GitLab Critical Patch Release: 17.9.2, 17.8.5, 17.7.7

{
  "id": "c9dee1a07c65b2cde4c7f46d08e67d3e77bf0d2ff27a43b44d02c8c7fb1f7ea0",
  "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-17-9-2-released/",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "GitLab Critical Patch Release: 17.9.2, 17.8.5, 17.7.7",
    "summary": "GitLab released security fixes in GitLab CE/EE versions 17.9.2, 17.8.5, and 17.7.7, and recommends that affected installations upgrade promptly.",
    "evidence": "On March 12, 2025, we released versions 17.9.2, 17.8.5, 17.7.7 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately.",
    "products": [
      {
        "name": {
          "value": "GitLab Community Edition (CE)",
          "evidence": "On March 12, 2025, we released versions 17.9.2, 17.8.5, 17.7.7 for GitLab Community Edition (CE) and Enterprise Edition (EE)."
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "17.9.2",
            "evidence": "These issues have been remediated on GitLab.com, and in GitLab CE/EE versions 17.7.7, 17.8.5, and 17.9.2."
          },
          {
            "value": "17.8.5",
            "evidence": "These issues have been remediated on GitLab.com, and in GitLab CE/EE versions 17.7.7, 17.8.5, and 17.9.2."
          },
          {
            "value": "17.7.7",
            "evidence": "These issues have been remediated on GitLab.com, and in GitLab CE/EE versions 17.7.7, 17.8.5, and 17.9.2."
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "Enterprise Edition (EE)",
          "evidence": "On March 12, 2025, we released versions 17.9.2, 17.8.5, 17.7.7 for GitLab Community Edition (CE) and Enterprise Edition (EE)."
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "17.9.2",
            "evidence": "These issues have been remediated on GitLab.com, and in GitLab CE/EE versions 17.7.7, 17.8.5, and 17.9.2."
          },
          {
            "value": "17.8.5",
            "evidence": "These issues have been remediated on GitLab.com, and in GitLab CE/EE versions 17.7.7, 17.8.5, and 17.9.2."
          },
          {
            "value": "17.7.7",
            "evidence": "These issues have been remediated on GitLab.com, and in GitLab CE/EE versions 17.7.7, 17.8.5, and 17.9.2."
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2025-25291",
        "evidence": "GitLab has remediated two privately disclosed security issues (CVE-2025-25291, CVE-2025-25292) identified in the ruby-saml library"
      },
      {
        "value": "CVE-2025-25292",
        "evidence": "GitLab has remediated two privately disclosed security issues (CVE-2025-25291, CVE-2025-25292) identified in the ruby-saml library"
      },
      {
        "value": "CVE-2025-27407",
        "evidence": "GitLab has remediated a privately disclosed security issue (CVE-2025-27407) identified in the Ruby graphql library"
      },
      {
        "value": "CVE-2024-13054",
        "evidence": "It is now mitigated in the latest release and is assigned CVE-2024-13054."
      },
      {
        "value": "CVE-2024-12380",
        "evidence": "It is now mitigated in the latest release and is assigned CVE-2024-12380."
      },
      {
        "value": "CVE-2025-1257",
        "evidence": "It is now mitigated in the latest release and is assigned CVE-2025-1257."
      },
      {
        "value": "CVE-2025-0652",
        "evidence": "It is now mitigated in the latest release and is assigned CVE-2025-0652."
      },
      {
        "value": "CVE-2024-8402",
        "evidence": "It is now mitigated in the latest release and is assigned CVE-2024-8402."
      },
      {
        "value": "CVE-2024-7296",
        "evidence": "It is now mitigated in the latest release and is assigned CVE-2024-7296."
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-gitlab-security-releases",
  "document_id": 23791,
  "published_at": "2025-03-12T00:00:00+00:00"
}