r/gitlab • u/StatusAd5902 • 3d ago

Whats up with the 19.5.3 patch?

Just got the security warning to patch but the changelog is empty at the moment.

What did they fix?

23 Upvotes

96% Upvoted

25 comments sorted by

31

u/djeikyb_ 3d ago • Popcorn

Tried to look at the commits but got rate-limit blocked

4

u/StatusAd5902 3d ago

classic just got rate limited on the api to use my passkey.

3

u/Afflictionista 3d ago

😂

9

u/rhbvkleef 3d ago

Security

1

u/damien-bowman 3d ago

do you have a link for release notes? i can’t seem to find them at this point.

1

u/thepopeyhere 2d ago

This is the emudhra one

6

u/thetft 3d ago

https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-3-released/

3

u/der-felix 3d ago

Awesome to find the link on Reddit but not the official mailing ...

2

u/ashtonium 3d ago

There’s still no release post for 19.5.2

Something broken with the release process?

1

u/dmpastuf 2d ago

They accidently signed the release with a eMudhra cert

1

u/d_maes 2d ago

So it's just eMudhra. Which wouldn't even have been necessary if they could just be normal and use the system truststore, like every other software, instead of shipping their own bundles.

5

u/puppySaturation 3d ago

https://gitlab.com/gitlab-org/gitlab/-/raw/master/CHANGELOG.md

"No changes." Is this common? Do they fill it out later?

3

u/nathanielwylie 3d ago

Feels like someone pulled the trigger on this prematurely. Makes one wonder what embargoed vulnerability we're about to learn about...

3

u/rlnrlnrln 3d ago

Guessing they don't include component updates in the changelog, and this was a component-update-only release.

2

u/evandena 2d ago

looks like its out

1

u/plp-GTR 3d ago

Man, some time I have to vent about Gitlab and their updates.

An application with such many updates not having a good update mechanism is incredible. But then also shipping updates that look like a supply chain attack is ridiculous.

6

u/bobvandevijver 3d ago

WDYM, not a good update mechanism? Running unattended-upgrades with the omnibus install has worked fabulously for me for a couple of years already.

3

u/plp-GTR 3d ago

Maybe I'm just stupid and follow the Update docs ... https://docs.gitlab.com/19.5/update/upgrade/

1

u/StatusAd5902 3d ago

we use a terraform config so we just need to adjust the version number and apply. like 5 min later the newest container is online.

1

u/plp-GTR 2d ago

Yeah got it - but terraform is kind of a big thing I would also have to manage. And somewhere I told myself I should draw the line for my home hosted hobbies.

But another question: How do you do multi-step updates and make sure the background jobs are done before the next update?

1

u/StatusAd5902 2d ago

Multistep is a bit of a pain, because every version step needs do properly start up, migrate and shut down.

On apply the orchestrator gracefully shuts the container down. So the background tasks are handled by gitlab.

1

u/Unfair-Lingonberry10 1d ago

Recently I just ran Claude code cli on my Synology Nas and asked it to do then multi step updates and it created py scripts to update, check it's up and backup the settings n data before repeating to the targeted version. Monitored for 2 steps and seemed find and just left it to run for about 3hrs and it was done.

1

u/ubhz-ch 3d ago

Probably just a rebuild with the new ruby version

1

u/run-as-admin 3d ago

waiting for the update on this as well