[ci skip]

Mattermost Security Updates April 2023

See merge request https://gitlab.com/gitlab-org/security/omnibus-gitlab/-/merge_requests/335



Merged-by: Reuben Pereira <2967854-rpereira2@users.noreply.gitlab.com>
Approved-by: Kevin Morrison <kmorrison@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: Andrew Patterson <apatterson@gitlab.com>

Merge branch 'security-mattermost-2023-04-updates-15.10' into '15-10-stable'

See merge request gitlab-org/security/omnibus-gitlab!335

Changelog: security

Patch Openssl for CVE-2023-0464

See merge request https://gitlab.com/gitlab-org/security/omnibus-gitlab/-/merge_requests/332



Merged-by: GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: João Cunha <j.a.cunha@gmail.com>

João Alexandre Cunha authored 1 year ago and GitLab Release Tools Bot committed 1 year ago

Merge branch 'security-patch-openssl-for-2023-0464-backport-15-10' into '15-10-stable'

See merge request gitlab-org/security/omnibus-gitlab!332

Changelog: security

Patch Grafana against session cookie vulnerability and CVE-2023-1410

See merge request https://gitlab.com/gitlab-org/security/omnibus-gitlab/-/merge_requests/327



Merged-by: GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: Balasankar "Balu" C <balasankar@gitlab.com>

Balasankar C authored 1 year ago and GitLab Release Tools Bot committed 1 year ago

Merge branch 'security-grafana-session-cookie-outgoing-request-15-10' into '15-10-stable'

See merge request gitlab-org/security/omnibus-gitlab!327

Changelog: security

[ci skip]

[ci skip]

[15.10 Backport] Fix suggested_reviewers runs when rails is disabled

See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/6794



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Mitchell Nielsen <mnielsen@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>

[ci skip]

The suggested reviewers feature/recipe depends on rails being
enabled. The recipe is now only ran when rails is enabled.

Fixes: https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/7479

Changelog: fixed

[ci skip]

Mattermost March 2023 security updates

See merge request https://gitlab.com/gitlab-org/security/omnibus-gitlab/-/merge_requests/315



Merged-by: GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: Andrew Patterson <apatterson@gitlab.com>

Andrew Patterson authored 1 year ago and GitLab Release Tools Bot committed 1 year ago

Merge branch 'security-mattermost-2023-03-updates-15-10' into '15-10-stable'

See merge request gitlab-org/security/omnibus-gitlab!315

Changelog: security

Update redis to 6.2.11

See merge request https://gitlab.com/gitlab-org/security/omnibus-gitlab/-/merge_requests/314



Merged-by: GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Andrew Patterson <apatterson@gitlab.com>

Andrew Patterson authored 1 year ago and GitLab Release Tools Bot committed 1 year ago

Merge branch 'security-update-redis-to-6.2.11-15.10' into '15-10-stable'

See merge request gitlab-org/security/omnibus-gitlab!314

Changelog: security

Update curl to 8.0.1 to resolve February CVEs

See merge request https://gitlab.com/gitlab-org/security/omnibus-gitlab/-/merge_requests/321



Merged-by: GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com>
Approved-by: DJ Mountney <dj@gitlab.com>
Co-authored-by: Dmitry Makovey <dmakovey@gitlab.com>

Dmitry Makovey authored 1 year ago and GitLab Release Tools Bot committed 1 year ago

Merge branch 'security-82-15-10' into '15-10-stable'

See merge request gitlab-org/security/omnibus-gitlab!321

Changelog: security

[ci skip]