Welcome to mirror list, hosted at ThFree Co, Russian Federation.

gitlab.com/gitlab-org/gitlab-foss.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJacob Vosmaer <contact@jacobvosmaer.nl>2013-11-18 20:59:09 +0400
committerJacob Vosmaer <contact@jacobvosmaer.nl>2013-11-18 20:59:09 +0400
commit100615896b6ef67b56dba598739bc01992b14399 (patch)
tree1350645b4c4d5979c2c1657a6fade93d6af2192c /CHANGELOG
parent83b0a24e0520c468a5bfe7cff4b6df921395172b (diff)
Add security patch releases to CHANGELOG
Diffstat (limited to 'CHANGELOG')
-rw-r--r--CHANGELOG24
1 files changed, 24 insertions, 0 deletions
diff --git a/CHANGELOG b/CHANGELOG
index 52441aad2c2..7f3e622c29e 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -12,6 +12,22 @@ v 6.3.0
- API: dropped default_branch attribute from project during creation
- Project default_branch is not stored in db any more. It takes from repo now.
+v 6.2.4
+ - Security: Cast API private_token to string (CVE-2013-4580)
+ - Security: Require gitlab-shell 1.7.8 (CVE-2013-4581, CVE-2013-4582, CVE-2013-4583)
+ - Fix for Git SSH access for LDAP users
+
+v 6.2.3
+ - Security: More protection against CVE-2013-4489
+ - Security: Require gitlab-shell 1.7.4 (CVE-2013-4490, CVE-2013-4546)
+ - Fix sidekiq rake tasks
+
+v 6.2.2
+ - Security: Update gitlab_git (CVE-2013-4489)
+
+v 6.2.1
+ - Security: Fix issue with generated passwords for new users
+
v 6.2.0
- Public project pages are now visible to everyone (files, issues, wik, etc.)
THIS MEANS YOUR ISSUES AND WIKI FOR PUBLIC PROJECTS ARE PUBLICLY VISIBLE AFTER THE UPGRADE
@@ -97,6 +113,14 @@ v 6.0.0
- Improved MR comments logic
- Render readme file for projects in public area
+v 5.4.2
+ - Security: Cast API private_token to string (CVE-2013-4580)
+ - Security: Require gitlab-shell 1.7.8 (CVE-2013-4581, CVE-2013-4582, CVE-2013-4583)
+
+v 5.4.1
+ - Security: Fixes for CVE-2013-4489
+ - Security: Require gitlab-shell 1.7.4 (CVE-2013-4490, CVE-2013-4546)
+
v 5.4.0
- Ability to edit own comments
- Documentation improvements