CVE-2018-3710

CVE-2018-3710 affects GitLab Community/Enterprise Edition 10.3.3, with an insecure temporary file in the project import component enabling remote code execution. Multiple sources (NVD, Debian DSA, CNVD, OSV) corroborate an arbitrary code execution via project import; CVE-2018-3710 is part of a se...

[SECURITY] [DSA 4145-1] gitlab security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4145-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 18, 2018 https://www.debian.org/security/faq -...

FreeBSD : gitlab -- Remote code execution on project import (65fab89f-2231-46db-8541-978f4e87f32a)

GitLab developers report : Today we are releasing versions 10.3.4, 10.2.6, and 10.1.6 for GitLab Community Edition CE and Enterprise Edition EE. These versions contain a number of important security fixes, including two that prevent remote code execution, and we strongly recommend that all GitLab...