Dec 14, 2016 - GitLab  

GitLab 8.14.5, 8.13.10, and 8.12.13 Released

Learn more about GitLab Release 8.14.5, 8.13.10, and 8.12.13 for GitLab Community Edition (CE) and Enterprise Edition (EE)

Today we are releasing versions 8.14.5, 8.13.10, and 8.12.13 for GitLab Community Edition (CE) and Enterprise Edition (EE).

These versions contain important security fixes, and we recommend that all affected GitLab installations be upgraded to one of these versions.

Please read on for more details.

Security fixes in 8.14.5, 8.13.10 and 8.12.13

  • CE/EE: Fix missing Note access checks in by moving Note#search to updated NoteFinder (#23867)
  • CE/EE: Filter incoming_email_token and runners_token parameters (#25687)

Security fixes in 8.14.5 and 8.13.10

  • CE/EE: Issue#visible_to_user moved to IssuesFinder (#24637)

Other fixes in 8.14.5, 8.12.13 and 8.13.10

  • CE/EE: API: Memoize the current_user so that the sudo can work properly. (!8017)

Other fixes in 8.14.5

  • Omnibus GitLab: Add attribute client_output_buffer_limit_slave for redis (!1147)

  • CE/EE: Remove 'Leave Project' and 'Leave Group' from settings dropdowns (!7600)
  • CE/EE: Fix display hook error message (!7775)
  • CE/EE: Shows group members in the project members list (!7899)
  • CE/EE: Correct autocomplete for values with special characters (!7910)
  • CE/EE: Remove wrong '.builds-feature' class from the MR settings fieldset (!7930)
  • CE/EE: Avoid escaping relative links in Markdown twice (!7940)
  • CE/EE: Allow branch names with dots on API endpoint (!7963)
  • CE/EE: Fixed timeago re-rendering every element (!7969)
  • CE/EE: Use a single query in Projects::ProjectMembersController to fetch members (!7997)
  • CE/EE: Displays milestone remaining days only when it's present (!7998)
  • CE/EE: Fix Crontab typo for PruneOldEventsWorker to run 4x/day instead of 60x/hour (!8051)
  • CE/EE: Encode when migrating ProcessCommitWorker jobs (!8064)
  • CE/EE: Updates the docs to require GitLab Shell 4.0.3 (!8050)

  • EE: Fix milestone total weight is missing on the milestone page (!944)
  • EE: Remove wrong '.builds-feature' class from the MR settings fieldset (!947)
  • EE: Group members in project members view (!958)

Upgrade barometer

These versions do include a single migration, and will require brief downtime of typically less than one minute.

Please be aware that by default the Omnibus packages will stop, run migrations, and start again, no matter how “big” or “small” the upgrade is. This behavior can be changed by adding a /etc/gitlab/skip-auto-migrations file.


To update, check out our update page.

Enterprise Edition

Interested in GitLab Enterprise Edition? Check out the features exclusive to EE.

Access to GitLab Enterprise Edition is included with a subscription. No time to upgrade GitLab yourself? Subscribers receive upgrade and installation services.

Try all GitLab features - free for 30 days

GitLab is more than just source code management or CI/CD. It is a full software development lifecycle & DevOps tool in a single application.

Try GitLab Free
Git is a trademark of Software Freedom Conservancy and our use of 'GitLab' is under license

Try GitLab risk-free for 30 days.

No credit card required. Have questions? Contact us.

Gitlab x icon svg