HomeFreeBSD

www/gitlab-ce: CRITICAL security update to 16.7.2 and bugfixes

Description

www/gitlab-ce: CRITICAL security update to 16.7.2 and bugfixes

This update fixes a CVE scored with 10.0:
CVE-2023-7028 (Account Takeover via Password Reset without user interactions)

You maybe want to stop you gitlab instance till you have that update installed.

More details can be found here:
https://about.gitlab.com/releases/2024/01/11/critical-security-release-gitlab-16-7-2-released/

Security: 4c8c2218-b120-11ee-90ec-001b217b3468
(cherry picked from commit 66ebbe2db270591ec7306dec5b5dc5b7811fa968)

Details

Provenance
mfechnerAuthored on Jan 12 2024, 8:41 AM
Parents
R11:1f6ede10f5c1: devel/rubygem-view_component-rails70: update to 3.8.0
Branches
Unknown
Tags
Unknown