:34.9800046Z ##[error]Error: Malicious entry: bin\xxx.dll
2024-07-18T07:35:34.9948455Z ##[section]Finishing: Deploy xx

Full task logs with system.debug enabled

2024-07-18T07:35:12.7001909Z ##[section]Starting: Release 2024-07-18T07:35:13.1245866Z ##[section]Starting: Initialize job 2024-07-18T07:35:13.1249372Z Agent name: 'xxx-HOST' 2024-07-18T07:35:13.1250622Z Agent machine name: 'xxx-HOST' 2024-07-18T07:35:13.1251487Z Current agent version: '2.193.0' 2024-07-18T07:35:13.1310170Z Agent running as: 'azdevops' 2024-07-18T07:35:13.1332575Z Prepare release directory. 2024-07-18T07:35:13.1350892Z ReleaseId=17701, TeamProjectId=6ac10869-9903-4f0a-bfd5-c60a4cb73a01, ReleaseDefinitionName=master 2024-07-18T07:35:13.1561269Z Release folder: C:\vstsagent\A1_work\r2\a 2024-07-18T07:35:13.1844461Z Environment variables available are below. Note that these environment variables can be referred to in the task (in the ReleaseDefinition) by replacing "_" with "." e.g. AGENT_NAME environment variable can be referenced using Agent.Name in the ReleaseDefinition: [AGENT_DEPLOYMENTGROUPID] --> [277] [AGENT_DISABLELOGPLUGIN_TESTFILEPUBLISHERPLUGIN] --> [true] [AGENT_DISABLELOGPLUGIN_TESTRESULTLOGPLUGIN] --> [true] [AGENT_HOMEDIRECTORY] --> [C:\vstsagent\A1] [AGENT_ID] --> [61] [AGENT_JOBNAME] --> [Release] [AGENT_MACHINENAME] --> [xxx-HOST] [AGENT_NAME] --> [xxx-HOST] [AGENT_OS] --> [Windows_NT] [AGENT_OSARCHITECTURE] --> [X64] [AGENT_RELEASEDIRECTORY] --> [C:\vstsagent\A1_work\r2\a] [AGENT_RETAINDEFAULTENCODING] --> [false] [AGENT_ROOTDIRECTORY] --> [C:\vstsagent\A1_work] [AGENT_SERVEROMDIRECTORY] --> [C:\vstsagent\A1\externals\vstsom] [AGENT_TASKRESTRICTIONSENFORCEMENTMODE] --> [Enabled] [AGENT_TEMPDIRECTORY] --> [C:\vstsagent\A1_work_temp] [AGENT_TOOLSDIRECTORY] --> [C:\vstsagent\A1_work_tool] [AGENT_VERSION] --> [2.193.0] [AGENT_WORKFOLDER] --> [C:\vstsagent\A1_work] [ALLOWEDORIGINS] --> [http://localhost:5190,http://abc.dev.xxxxxx.uk,https://abc.dev.xxxxxx.uk] [AZURE_HTTP_USER_AGENT] --> [VSTS_1dd7021e-3fb4-4807-9680-81a07ccd8d8d_release_3_17701_55272_1] [BUILD_BUILDID] --> [107962] [BUILD_BUILDNUMBER] --> [master-0.4.4.5748] [BUILD_BUILDURI] --> [vstfs:///Build/Build/107962] [BUILD_DEFINITIONID] --> [55] [BUILD_DEFINITIONNAME] --> [master] [BUILD_PROJECTID] --> [6ac10869-9903-4f0a-bfd5-c60a4cb73a01] [BUILD_PROJECTNAME] --> [xxx-online] [BUILD_REPOSITORY_ID] --> [3dc8f8ad-5ab0-44a5-932f-ef7d1dd89ca1] [BUILD_REPOSITORY_NAME] --> [xxx.xxx] [BUILD_REPOSITORY_PROVIDER] --> [TfsGit] [BUILD_REQUESTEDFOR] --> [Cristian Dicu] [BUILD_REQUESTEDFORID] --> [5e017cc6-3d4d-6424-8247-d52402233c4f] [BUILD_SOURCEBRANCH] --> [refs/heads/master] [BUILD_SOURCEBRANCHNAME] --> [master] [BUILD_SOURCEVERSION] --> [c449cc0beee8b01f6365efac25ad059249af3ebf] [BUILD_TYPE] --> [Build] [COMPLIANCE_HTTPSREDIRECTION_ENFORCEHTTPSREDIRECTION] --> [false] [DEFAULTCONNECTION] --> [xxxx] [ENVIRONMENTSCOPE] --> [dev-main] [GIT_TERMINAL_PROMPT] --> [0] [HOSTINGCONFIG_BASEPATH] --> [/master/xxxweb/] [MSDEPLOY_HTTP_USER_AGENT] --> [VSTS_1dd7021e-3fb4-4807-9680-81a07ccd8d8d_release_3_17701_55272_1] [NEXTCLIENTCONTENTSECRET] --> [SUN