[ASA-202106-21] gitlab: multiple issues

Arch Linux Security Advisory ASA-202106-21 ========================================== Severity: High Date : 2021-06-09 CVE-ID : CVE-2021-22181 CVE-2021-22213 CVE-2021-22214 CVE-2021-22216 CVE-2021-22217 CVE-2021-22218 CVE-2021-22219 CVE-2021-22220 CVE-2021-22221 Package : gitlab Type : multiple...

CVE-2021-22218

GitLab CE/EE versions affected by CVE-2021-22218 include 12.8 before 13.10.5, all 13.11 versions before 13.11.5, and all 13.12 versions before 13.12.2, due to an issue in handling x509 certificates that could be used to spoof the author of signed commits. The root cause is improper x509 handling ...