<commit_before>---
layout: post
title: Omnibus GitLab OpenSSL 1.0.1m security release
date: 2015-03-19
author: <NAME>
---

The OpenSSL developers released a [security
advisory](http://openssl.org/news/secadv_20150319.txt) today advising
all users of OpenSSL 1.0.1 to upgrade to version 1.0.1m in light of
vulnerabilities CVE-2015-0204, CVE-2015-0286, CVE-2015-0287, CVE-2015-0289,
CVE-2015-0292, CVE-2015-0293, CVE-2015-0209 and CVE-2015-0288.

This affects users of omnibus-gitlab because
omnibus-gitlab packages contain their own copy of OpenSSL 1.0.1. Today we are
releasing new omnibus packages for GitLab 7.8.4 CE and GitLab 7.8.4 EE which
contain OpenSSL 1.0.1m.

<!-- more -->

Versions affected: omnibus-gitlab 7.8.4.omnibus and older, omnibus-gitlab
7.8.4-ee.omnibus and older.

Versions fixed: omnibus-gitlab 7.8.4.omnibus.1, omnibus-gitlab
7.8.4-ee.omnibus.1.

# Checking your omnibus-gitlab OpenSSL version

You can check the version of OpenSSL in your omnibus-gitlab installation by
running the following command.

```
grep openssl /opt/gitlab/version-manifest.txt
```

If the OpenSSL version is 1.0.1j or lower you need to update omnibus-gitlab to<commit_msg>Add note about installations from source.<commit_after>---
layout: post
title: Omnibus GitLab OpenSSL 1.0.1m security release
date: 2015-03-19
author: <NAME>
---

The OpenSSL developers released a [security
advisory](http://openssl.org/news/secadv_20150319.txt) today advising
all users of OpenSSL 1.0.1 to upgrade to version 1.0.1m in light of
vulnerabilities CVE-2015-0204, CVE-2015-0286, CVE-2015-0287, CVE-2015-0289,
CVE-2015-0292, CVE-2015-0293, CVE-2015-0209 and CVE-2015-0288.

This affects users of omnibus-gitlab because
omnibus-gitlab packages contain their own copy of OpenSSL 1.0.1. Today we are
releasing new omnibus packages for GitLab 7.8.4 CE and GitLab 7.8.4 EE which
contain OpenSSL 1.0.1m.

For installations from source we advise you to upgrade your openssl version using the OS package manager.
If openssl was compiled from source we advise you to compile the new version.

<!-- more -->

Versions affected: omnibus-gitlab 7.8.4.omnibus and older, omnibus-gitlab
7.8.4-ee.omnibus and older.

Versions fixed: omnibus-gitlab 7.8.4.omnibus.1, omnibus-gitlab
7.8.4-ee.omnibus.1.

# Checking your omnibus-gitlab OpenSSL version

You can check the version of OpenSSL in your omnibus-gitlab installation by
running the following command.

```
grep openssl /opt/gitlab/version-manifest.txt
```

If the OpenSSL version is 1.0.1j or lower you need to update omnibus-gitlab to
{'fraction_non_alphanumeric': 0.09495896834701055, 'fraction_numerical': 0.09222352481438062, 'mean_word_length': 4.009784735812133, 'pattern_counts': {'":': 0, '<': 7, '<?xml version=': 0, '>': 7, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '7061418', 'n_tokens_mistral': 1088, 'n_tokens_neox': 893, 'n_words': 305}