GitLab has released version 17.8, featuring significant security enhancements such as protected container repositories, machine learning capabilities, and improved deployment tracking. The release comprises over 60 improvements from 121 contributions. However, it also exposes a critical cross-site scripting vulnerability, CVE-2025-0376, found in versions 17.6 and 17.7, prompting GitLab to recommend an upgrade to version 17.8.2 for all users. Notably, the new protected container repository feature allows for stricter user access controls in managing sensitive container images, integrating with GitLab CI/CD pipelines for better security management.
GitLab's version 17.8 introduces enhanced security features including protected container repositories with stricter access controls, aiming to improve the management of sensitive images.
The update includes a high-priority cross-site scripting vulnerability identified in 17.6 and 17.7, prompting GitLab to advise users to upgrade to version 17.8.2.
Collection
[
|
...
]