Security vulnerabilities Faced in GitLab runners in Community Edition for 16.9.0, 16.6.1 and 17.0.0 version

DevSecOps
1

Please find the list of CIB ID’s below:
CON-Image-CVE-2024-6387
CON-Image-CVE-2024-6387
CON-Image-CVE-2024-6387
CON-Image-CVE-2024-6387

2

16.9.0, 16.6.1 and 17.0.0 are not supported anymore, following the GitLab maintenance policy. GitLab release and maintenance policy | GitLab

Specifically for CVE-2024-6387, see this guidance:

Can you add a little more detail about your findings and/or questions? I’ve noticed you had shared another list in Security Vulnerabilities faced in GitLab Community edition for 16.1.0 and 16.0.5

1 Like