<commit_before>---
layout: post
title: "GitLab 8.6.4 Released"
date: 2016-04-04 12:00
comments: true
author: GitLab
author_twitter: gitlab
---

Today we are releasing version 8.6.4 for GitLab Community Edition (CE) and
Enterprise Edition (EE).

This version includes a minor security fix.

Read on for all the details!

<!-- more -->

- **CE/EE:** Don't attempt to fetch any tags from a forked repo. ([!3504])

[!3504]: https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/3504

## Minor security issue with tags and forks

Prior to this version, it was possible for the Git tags from a fork project to
appear in the source project, if a merge request was opened on the source
project from the fork project, and then new tags were pushed to the forked
project. Tags that already existed in the source project would not be
overwritten.

We are planning to release patches for previous monthly releases soon and will
update this post with more information at that time.

## Upgrade barometer

This version does not include any new migrations, and should not require
any downtime.<commit_msg>Update 8.6.4 post with other three patch releases<commit_after>---
layout: post
title: "GitLab 8.6.4, 8.5.9, 8.4.7, and 8.3.6 Released"
date: 2016-04-04 12:00
comments: true
author: GitLab
author_twitter: gitlab
---

Today we are releasing versions 8.6.4, 8.5.9, 8.4.7, and 8.3.6 for GitLab
Community Edition (CE) and Enterprise Edition (EE).

These versions include a minor security fix.

Read on for all the details!

<!-- more -->

- **CE/EE:** Don't attempt to fetch any tags from a forked repo. ([!3504])

[!3504]: https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/3504

## Minor security issue with tags and forks

Prior to this version, it was possible for the Git tags from a fork project to
appear in the source project, if a merge request was opened on the source
project from the fork project, and then new tags were pushed to the forked
project. Tags that already existed in the source project would not be
overwritten.

> **Update:** _(2016-04-05 22:45 UTC)_
>
> As promised, we have included this security fix for the previous four GitLab
> monthly releases, and have released new packages for each.

## Upgrade barometer

This version does not include any new migrations, and should not require
any downtime.
{'fraction_non_alphanumeric': 0.08279430789133248, 'fraction_numerical': 0.040103492884864166, 'mean_word_length': 4.021645021645021, 'pattern_counts': {'":': 0, '<': 5, '<?xml version=': 0, '>': 9, 'https://': 2, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '1217637', 'n_tokens_mistral': 738, 'n_tokens_neox': 672, 'n_words': 340}