Is Gitlab affected by CVE-2022-29824?

The module libxml2 contained in several components of GitLab version 14.8.x and 14.9.x is vulnerable to out-of-bounds memory writes as described in CVE-2022-29824. GitLab seems to not patching it or mitigating the risk in the latest stable version 14.10.x. Actually I even cannot find any article on the internet about this problem in relation to GitLab.

Is Gitlab affected by CVE-2022-29824?

I am self managing GitLab and use the Helm chart based deployment.

1 Like