> We strongly recommend that all GitLab installations be upgraded to one of these versions immediately.
Sounds like an RCE vulnerability. interesting recent fate of a Ukrainian company.
Sounds like an RCE vulnerability. interesting recent fate of a Ukrainian company.
There has also never been any evidence of e.g. state actors sneaking in backdoors and what not. The code review process is quite extensive (probably a bit too much even), so it would be difficult to sneak in vulnerabilities deliberately. It's much more likely these issues are caused by growing complexity and the amount of functionality that GitLab supports.
You're probably right - unless Ukraine has more GL instances than most countries, in which case I'd be a little less likely to believe it's just a coincidence. Russia is deploying lots of attacks now so regardless of where the software was developed, if it's used in Ukraine at all it's more likely that we will find out about its vulnerabilities in the coming days.