Patch in third party library Consul requires enable-script-checks to be set to False. This was required to enable a patch by the vendor. Without this setting the patch could be bypassed. This only affects GitLab-EE.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Gitlab | Gitlab | 9.5.0 (including) | 16.2.8 (excluding) |
| Gitlab | Gitlab | 16.3.0 (including) | 16.3.5 (excluding) |
| Gitlab | Gitlab | 16.4.0 (including) | 16.4.0 (including) |
| Consul | Ubuntu | bionic | * |
| Consul | Ubuntu | focal | * |
| Consul | Ubuntu | mantic | * |
| Consul | Ubuntu | trusty | * |
| Consul | Ubuntu | xenial | * |