SET AROUND THE CORNER ON THE BEECH] [NEXTCLIENTURL] --> [http://abc.dev.xxxxxx.uk/master/xxxweb] [RELEASEARTIFACTS$(BUILD_BUILDNUMBER)_BUILDID] --> [107962] [RELEASEARTIFACTS$(BUILD_BUILDNUMBER)_BUILDNUMBER] --> [master-0.4.4.5748] [RELEASEARTIFACTS$(BUILD_BUILDNUMBER)_BUILDURI] --> [vstfs:///Build/Build/107962] [RELEASEARTIFACTS$(BUILD_BUILDNUMBER)_DEFINITIONID] --> [55] [RELEASEARTIFACTS$(BUILD_BUILDNUMBER)_DEFINITIONNAME] --> [master] [RELEASEARTIFACTS$(BUILD_BUILDNUMBER)_PROJECTID] --> [6ac10869-9903-4f0a-bfd5-c60a4cb73a01] [RELEASEARTIFACTS$(BUILD_BUILDNUMBER)_PROJECTNAME] --> [xxx-online] [RELEASEARTIFACTS$(BUILD_BUILDNUMBER)_REPOSITORY_ID] --> [3dc8f8ad-5ab0-44a5-932f-ef7d1dd89ca1] [RELEASEARTIFACTS$(BUILD_BUILDNUMBER)_REPOSITORY_NAME] --> [xxx.xxx] [RELEASEARTIFACTS$(BUILD_BUILDNUMBER)_REPOSITORY_PROVIDER] --> [TfsGit] [RELEASEARTIFACTS$(BUILD_BUILDNUMBER)_REQUESTEDFOR] --> [Cristian Dicu] [RELEASEARTIFACTS$(BUILD_BUILDNUMBER)_REQUESTEDFORID] --> [5e017cc6-3d4d-6424-8247-d52402233c4f] [RELEASEARTIFACTS$(BUILD_BUILDNUMBER)_SOURCEBRANCH] --> [refs/heads/master] [RELEASEARTIFACTS$(BUILD_BUILDNUMBER)_SOURCEBRANCHNAME] --> [master] [RELEASEARTIFACTS$(BUILD_BUILDNUMBER)_SOURCEVERSION] --> [c449cc0beee8b01f6365efac25ad059249af3ebf] [RELEASEARTIFACTS$(BUILD_BUILDNUMBER)_TYPE] --> [Build] [RELEASE_ATTEMPTNUMBER] --> [1] [RELEASE_DEFINITIONENVIRONMENTID] --> [8] [RELEASE_DEFINITIONID] --> [3] [RELEASE_DEFINITIONNAME] --> [master] [RELEASE_DEFINITIONSNAPSHOTREVISION] --> [] [RELEASE_DEPLOYMENT_REQUESTEDFOR] --> [d f] [RELEASE_DEPLOYMENT_REQUESTEDFOREMAIL] --> [d.f@xxxyyy.co.uk] [RELEASE_DEPLOYMENT_REQUESTEDFORID] --> [c1fd07ec-987c-6493-8684-1577395c89ac] [RELEASE_DEPLOYMENT_STARTTIME] --> [2024-07-18 07:35:04Z] [RELEASE_DEPLOYMENTID] --> [44233] [RELEASE_DEPLOYPHASEID] --> [44289] [RELEASE_ENVIRONMENTID] --> [55272] [RELEASE_ENVIRONMENTNAME] --> [IIS Deploy] [RELEASE_ENVIRONMENTPROTECTEDTENANTS] --> [] [RELEASE_ENVIRONMENTS_ARTEFACT_CLEANUP_STATUS] --> [NotStarted] [RELEASE_ENVIRONMENTS_IIS_DEPLOY_STATUS] --> [InProgress] [RELEASE_ENVIRONMENTS_RELEASE_TO_AZURE_ARTEFACTS__STATUS] --> [NotStarted] [RELEASE_ENVIRONMENTS_TASK_RUNNER_INSTALLER_STATUS] --> [InProgress] [RELEASE_ENVIRONMENTURI] --> [vstfs:///ReleaseManagement/Environment/55272] [RELEASE_PRIMARYARTIFACTSOURCEALIAS] --> [master-0.4.4.5748] [RELEASE_REASON] --> [Manual] [RELEASE_RELEASEDESCRIPTION] --> [] [RELEASE_RELEASEID] --> [17701] [RELEASE_RELEASENAME] --> [master-0.4.4.5748 R-2] [RELEASE_RELEASEURI] --> [vstfs:///ReleaseManagement/Release/17701] [RELEASE_RELEASEWEBURL] --> [https://dev.azure.com/xxxxxx/6ac10869-9903-4f0a-bfd5-c60a4cb73a01/_release?releaseId=17701&_a=release-summary] [RELEASE_REQUESTEDFOR] --> [d