GitLab Patch Release: 17.10.1, 17.9.3, 17.8.6

{
  "id": "e35da3fdb465db7701c74474f13ed83392eb7efcaa67bd72c0e74c923020b000",
  "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-17-10-1-released/",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "GitLab Patch Release: 17.10.1, 17.9.3, 17.8.6",
    "summary": "GitLab released security fixes for GitLab CE/EE and GitLab Duo with Amazon Q in versions 17.10.1, 17.9.3, and 17.8.6. Self-managed installations affected by the listed issues are recommended to upgrade to the latest version.",
    "evidence": "On March 26, 2025, we released versions 17.10.1, 17.9.3, 17.8.6 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately.",
    "products": [
      {
        "name": {
          "value": "GitLab Community Edition (CE) and Enterprise Edition (EE)",
          "evidence": "On March 26, 2025, we released versions 17.10.1, 17.9.3, 17.8.6 for GitLab Community Edition (CE) and Enterprise Edition (EE)."
        },
        "prerequisites": [
          {
            "value": "all self-managed GitLab installations",
            "evidence": "These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately."
          },
          {
            "value": "all installations running a version affected by the issues described below",
            "evidence": "We strongly recommend that all installations running a version affected by the issues described below are upgraded to the latest version as soon as possible."
          }
        ],
        "fixed_versions": [
          {
            "value": "17.8.6",
            "evidence": "On March 26, 2025, we released versions 17.10.1, 17.9.3, 17.8.6 for GitLab Community Edition (CE) and Enterprise Edition (EE)."
          },
          {
            "value": "17.9.3",
            "evidence": "On March 26, 2025, we released versions 17.10.1, 17.9.3, 17.8.6 for GitLab Community Edition (CE) and Enterprise Edition (EE)."
          },
          {
            "value": "17.10.1",
            "evidence": "On March 26, 2025, we released versions 17.10.1, 17.9.3, 17.8.6 for GitLab Community Edition (CE) and Enterprise Edition (EE)."
          }
        ],
        "affected_versions": [
          {
            "value": "all versions from 13.5.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1",
            "evidence": "An issue has been discovered in Gitlab EE/CE affecting all versions from 13.5.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1."
          }
        ]
      },
      {
        "name": {
          "value": "GitLab Duo with Amazon Q",
          "evidence": "An issue has been discovered in the GitLab Duo with Amazon Q affecting all versions from 17.8 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1."
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "17.8.6",
            "evidence": "An issue has been discovered in the GitLab Duo with Amazon Q affecting all versions from 17.8 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1."
          },
          {
            "value": "17.9.3",
            "evidence": "An issue has been discovered in the GitLab Duo with Amazon Q affecting all versions from 17.8 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1."
          },
          {
            "value": "17.10.1",
            "evidence": "An issue has been discovered in the GitLab Duo with Amazon Q affecting all versions from 17.8 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1."
          }
        ],
        "affected_versions": [
          {
            "value": "all versions from 17.8 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1",
            "evidence": "An issue has been discovered in the GitLab Duo with Amazon Q affecting all versions from 17.8 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1."
          }
        ]
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2025-2255",
        "evidence": "It is now mitigated in the latest release and is assigned CVE-2025-2255."
      },
      {
        "value": "CVE-2025-0811",
        "evidence": "It is now mitigated in the latest release and is assigned CVE-2025-0811."
      },
      {
        "value": "CVE-2025-2242",
        "evidence": "It is now mitigated in the latest release and is assigned CVE-2025-2242."
      },
      {
        "value": "CVE-2024-12619",
        "evidence": "It is now mitigated in the latest release and is assigned CVE-2024-12619."
      },
      {
        "value": "CVE-2024-10307",
        "evidence": "It is now mitigated in the latest release and is assigned CVE-2024-10307."
      },
      {
        "value": "CVE-2024-9773",
        "evidence": "It is now mitigated in the latest release and is assigned CVE-2024-9773."
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-gitlab-security-releases",
  "document_id": 23792,
  "published_at": "2025-03-26T00:00:00+00:00"
}