GitLab Critical Patch Release

docs.gitlab.com ·2h ago

On October 21, 2026, GitLab released several patches for critical security vulnerabilities affecting Community Edition (CE) and Enterprise Edition (EE) installations. These patches address issues that could allow unauthenticated users to execute arbitrary code, take over LDAP-backed accounts, and retrieve sensitive internal server credentials.

GitLab.com is already running the patched version, and Dedicated tenants running the specified versions do not need to take action. The patched versions include all releases from 18.11.13 through 19.5.1. GitLab has released threat detections to support customers with self-managed instances, and has provided remediation steps for the three high-severity vulnerabilities.

Written by urgent.news from Lobsters's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

Read the original at docs.gitlab.com →

More in Tech

Meta says it would’ve made over $22 billion if it didn’t have to pay a child safety settlement

Meta had to shell out $9.89 billion to pay for a chunk of the child safety settlement it reached with US attorneys general. That's according to the company's third-quarter earnings report released on Wednesday, which says Meta's income from operations would have been $22.89 billion without the settlement.

2h ago ·theverge.com

Castle Biosciences CEO Derek Maetzold sells $462,567 in stock

2h ago ·investing.com

HBO Poison Ivy Show Reportedly Coming From 'The Penguin' Producer

A Poison Ivy TV series is reportedly in the works from The Penguin's showrunner. It would be separate from Matt Reeves' The Batman continuity.

2h ago ·polygon.com

Filing: Meta says Mark Zuckerberg is considering leaving California if it passes a one-time 5% tax on billionaires; voters will decide on the measure next month (Pierre Paulden/Bloomberg)

Mark Zuckerberg said he is considering leaving California if it passes a measure that would impose a one-time, 5% tax on billionaires.

2h ago ·bloomberg.com

The Phantom OOM: How a Silent Session Leak Brought Down Our Microservice Every 48 Hours

If you’ve ever chased a phantom memory leak in a microservice architecture, you know how frustrating it is.

2h ago ·hackernoon.com

Booking.com targeted in EU investigation into phishing scams, fraudulent listings

BRUSSELS: EU tech regulators will investigate whether online hotel reservation website Booking.com is doing enough to weed out fraudulent listings and phishing scams to comply with EU online content rules, the European Commission said on Wednesday.

2h ago ·brecorder.com