Birbla

Join the discussion

Write your take first — we'll ask for email only when you're ready to publish.

Sign in
  • Hacker News
  • possible bug? or too soon to check? :)

    after updating a pop-up still shows:

    "You are currently on version 19.5.1! We strongly recommend upgrading your GitLab installation immediately."

    while 19.5.1 should be the latest and fixed version

    by bon0r
  • If you're patching a fleet, gitlab-rake gitlab:env:info gives you the exact version per node, faster than guessing from the omnibus package name.
    by beaconflint
  • Back in perl 5.8 and older, the regex engine worked by recusing at the level of C functions, and so you could trigger stack overflows by giving it large strings.

    Is this similar?

    I wonder why gitlab even has its own regex compiler. Or is this a vulnerability in an underlying library or programming language?

    by perlgeek
  • Gitlab has had a lot lately. I’ve had to patch every other week for the last few months
    by yoyohello13
  • Is this a bug in GitLab or in Ruby? It's hard to tell from the report and the patch...
    by ezekg
  • At least second regex related CVE in GitLab in the past few weeks. Awful to see that the endpoint is reachable unauthenticated, but I'm glad that they provide guidance in how to check the logs for attempts of exploitation
    by miduil
  • What a great week security wise!
    by Thaxll
  • Awesome find by https://hackerone.com/joaxcar and it's a little bit frightening that this severe of a bug isn't the biggest security vulnerability of today
    by jimmyl02

Explore Birbla archives