f] [RELEASE_REQUESTEDFOREMAIL] --> [d.f@xxxyyy.co.uk] [RELEASE_REQUESTEDFORID] --> [c1fd07ec-987c-6493-8684-1577395c89ac] [RELEASE_SKIPARTIFACTSDOWNLOAD] --> [False] [RELEASE_TRIGGERINGARTIFACT_ALIAS] --> [] [REQUESTEDFORID] --> [c1fd07ec-987c-6493-8684-1577395c89ac] [ROOTSTORAGEFOLDER] --> [DefaultEndpointsProtocol=https;AccountName=xxxdevstorage;AccountKey=TF2usPLjC4LHmr3dmuoqWGp2HV9fJLZe/T5WRBRs/k6DhNHyuzVmlw/kOv48B+r+PkHrn89DUZAX+AStxU2rGw==;EndpointSuffix=core.windows.net;xxxRootScope=xxxdevstore\xxxroot] [SETTINGS_xxxENTICATION_xxxENTICATIONBASEURL] --> [http://abc.dev.xxxxxx.uk/master/xxxservice] [SETTINGS_xxxENTICATION_NEXTCLIENTCONTENTSECRET] --> [SUN SET AROUND THE CORNER ON THE BEECH] [SYSTEM] --> [deployment] [SYSTEM_ARTIFACTSDIRECTORY] --> [C:\vstsagent\A1_work\r2\a] [SYSTEM_COLLECTIONID] --> [1dd7021e-3fb4-4807-9680-81a07ccd8d8d] [SYSTEM_COLLECTIONURI] --> [https://vsrm.dev.azure.com/xxxxxx/] [SYSTEM_CULTURE] --> [en-US] [SYSTEM_DEFAULTWORKINGDIRECTORY] --> [C:\vstsagent\A1_work\r2\a] [SYSTEM_ENABLEACCESSTOKEN] --> [False] [SYSTEM_HOSTTYPE] --> [deployment] [SYSTEM_JOBID] --> [6ca54e99-ab93-4ebf-af2d-918f61060758] [SYSTEM_JOBPARALLELISMTAG] --> [Private] [SYSTEM_OIDCREQUESTURI] --> [https://vsrm.dev.azure.com/xxxxxx/6ac10869-9903-4f0a-bfd5-c60a4cb73a01/_apis/distributedtask/hubs/deployment/plans/0854b812-309d-4c8b-9146-67fc42c951bc/jobs/6ca54e99-ab93-4ebf-af2d-918f61060758/oidctoken] [SYSTEM_PIPELINESTARTTIME] --> [2024-07-18 08:35:05+01:00] [SYSTEM_PLANID] --> [0854b812-309d-4c8b-9146-67fc42c951bc] [SYSTEM_SERVERTYPE] --> [Hosted] [SYSTEM_TASKDEFINITIONSURI] --> [https://dev.azure.com/xxxxxx/] [SYSTEM_TEAMFOUNDATIONCOLLECTIONURI] --> [https://dev.azure.com/xxxxxx/] [SYSTEM_TEAMFOUNDATIONSERVERURI] --> [https://vsrm.dev.azure.com/xxxxxx/] [SYSTEM_TEAMPROJECT] --> [xxx-online] [SYSTEM_TEAMPROJECTID] --> [6ac10869-9903-4f0a-bfd5-c60a4cb73a01] [SYSTEM_TIMELINEID] --> [0854b812-309d-4c8b-9146-67fc42c951bc] [SYSTEM_WORKFOLDER] --> [C:\vstsagent\A1_work] [xxxREPORTSERVICEURI] --> [http://abc.dev.xxxxxx.uk/master/xxxreportservice/] [xxxSERVICEURI] --> [http://abc.dev.xxxxxx.uk/master/xxxservices/] [WEBOPTIMIZER_ENABLECACHING] --> [false] 2024-07-18T07:35:13.3433214Z Creating artifacts directory: C:\vstsagent\A1_work\r2\a 2024-07-18T07:35:13.3893367Z Created artifacts directory: C:\vstsagent\A1_work\r2\a 2024-07-18T07:35:13.4021520Z Download all required tasks. 2024-07-18T07:35:13.4795870Z Checking job knob settings. 2024-07-18T07:35:13.4819165Z Finished checking job knob settings. 2024-07-18T07:35:13.5830564Z Start tracking orphan processes. 2024-07-18T07:35:13.5950745Z ##[section]Finishing: Initialize job 2024-07-18T07:35:13.6654603Z ##[section]Starting: Download artifact - master-0.4.4.5748 - ComponentPackages 2024-07-18T07:35:13.8517643Z ============================================================================== 2024-07-18T07:35:13.8519922Z Task : Download artifacts from file share 2024-07-18T07:35:13.8522003Z Description : Download artifacts from a file share, like \share\drop 2024-07-18T07:35:13.8522971Z Version : 1.242.1 2024-07-18T07:35:13.8524642Z