« Changelog History


Gitlab CI v12.0.3 Release Notes

Release Date: 2019-06-27 // almost 5 years ago

    • No changes.

      🔒 Security (10 changes)

    • Persist tmp snippet uploads at users.

    • Gate MR head_pipeline behind read_pipeline ability.

    • 🛠 Fix DoS vulnerability in color validation regex.

    • 🔦 Expose merge requests count based on user access.

    • 🛠 Fix Denial of Service for comments when rendering issues/MR comments.

    • ➕ Add missing authorizations in GraphQL.

    • 🚅 Disable Rails SQL query cache when applying service templates.

    • Prevent Billion Laughs attack.

    • Correctly check permissions when creating snippet notes.

    • 🔀 Prevent the detection of merge request templates by unauthorized users.