Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
gitlabhq/omnibus-gitlab
master @ 0d0d997
144
Fixes
0
CVEs
CRITICAL
Peak severity
Highlights
Information Disclosure: 26 prior fixes. Scrutinize any change in this area.
gitlab-cookbooks: most-fixed (8 issues). Treat as high-risk during review.
42 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Privilege Escalation: Insecure ownership of system configuration and log directories by the unprivileged 'gitlab-www' user allowed local processes to modify configuration files and escalate to 'root' privileges. This was corrected by transferring directory ownership to 'root'.
Authentication Bypass: A critical lack of cryptographic validation between gitlab-rails and gitlab-workhorse allowed unauthorized internal request routing. This was resolved by generating and verifying a shared secret token.
Insecure File Permissions: A race condition existed where sensitive configuration files containing secrets were initially generated with world-readable permissions before being explicitly restricted via chmod. The fix forces safe file-creation modes on descriptor open.