[DRE-maint] Bug#858410: gitlab: CVE-2017-0882: Information Disclosure in Issue and Merge Request Trackers

[Salvatore Bonaccorso]

Source: gitlab
Version: 8.13.11+dfsg-2
Severity: grave
Tags: patch upstream security fixed-upstream
Control: fixed -1 8.13.11+dfsg-7

Hi,

the following vulnerability was published for gitlab.

CVE-2017-0882[0]:
Information Disclosure in Issue and Merge Request Trackers

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2017-0882
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0882
[1] https://about.gitlab.com/2017/03/20/gitlab-8-dot-17-dot-4-security-release/

Regards,
Salvatore