Commit 100615896b6ef67b56dba598739bc01992b14399
1 parent
83b0a24e
Exists in
master
and in
4 other branches
Add security patch releases to CHANGELOG
Showing
1 changed file
with
24 additions
and
0 deletions
Show diff stats
CHANGELOG
| @@ -12,6 +12,22 @@ v 6.3.0 | @@ -12,6 +12,22 @@ v 6.3.0 | ||
| 12 | - API: dropped default_branch attribute from project during creation | 12 | - API: dropped default_branch attribute from project during creation |
| 13 | - Project default_branch is not stored in db any more. It takes from repo now. | 13 | - Project default_branch is not stored in db any more. It takes from repo now. |
| 14 | 14 | ||
| 15 | +v 6.2.4 | ||
| 16 | + - Security: Cast API private_token to string (CVE-2013-4580) | ||
| 17 | + - Security: Require gitlab-shell 1.7.8 (CVE-2013-4581, CVE-2013-4582, CVE-2013-4583) | ||
| 18 | + - Fix for Git SSH access for LDAP users | ||
| 19 | + | ||
| 20 | +v 6.2.3 | ||
| 21 | + - Security: More protection against CVE-2013-4489 | ||
| 22 | + - Security: Require gitlab-shell 1.7.4 (CVE-2013-4490, CVE-2013-4546) | ||
| 23 | + - Fix sidekiq rake tasks | ||
| 24 | + | ||
| 25 | +v 6.2.2 | ||
| 26 | + - Security: Update gitlab_git (CVE-2013-4489) | ||
| 27 | + | ||
| 28 | +v 6.2.1 | ||
| 29 | + - Security: Fix issue with generated passwords for new users | ||
| 30 | + | ||
| 15 | v 6.2.0 | 31 | v 6.2.0 |
| 16 | - Public project pages are now visible to everyone (files, issues, wik, etc.) | 32 | - Public project pages are now visible to everyone (files, issues, wik, etc.) |
| 17 | THIS MEANS YOUR ISSUES AND WIKI FOR PUBLIC PROJECTS ARE PUBLICLY VISIBLE AFTER THE UPGRADE | 33 | THIS MEANS YOUR ISSUES AND WIKI FOR PUBLIC PROJECTS ARE PUBLICLY VISIBLE AFTER THE UPGRADE |
| @@ -97,6 +113,14 @@ v 6.0.0 | @@ -97,6 +113,14 @@ v 6.0.0 | ||
| 97 | - Improved MR comments logic | 113 | - Improved MR comments logic |
| 98 | - Render readme file for projects in public area | 114 | - Render readme file for projects in public area |
| 99 | 115 | ||
| 116 | +v 5.4.2 | ||
| 117 | + - Security: Cast API private_token to string (CVE-2013-4580) | ||
| 118 | + - Security: Require gitlab-shell 1.7.8 (CVE-2013-4581, CVE-2013-4582, CVE-2013-4583) | ||
| 119 | + | ||
| 120 | +v 5.4.1 | ||
| 121 | + - Security: Fixes for CVE-2013-4489 | ||
| 122 | + - Security: Require gitlab-shell 1.7.4 (CVE-2013-4490, CVE-2013-4546) | ||
| 123 | + | ||
| 100 | v 5.4.0 | 124 | v 5.4.0 |
| 101 | - Ability to edit own comments | 125 | - Ability to edit own comments |
| 102 | - Documentation improvements | 126 | - Documentation improvements |