3 ms·

It would be nice to know what versions are affected now but I can understand that they may not want to reveal that until it's patched to prevent any unauthorize

It would be nice to know what versions are affected now but I can understand that they may not want to reveal that until it's patched to prevent any unauthorized access of private repositories.

pfg 10y ago
From an email they sent out two days ago: The following versions are affected: 8.7.0 8.6.0 through 8.6.7 8.5.0 through 8.5.11 8.4.0 through 8.4.9 8.3.0 through 8.3.8 8.2.0 through 8.2.4 Not sure why this wasn't included here.
- markwakeford 10y ago
  Is it a specific mailing list ? I didn't get anything.
  - pfg 10y ago
    IIRC it's the "Security Notices" list from https://about.gitlab.com/contact/ https://about.gitlab.com/contact/
    - eadz 10y ago
      Is it just me or does the Security Notices not link anywhere? (Chrome)
  - mynewtb 10y ago
    I got it as standard user several hours ago.
- puddintane 10y ago
  Thank you mam/sir!* I should jump on that mailing list ASAP