GitLab released patches for 11 security issues, headlined by a severe regular expression flaw affecting self-managed servers running versions dating back to 2014.

Discover the backported releases and maintenance considerations.

Who does the problem concern?

The vulnerability, rated as the highest possible severity, could allow an unknown attacker to execute commands on computers managed by the companies themselves, without even having to log in to an account. The cause was traced to an internal part of the system that handles specific texts and patterns.

The update is only for those who manage their own systems, as the company's official services already have the patched versions. So far, the company says there are no indications that the problem has been used in real attacks.

New versions and upgrades

Due to the severity of the situation, the company has made the unusual move of offering fixes even for older release series that are normally no longer supported.…