GitLab is not affected by Rails Security Vulnerability CVE-2014-7818

GitLab is not affected by Rails Security Vulnerability CVE-2014-7818

Yesterday the Rails framework released a security vulnerability security advisory for file existence disclosure vulnerability CVE-2014-7818. GitLab is not affected by this vulnerability.

The CVE-2014-7818 affects Rails applications that use config. serve_static_assets = true, while the configuration value in Gitlab is false and the configuration file is located inConfig/environments/production. rbBecause static files are directly processed by Nginx or Apache.

Install GitLab on Ubuntu 12.04

GitLab 5.3 upgrade considerations

Deploy GitLab on CentOS (self-managed Git project repository)

Install GitLab 6.0.2 on RHEL6/CentOS6/ScientificLinux6

CentOS 6.5 GitLab installation tutorial and Related Problems

GitLab details: click here
GitLab: click here

This article permanently updates the link address: