From 7265b4068d0a9b83b34cc7b802041e37199ba90f Mon Sep 17 00:00:00 2001 From: Jacob Vosmaer Date: Sat, 2 Nov 2013 17:32:14 +0100 Subject: [PATCH] Add security update info to 6.0-to-6.2.md --- doc/update/6.0-to-6.2.md | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/doc/update/6.0-to-6.2.md b/doc/update/6.0-to-6.2.md index 656bcaf..00a27fc 100644 --- a/doc/update/6.0-to-6.2.md +++ b/doc/update/6.0-to-6.2.md @@ -1,5 +1,8 @@ # From 6.0 to 6.2 +## Notice +Security vulnerabilities CVE-2013-4490 and CVE-2013-4489 have been patched in the latest version of GitLab 6.2. + # In 6.1 we remove a lot of deprecated code. # You should update to 6.0 before installing 6.1 or higher so all the necessary conversions are run. @@ -28,7 +31,7 @@ sudo -u git -H bundle exec rake gitlab:backup:create RAILS_ENV=production ```bash cd /home/git/gitlab sudo -u git -H git fetch -sudo -u git -H git checkout 6-2-stable +sudo -u git -H git checkout 6-2-stable # Latest version of 6-2-stable addresses CVE-2013-4489 ``` @@ -44,7 +47,7 @@ sudo apt-get install logrotate ```bash cd /home/git/gitlab-shell sudo -u git -H git fetch -sudo -u git -H git checkout v1.7.4 +sudo -u git -H git checkout v1.7.4 # Addresses CVE-2013-4490 ``` ### 5. Install libs, migrations, etc. -- libgit2 0.21.2