Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
G
gitlab-ce
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Issues
0
Issues
0
List
Boards
Labels
Milestones
Merge Requests
1
Merge Requests
1
Analytics
Analytics
Repository
Value Stream
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Commits
Issue Boards
Open sidebar
nexedi
gitlab-ce
Commits
15e305ed
Commit
15e305ed
authored
Jan 07, 2021
by
GitLab Bot
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Add latest changes from gitlab-org/security/gitlab@13-7-stable-ee
parent
d4d523a5
Changes
9
Hide whitespace changes
Inline
Side-by-side
Showing
9 changed files
with
14 additions
and
36 deletions
+14
-36
CHANGELOG.md
CHANGELOG.md
+13
-0
GITALY_SERVER_VERSION
GITALY_SERVER_VERSION
+1
-1
changelogs/unreleased/security-id-forbid-public-cache-for-private-repos.yml
...sed/security-id-forbid-public-cache-for-private-repos.yml
+0
-5
changelogs/unreleased/security-implicit-confidential.yml
changelogs/unreleased/security-implicit-confidential.yml
+0
-5
changelogs/unreleased/security-nuget-regex-update-redos.yml
changelogs/unreleased/security-nuget-regex-update-redos.yml
+0
-5
changelogs/unreleased/security-package-regex-dos.yml
changelogs/unreleased/security-package-regex-dos.yml
+0
-5
changelogs/unreleased/security-pages-1-33.yml
changelogs/unreleased/security-pages-1-33.yml
+0
-5
changelogs/unreleased/security-trusted-confidential-apps.yml
changelogs/unreleased/security-trusted-confidential-apps.yml
+0
-5
changelogs/unreleased/security-workhorse-prometheus-13-7.yml
changelogs/unreleased/security-workhorse-prometheus-13-7.yml
+0
-5
No files found.
CHANGELOG.md
View file @
15e305ed
...
...
@@ -2,6 +2,19 @@
documentation
](
doc/development/changelog.md
)
for instructions on adding your own
entry.
## 13.7.2 (2021-01-07)
### Security (7 changes)
-
Forbid public cache for private repos.
-
Deny implicit flow for confidential apps.
-
Update NuGet regular expression to protect against ReDoS.
-
Fix regular expression backtracking issue in package name validation.
-
Fix stealing API token from GitLab Pages and DoS Prometheus through GitLab Pages.
-
Update trusted OAuth applications to set them as confidential.
-
Upgrade Workhorse to 8.58.2.
## 13.7.1 (2020-12-23)
### Fixed (1 change)
...
...
GITALY_SERVER_VERSION
View file @
15e305ed
13.7.1
\ No newline at end of file
13.7.2
\ No newline at end of file
changelogs/unreleased/security-id-forbid-public-cache-for-private-repos.yml
deleted
100644 → 0
View file @
d4d523a5
---
title
:
Forbid public cache for private repos
merge_request
:
author
:
type
:
security
changelogs/unreleased/security-implicit-confidential.yml
deleted
100644 → 0
View file @
d4d523a5
---
title
:
Deny implicit flow for confidential apps
merge_request
:
author
:
type
:
security
changelogs/unreleased/security-nuget-regex-update-redos.yml
deleted
100644 → 0
View file @
d4d523a5
---
title
:
Update NuGet regular expression to protect against ReDoS
merge_request
:
author
:
type
:
security
changelogs/unreleased/security-package-regex-dos.yml
deleted
100644 → 0
View file @
d4d523a5
---
title
:
Fix regular expression backtracking issue in package name validation
merge_request
:
author
:
type
:
security
changelogs/unreleased/security-pages-1-33.yml
deleted
100644 → 0
View file @
d4d523a5
---
title
:
Fix stealing API token from GitLab Pages and DoS Prometheus through GitLab Pages
merge_request
:
author
:
type
:
security
changelogs/unreleased/security-trusted-confidential-apps.yml
deleted
100644 → 0
View file @
d4d523a5
---
title
:
Update trusted OAuth applications to set them as confidential
merge_request
:
author
:
type
:
security
changelogs/unreleased/security-workhorse-prometheus-13-7.yml
deleted
100644 → 0
View file @
d4d523a5
---
title
:
Upgrade Workhorse to 8.58.2
merge_request
:
author
:
type
:
security
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment