« Changelog History


Gitlab CI v15.2.4 Release Notes

Release Date: 2022-08-30 // 9 months ago

  • 🔒 Security (18 changes)

    • 🔒 [No overriding methods for Sawyer class](gitlab-org/security/[email protected]) ([merge request](gitlab-org/security/gitlab!2755))
    • ⚡️ [Update Oj to v3.13.21](gitlab-org/security/[email protected]) ([merge request](gitlab-org/security/gitlab!2729))
    • 🔒 [Bump yajl-ruby gem version](gitlab-org/security/[email protected]) ([merge request](gitlab-org/security/gitlab!2689))
    • 🔒 [Prevent long loops when generating suggested branch name](gitlab-org/security/[email protected]) ([merge request](gitlab-org/security/gitlab!2744))
    • 🔒 [IDOR in Zentao integration issue show page](gitlab-org/security/[email protected]) ([merge request](gitlab-org/security/gitlab!2741))
    • 🔒 [Patch VULNDB-255039 (potential Rack cache poisoning)](gitlab-org/security/[email protected]) ([merge request](gitlab-org/security/gitlab!2694))
    • 🔒 [HTML escape the label background color](gitlab-org/security/[email protected]) ([merge request](gitlab-org/security/gitlab!2720))
    • 🔒 [Sandbox jupyter notebook HTML output](gitlab-org/security/[email protected]) ([merge request](gitlab-org/security/gitlab!2711))
    • 🔒 [Fix unauthorized GFM references in Incident Timeline](gitlab-org/security/[email protected]) ([merge request](gitlab-org/security/gitlab!2708))
    • ⚡️ [Optimize handling repositories with huge trees](gitlab-org/security/[email protected]) ([merge request](gitlab-org/security/gitlab!2666))
    • 🔒 [Parse commit trailers without using regexp](gitlab-org/security/[email protected]) ([merge request](gitlab-org/security/gitlab!2700))
    • 🔒 [Check for pathological markdown input](gitlab-org/security/[email protected]) ([merge request](gitlab-org/security/gitlab!2732))
    • 🔒 [Replaced smooshpack to fix the vulnerability in LivePreview](gitlab-org/security/[email protected]) ([merge request](gitlab-org/security/gitlab!2662))
    • ⚡️ [Update package auth for group IP allowlist](gitlab-org/security/[email protected]) ([merge request](gitlab-org/security/gitlab!2684))
    • 🔒 [Don't show pipeline status](gitlab-org/security/[email protected]) ([merge request](gitlab-org/security/gitlab!2680))
    • 🔒 [Sanitize img attributes in Banzai::Filter::ImageLinkFilter](gitlab-org/security/[email protected]) ([merge request](gitlab-org/security/gitlab!2676))
    • 🔒 [Validate description length for snippets](gitlab-org/security/[email protected]) ([merge request](gitlab-org/security/gitlab!2703))
    • 🔒 [Prevent brute force vuln for Git over HTTP(S) requests](gitlab-org/security/[email protected]) ([merge request](gitlab-org/security/gitlab!2717))