5.4 should be ending support when 5.7 is fully released, but if this probably hotfix can be rolled out before the the end of support it could be included.
because the Microsoft.Build package version is Hard referenced in the binaries (*.csproj) that Epic distributes through the Epic Games Launcher.
currently work around:
- in the NuGet tool ( in the brown/orange bar at the top of the Solution Explorer there is a blue hyperlink )
- go to the Microsoft.Build in the list on the left side of the window (there should be a yellow caution sign) take note of the number it indicates as the current version (for example for UE5.5.4 the package version was
17.11.4) - in the list on the top right corner sort by “Version” find the segment that has the Yellow Caution signs, and select their associated checkboxes (I find that not selecting AutomationTool, and UnrealBuildTool will crash VS less)
- in the drop down box that says next to the button reading “Install” select the version based on https://github.com/advisories/GHSA-w3q9-fxm7-j8fq (it should just be 1 or 2 lines up from the one currently selected for 5.5 the new version
17.11.28) giving Visual Studio permission to overwrite the locked files when prompted. -
- if you select the wrong package version at this stage several hard referenced things will break meaning things like Unreal Build Tool will not be replaced or function, and you will need to revert them to the correct version family (the good news is it can still be through the same NuGet tool just you would need to know the package version)
- when the page refreshes if you didn’t do all of the packages at once do the remaining ones (I would still suggest doing Unreal Build Tool on its own as just the Automation Tool and Unreal Build Tool together as the last ones crashed a couple systems)
- Restart Visual Studio, and attempt a Build
now if your build failed telling you that “Access is Denied” to a file, and the part that Epic would need to potentially address:
- in your project attempt to do a Build
- you will get a Error box about ‘permissions denied’
- you now need to go play whack a mole with a permissions on a few .csproj files as not “read only” in the
“[Engine version]/Engine/Source/Programs/*" -
AutomationTool/AutomationTool.csprojAutomationTool/Turnkey/Turnkey.Automation.csprojUnrealBuildTool/UnrealBuildTool.csproj
- after each on attempting a build and don’t forget to set to QA because changing build tools can break things
the Update from Epic Games end looks to be updating these .csproj files (probably just with the NuGet Package Manager)