<commit_before>---
layout: post
title: "GitLab 8.14.1, 8.13.7 and 8.12.10 Released"
date: 2016-11-28
author: GitLab
author_twitter: gitlab
---
Today we are releasing version 8.14.1, 8.13.7 and 8.12.10 for GitLab Community Edition (CE) and
Enterprise Edition (EE).
This version contains an important security fix for a critical remote command
execution vulnerability in Mattermost, and we **strongly recommend** that anyone
running GitLab 8.14.0 with Mattermost enabled upgrade to this version
**immediately**.
Please read on for more details.
<!-- more -->
## Remote Command Execution via Mattermost Service
Mattermost recently released a critical security update to address a remote
command execution vulnerability. Because the Omnibus version of GitLab 8.14.0
ships with Mattermost we are providing this emergency security patch.
Details of the vulnerability can be found at https://docs.mattermost.com/administration/changelog.html#release-v3-5-1
### Versions affected
- 8.14.0

We **strongly recommend** that all installations running GitLab 8.14.0 with
Mattermost enabled upgrade immediately. Mattermost is *not* enabled by default.
### Workarounds
If you're unable to upgrade right away, you can secure your GitLab installation
against this vulnerability using the workaround outlined below until you have
time to upgrade.
#### Disable Mattermost
Login to your GitLab server(s) and perform the following:
1. Edit your `/etc/gitlab/gitlab.rb` file
1. Verify `mattermost['gitlab_enable']` is set to `false`
1. Save the file<commit_msg>Fix mattermost external link<commit_after>---
layout: post
title: "GitLab 8.14.1, 8.13.7 and 8.12.10 Released"
date: 2016-11-28
author: GitLab
author_twitter: gitlab
---
Today we are releasing version 8.14.1, 8.13.7 and 8.12.10 for GitLab Community Edition (CE) and
Enterprise Edition (EE).
This version contains an important security fix for a critical remote command
execution vulnerability in Mattermost, and we **strongly recommend** that anyone
running GitLab 8.14.0 with Mattermost enabled upgrade to this version
**immediately**.
Please read on for more details.
<!-- more -->
## Remote Command Execution via Mattermost Service
Mattermost recently released a critical security update to address a remote
command execution vulnerability. Because the Omnibus version of GitLab 8.14.0
ships with Mattermost we are providing this emergency security patch.
Details of the vulnerability can be found at
[https://docs.mattermost.com/administration/changelog.html#release-v3-5-1](https://docs.mattermost.com/administration/changelog.html#release-v3-5-1)
### Versions affected
- 8.14.0

We **strongly recommend** that all installations running GitLab 8.14.0 with
Mattermost enabled upgrade immediately. Mattermost is *not* enabled by default.
### Workarounds
If you're unable to upgrade right away, you can secure your GitLab installation
against this vulnerability using the workaround outlined below until you have
time to upgrade.
#### Disable Mattermost
Login to your GitLab server(s) and perform the following:
1. Edit your `/etc/gitlab/gitlab.rb` file
1. Verify `mattermost['gitlab_enable']` is set to `false`
1. Save the file
{'fraction_non_alphanumeric': 0.08141369517197854, 'fraction_numerical': 0.036289050173556325, 'mean_word_length': 4.8487084870848705, 'pattern_counts': {'":': 0, '<': 5, '<?xml version=': 0, '>': 5, 'https://': 3, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '2137897', 'n_tokens_mistral': 966, 'n_tokens_neox': 849, 'n_words': 398}