First published: Fri Jan 12 2024(Updated: )
An issue has been discovered in GitLab CE/EE affecting all versions from 12.2 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which an attacker could potentially modify the metadata of signed commits.
Credit: cve@gitlab.com
Affected Software | Affected Version | How to fix |
---|---|---|
GitLab GitLab | >=12.2.0<16.5.6 | |
GitLab GitLab | >=12.2.0<16.5.6 | |
GitLab GitLab | >=16.6.0<16.6.4 | |
GitLab GitLab | >=16.6.0<16.6.4 | |
GitLab GitLab | =16.7.0 | |
GitLab GitLab | =16.7.0 | |
GitLab GitLab | =16.7.1 | |
GitLab GitLab | =16.7.1 |
Upgrade to versions 16.5.6, 16.6.4, 16.7.2 or above.
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.