GitLab released patches for 11 security issues, headlined by a severe regular expression flaw affecting self-managed servers running versions dating back to 2014.
Discover the backported releases and maintenance considerations.
Who does the problem concern?
The vulnerability, rated as the highest possible severity, could allow an unknown attacker to execute commands on computers managed by the companies themselves, without even having to log in to an account. The cause was traced to an internal part of the system that handles specific texts and patterns.
The update is only for those who manage their own systems, as the company's official services already have the patched versions. So far, the company says there are no indications that the problem has been used in real attacks.
New versions and upgrades
Due to the severity of the situation, the company has made the unusual move of offering fixes even for older release series that are normally no longer supported. Administrators are urged to immediately upgrade their installations to the latest releases, such as 18.11.13, 19.0.10, 19.1.9, 19.2.9, 19.3.6, 19.4.3 or 19.5.1, depending on which version they are using.
READ ALSO
Serious PHP security flaws threaten millions of websites worldwide
Please note that the upgrade to versions 19.3.6 and 19.4.3 includes database changes, which may cause temporary downtime on systems running on a single computer.
The October cumulative update includes a total of 11 security fixes, including issues related to account takeover and connection protection.
G
Hacks.gr on Google
Set it as a preferred source for cybersecurity updates.
Preferred source
Top comments (0)