---
layout: post
title: "GitLab 7.2.1 Security Release
date: 2014-08-28
comments: true
categories:
author: Jacob Vosmaer
---

Today we released GitLab Community Edition 7.2.1 and GitLab Enterprise Edition
7.2.1. This is a security release which remedies an XSS vulnerability in
GitLab. In addition to this 7.2.1 makes the tag-to-label migration for users
upgrading from GitLab 7.1 and earlier more robust.

## Impact

The vulnerability patched by this release allows an attacker to carry out a
cross-site scripting (XSS) attack against users with a session on an affected
GitLab server. In order to exploit this vulnerability, the attacker needs to
have commit access to a repository on the affected GitLab server.

## Upgrading

Omnibus-gitlab packages for GitLab 7.2.1 are [now
available](https://about.gitlab.com/downloads/). To upgrade an installation
from source please use the
[upgrader](http://doc.gitlab.com/ce/update/upgrader.html) or the [patch update
guide](http://doc.gitlab.com/ce/update/patch_versions.html).

---
layout: post
title: "GitLab 7.2.1 Security Release"
date: 2014-08-28
comments: true
categories:
author: Jacob Vosmaer
---

Today we released GitLab Community Edition 7.2.1 and GitLab Enterprise Edition
7.2.1. This is a security release which remedies an XSS vulnerability in
GitLab. In addition to this 7.2.1 makes the tag-to-label migration for users
upgrading from GitLab 7.1 and earlier more robust.

## Impact

The vulnerability patched by this release allows an attacker to carry out a
cross-site scripting (XSS) attack against users with a session on an affected
GitLab server. In order to exploit this vulnerability, the attacker needs to
have commit access to a repository on the affected GitLab server.

## Upgrading

Omnibus-gitlab packages for GitLab 7.2.1 are [now
available](https://about.gitlab.com/downloads/). To upgrade an installation
from source please use the
[upgrader](http://doc.gitlab.com/ce/update/upgrader.html) or the [patch update
guide](http://doc.gitlab.com/ce/update/patch_versions.html).

Fix YAML in 7.2.1 post
Fix YAML in 7.2.1 post
