nixpkgs/pkgs/applications/version-management/gitlab
Florian Klink 5bf07d665f gitlab: 12.5.3 -> 12.5.4
https://about.gitlab.com/blog/2019/12/10/critical-security-release-gitlab-12-5-4-released/

Insufficient parameter sanitization for Maven package registry could lead to privilege escalation and remote code execution vulnerabilities under certain conditions. The issue is now mitigated in the latest release and is assigned CVE-2019-19628.

When transferring a public project to a private group, private code would be disclosed via the Group Search API provided by Elasticsearch integration. The issue is now mitigated in the latest release and is assigned CVE-2019-19629.

The Git dependency has been upgraded to 2.22.2 in order to apply security fixes detailed here.

CVE-2019-19604 was identified by the GitLab Security Research team. For more information on that issue, please visit the GitLab Security Research Advisory

closes #75506.
2019-12-11 15:16:36 +01:00
..
gitaly gitlab: 12.5.2 -> 12.5.3 2019-12-04 11:30:40 +01:00
gitlab-shell gitlab: 12.5.2 -> 12.5.3 2019-12-04 11:30:40 +01:00
gitlab-workhorse gitlab-workhorse: 8.14.0 -> 8.14.1 2019-11-28 00:18:03 +01:00
rubyEnv gitlab: 12.4.3 -> 12.5.0 2019-11-26 17:32:01 +01:00
data.json gitlab: 12.5.3 -> 12.5.4 2019-12-11 15:16:36 +01:00
default.nix gitlab: 12.4.3 -> 12.5.0 2019-11-26 17:32:01 +01:00
fix-grpc-ar.patch gitlab: 11.10.8 -> 12.0.3 2019-07-14 23:03:39 +02:00
remove-hardcoded-locations.patch gitlab: 12.3.5 -> 12.4.0 2019-10-28 14:56:37 +01:00
reset_token.rake gitlab: add rake task to delete tokens 2017-03-21 13:16:54 +01:00
update.py Revert "gitlab: fix updater shebang" 2019-11-28 16:15:07 +01:00
yarnPkgs.nix gitlab: 12.4.3 -> 12.5.0 2019-11-26 17:32:01 +01:00