xxxor : Microsoft Corporation 2024-07-18T07:35:13.8526812Z Help : https://docs.microsoft.com/azure/devops/pipelines/tasks/utility/download-fileshare-artifacts 2024-07-18T07:35:13.8528319Z ============================================================================== 2024-07-18T07:35:14.6982405Z Downloading artifact ComponentPackages from: \tfsbuildbox2\drops\xxx\az\master\master-0.4.4.5748\ComponentPackages 2024-07-18T07:35:14.7542189Z Downloading ComponentPackages\dacpacs-master-0.4.4.5748-pack.zip to C:\vstsagent\A1_work\r2\a\master-0.4.4.5748\ComponentPackages\dacpacs-master-0.4.4.5748-pack.zip 2024-07-18T07:35:15.7701738Z Downloading ComponentPackages\data-master-0.4.4.5748-pack.zip to C:\vstsagent\A1_work\r2\a\master-0.4.4.5748\ComponentPackages\data-master-0.4.4.5748-pack.zip 2024-07-18T07:35:15.7709376Z Downloading ComponentPackages\database-master-0.4.4.5748-pack.zip to C:\vstsagent\A1_work\r2\a\master-0.4.4.5748\ComponentPackages\database-master-0.4.4.5748-pack.zip 2024-07-18T07:35:15.7736625Z Downloading ComponentPackages\xxx-master-0.4.4.5748-pack.zip to C:\vstsagent\A1_work\r2\a\master-0.4.4.5748\ComponentPackages\xxx-master-0.4.4.5748-pack.zip 2024-07-18T07:35:15.7818993Z Downloading ComponentPackages\report-master-0.4.4.5748-pack.zip to C:\vstsagent\A1_work\r2\a\master-0.4.4.5748\ComponentPackages\report-master-0.4.4.5748-pack.zip 2024-07-18T07:35:15.7826231Z Downloading ComponentPackages\reportDesigner-master-0.4.4.5748-pack.zip to C:\vstsagent\A1_work\r2\a\master-0.4.4.5748\ComponentPackages\reportDesigner-master-0.4.4.5748-pack.zip 2024-07-18T07:35:15.7832521Z Downloading ComponentPackages\xxx.nextui-master-0.4.4.5748-pack.zip to C:\vstsagent\A1_work\r2\a\master-0.4.4.5748\ComponentPackages\xxx.nextui-master-0.4.4.5748-pack.zip 2024-07-18T07:35:15.7838718Z Downloading ComponentPackages\xxx-master-0.4.4.5748-pack.zip to C:\vstsagent\A1_work\r2\a\master-0.4.4.5748\ComponentPackages\xxx-master-0.4.4.5748-pack.zip 2024-07-18T07:35:15.9069236Z Downloaded ComponentPackages\xxx-master-0.4.4.5748-pack.zip to C:\vstsagent\A1_work\r2\a\master-0.4.4.5748\ComponentPackages\xxx-master-0.4.4.5748-pack.zip 2024-07-18T07:35:16.3942205Z Downloaded ComponentPackages\reportDesigner-master-0.4.4.5748-pack.zip to C:\vstsagent\A1_work\r2\a\master-0.4.4.5748\ComponentPackages\reportDesigner-master-0.4.4.5748-pack.zip 2024-07-18T07:35:16.6021759Z Downloaded ComponentPackages\data-master-0.4.4.5748-pack.zip to C:\vstsagent\A1_work\r2\a\master-0.4.4.5748\ComponentPackages\data-master-0.4.4.5748-pack.zip 2024-07-18T07:35:16.6049025Z Downloaded ComponentPackages\xxx-master-0.4.4.5748-pack.zip to C:\vstsagent\A1_work\r2\a\master-0.4.4.5748\ComponentPackages\xxx-master-0.4.4.5748-pack.zip 2024-07-18T07:35:16.7497131Z Downloaded ComponentPackages\report-master-0.4.4.5748-pack.zip to C:\vstsagent\A1_work\r2\a\master-0.4.4.5748\ComponentPackages\report-master-0.4.4.5748-pack.zip 2024-07-18T07:35:17.1060734Z Downloaded