Our takeGitLab has released fixes for multiple vulnerabilities. Patch now if you run a self-hosted instance; hosted users are unaffected.Security Resilience desk
Sources (12)
- hkcert · hkcert
- hkcert · hkcert
- hkcert · hkcert
- hkcert · hkcert
- hkcert · hkcert
- auscert_bulletins · auscert_bulletins
- hkcert · hkcert
- hkcert · hkcert
- govcert_hk · govcert_hk
- govcert_hk · govcert_hk
- csa_sg · csa_sg
- csa_sg · csa_sg
What this means for you — Security leader:GitLab has released patches for multiple confirmed vulnerabilities (authoritative government CERT sources). Review the HKCERT bulletin for your version and apply updates immediately.
What this means for you — Lean IT orgs:If you self-host GitLab, check the advisory for your version and update it now. Most lean-IT teams using GitLab.com can ignore this.
What this means for you — MSP:Check which clients self-host GitLab and update them to the patched versions listed in the HKCERT bulletin. GitLab.com-hosted clients are not affected.
What this means for you — Researcher:GitLab has multiple confirmed vulnerabilities per authoritative CERT advisories. Review the linked HKCERT bulletins for technical detail and patch status.