Welcome to mirror list, hosted at ThFree Co, Russian Federation.

gitlab.com/gitlab-org/gitlab-foss.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>2013-11-18 23:12:32 +0400
committerDmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>2013-11-18 23:12:32 +0400
commit6d125d477169f93834a1b6a78da39baa77f41968 (patch)
tree8c6016a7229c05235c40c043cbbf7740df9f29f6 /CHANGELOG
parentb59ba979984072af6dfa89121eb12686c83ac44d (diff)
parent100615896b6ef67b56dba598739bc01992b14399 (diff)
Merge branch 'cve_changelog' of /home/git/repositories/gitlab/gitlabhq
Diffstat (limited to 'CHANGELOG')
-rw-r--r--CHANGELOG24
1 files changed, 24 insertions, 0 deletions
diff --git a/CHANGELOG b/CHANGELOG
index baddbbf747b..4f3651994a9 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -19,6 +19,22 @@ v 6.3.0
- API: create/update repo files
- Admin can transfer project to any namespace
+v 6.2.4
+ - Security: Cast API private_token to string (CVE-2013-4580)
+ - Security: Require gitlab-shell 1.7.8 (CVE-2013-4581, CVE-2013-4582, CVE-2013-4583)
+ - Fix for Git SSH access for LDAP users
+
+v 6.2.3
+ - Security: More protection against CVE-2013-4489
+ - Security: Require gitlab-shell 1.7.4 (CVE-2013-4490, CVE-2013-4546)
+ - Fix sidekiq rake tasks
+
+v 6.2.2
+ - Security: Update gitlab_git (CVE-2013-4489)
+
+v 6.2.1
+ - Security: Fix issue with generated passwords for new users
+
v 6.2.0
- Public project pages are now visible to everyone (files, issues, wik, etc.)
THIS MEANS YOUR ISSUES AND WIKI FOR PUBLIC PROJECTS ARE PUBLICLY VISIBLE AFTER THE UPGRADE
@@ -104,6 +120,14 @@ v 6.0.0
- Improved MR comments logic
- Render readme file for projects in public area
+v 5.4.2
+ - Security: Cast API private_token to string (CVE-2013-4580)
+ - Security: Require gitlab-shell 1.7.8 (CVE-2013-4581, CVE-2013-4582, CVE-2013-4583)
+
+v 5.4.1
+ - Security: Fixes for CVE-2013-4489
+ - Security: Require gitlab-shell 1.7.4 (CVE-2013-4490, CVE-2013-4546)
+
v 5.4.0
- Ability to edit own comments
- Documentation improvements