ComponentPackages\xxx.nextui-master-0.4.4.5748-pack.zip to C:\vstsagent\A1_work\r2\a\master-0.4.4.5748\ComponentPackages\xxx.nextui-master-0.4.4.5748-pack.zip 2024-07-18T07:35:19.6265606Z Downloaded ComponentPackages\database-master-0.4.4.5748-pack.zip to C:\vstsagent\A1_work\r2\a\master-0.4.4.5748\ComponentPackages\database-master-0.4.4.5748-pack.zip 2024-07-18T07:35:20.4153899Z Downloaded ComponentPackages\dacpacs-master-0.4.4.5748-pack.zip to C:\vstsagent\A1_work\r2\a\master-0.4.4.5748\ComponentPackages\dacpacs-master-0.4.4.5748-pack.zip 2024-07-18T07:35:21.1324023Z Total Files: 8, Processed: 8, Skipped: 0, Failed: 0, Download time: 6.409 secs, Download size: 180.961MB 2024-07-18T07:35:21.2218111Z Successfully downloaded artifacts to C:\vstsagent\A1_work\r2\a/master-0.4.4.5748/ 2024-07-18T07:35:21.2296458Z ##[section]Finishing: Download artifact - master-0.4.4.5748 - ComponentPackages 2024-07-18T07:35:21.2451896Z ##[section]Starting: Deploy xxxentication Service 2024-07-18T07:35:21.2741188Z ============================================================================== 2024-07-18T07:35:21.2742194Z Task : IIS web app deploy 2024-07-18T07:35:21.2743101Z Description : Deploy a website or web application using Web Deploy 2024-07-18T07:35:21.2743905Z Version : 0.242.1 2024-07-18T07:35:21.2744612Z xxxor : Microsoft Corporation 2024-07-18T07:35:21.2745834Z Help : https://docs.microsoft.com/azure/devops/pipelines/tasks/deploy/iis-web-app-deployment-on-machine-group 2024-07-18T07:35:21.2747165Z ============================================================================== 2024-07-18T07:35:32.1623275Z [command]C:\vstsagent\A1_work_tasks\IISWebAppDeploymentOnMachineGroup_1b467810-6725-4b6d-accd-886174c09bba\0.242.1\node_modules\azure-pipelines-tasks-webdeployment-common\7zip\7zip\7z.exe x -oC:\vstsagent\A1_work_temp\temp_web_package_7417461268205914 C:\vstsagent\A1_work\r2\a\master-0.4.4.5748\ComponentPackages\xxx-master-0.4.4.5748-pack.zip 2024-07-18T07:35:32.2102613Z 2024-07-18T07:35:32.2104462Z 7-Zip 23.01 (x64) : Copyright (c) 1999-2023 Igor Pavlov : 2023-06-20 2024-07-18T07:35:32.2105501Z 2024-07-18T07:35:32.2106668Z Scanning the drive for archives: 2024-07-18T07:35:32.2107984Z 1 file, 11955128 bytes (12 MiB) 2024-07-18T07:35:32.2108684Z 2024-07-18T07:35:32.2110449Z Extracting archive: C:\vstsagent\A1_work\r2\a\master-0.4.4.5748\ComponentPackages\xxx-master-0.4.4.5748-pack.zip 2024-07-18T07:35:34.9102741Z -- 2024-07-18T07:35:34.9104683Z Path = C:\vstsagent\A1_work\r2\a\master-0.4.4.5748\ComponentPackages\xxx-master-0.4.4.5748-pack.zip 2024-07-18T07:35:34.9106056Z Type = zip 2024-07-18T07:35:34.9107040Z Physical Size = 11955128 2024-07-18T07:35:34.9107795Z 2024-07-18T07:35:34.9200146Z Everything is Ok 2024-07-18T07:35:34.9234099Z 2024-07-18T07:35:34.9256749Z Files: 295 2024-07-18T07:35:34.9258183Z Size: 45544048 2024-07-18T07:35:34.9259079Z Compressed: 11955128 2024-07-18T07:35:34.9800107Z ##[error]Error: Malicious entry: bin\xxx.dll 2024-07-18T07:35:34.9948481Z ##[section]Finishing: Deploy xxxentication Service 2024-07-18T07:35:35.0271183Z ##[section]Starting: Create xxx.active.json 2024-07-18T07:35:35.0815054Z ============================================================================== 2024-07-18T07:35:35.0815801Z Task : File Creator 2024-07-18T07:35:35.0816220Z Description : This task allows you to create a file. 2024-07-18T07:35:35.0816600Z Version : 5.0.0 2024-07-18T07:35:35.0816945Z xxxor : Elio Struyf 2024-07-18T07:35:35.0818486Z Help : 2024-07-18T07:35:35.0818923Z ============================================================================== 2024-07-18T07:35:35.5032216Z File path: C:\inetpub\xxx\dev-rm\master\xxxservices\xxx.active.json 2024-07-18T07:35:35.5045088Z File created 2024-07-18T07:35:35.5055879Z (node:7700) Warning: Use Cipheriv for counter mode of aes-256-ctr 2024-07-18T07:35:35.5056961Z (node:7700) Warning: Use Cipheriv for counter mode of aes-256-ctr 2024-07-18T07:35:35.5058177Z (node:7700) Warning: Use Cipheriv for counter mode of aes-256-ctr 2024-07-18T07:35:35.5059297Z (node:7700) Warning: Use Cipheriv for counter mode of aes-256-ctr 2024-07-18T07:35:35.5060239Z (node:7700) Warning: Use Cipheriv for counter mode of aes-256-ctr 2024-07-18T07:35:35.5061420Z (node:7700) Warning: Use Cipheriv for counter mode of aes-256-ctr 2024-07-18T07:35:35.5062202Z (node:7700) Warning: Use Cipheriv for counter mode of aes-256-ctr 2024-07-18T07:35:35.5062978Z (node:7700) Warning: Use Cipheriv for counter mode of aes-256-ctr 2024-07-18T07:35:35.5131469Z ##[section]Finishing: Create xxx.active.json 2024-07-18T07:35:35.5231290Z ##[section]Starting: Finalize Job 2024-07-18T07:35:35.5283215Z Cleaning up task key 2024-07-18T07:35:35.5286659Z Start cleaning up orphan processes. 2024-07-18T07:35:35.5310051Z ##[section]Finishing: Finalize Job 2024-07-18T07:35:35.5376022Z ##[section]Finishing: Release

Repro steps

This is a release pipeline using the classic editor. Deploying a web app on server hosting IIS via deployment group.
djfoz commented 1 month ago

https://developercommunity.visualstudio.com/t/IIS-web-app-deploy-version-0-task-cla/10705514?q=Malicious+entry

Gbenari commented 1 month ago

We are having the exact same issue. We cannot deploy any of our projects that use the task IISWebAppDeploymentOnMachineGroup We are really stuck!

aleksandrlevochkin commented 1 month ago

IISWebAppDeploymentOnMachineGroup has been rolled back to the previous version, please check if the issue still persists for you

djfoz commented 1 month ago

@aleksandrlevochkin

2024-07-19T15:11:18.5403141Z Description : Deploy a website or web application using Web Deploy 2024-07-19T15:11:18.5404407Z Version : 0.235.1 2024-07-19T15:11:18.5405200Z Author : Microsoft Corporation

Seems to be working again now, rollback looks to be working. Thanks!

klabranche commented 1 month ago

Indeed. We are back to 0.235.1 and working.

Gbenari commented 1 month ago

Yes. We are able to deploy again. Thank you for the rollback!