Advisories
GitLab 16.9.8 Patch Release: Bug Fixes, No Security Updates
On May 9 2024 GitLab released 16.9.8 for Community and Enterprise Editions. The update addresses regressions and bugs but contains no security fixes. Defenders should apply the patch, review the auto‑reconfigure behavior, and use /etc/gitlab/skip‑auto‑reconfigure to avoid downtime in multi‑node setups.
What Happened
GitLab rolled out 16.9.8 for both CE and EE on May 9 2024, targeting regressions and bugs without adding new security fixes.
Impact
All installations of GitLab CE or EE running any 16.9.x version are eligible. The release does not affect security posture but fixes issues such as the pinned parser dependency in chef‑bin and other regressions.
What to Do
- Verify you are on a 16.9.x branch and plan to upgrade to 16.9.8.
- For Omnibus packages, the upgrade will stop services, run migrations, and restart automatically; this is normal.
- If you want to avoid the stop‑run‑restart cycle in a multi‑node deployment, create /etc/gitlab/skip-auto-reconfigure before upgrading.
- After the upgrade, confirm services are healthy and review the update page for any post‑upgrade steps.
Additional Notes
GitLab is now combining patch and security releases to deliver information faster. The 16.9.8 release follows that model but contains only bug fixes.
Related vulnerabilities
GitLab 17.11.7 Patch Release: Bug Fixes, No Security Updates
GitLab released version 17.11.7 on August 15 2025, addressing regressions and bugs without adding security fixes. The update includes backports, a container‑registry upgrade, and no new migrations, making it safe for multi‑node deployments.
Read briefing
GitLab 16.2.3 Patch: Fixes Artifacts Object Storage Geo Replication Bug
GitLab released 16.2.3 for CE and EE on Aug 3 2023 to correct a bug that impacted artifacts stored in object storage during geo‑replication. The update contains no new migrations and can be applied without downtime on multi‑node deployments. Defenders should apply the patch and consider disabling auto‑reconfigure if they prefer zero‑downtime upgrades.
Read briefing
Microsoft Patch Tuesday 2026: 972 CVEs, 113 Critical, 2 Exploited Zero‑Days
Microsoft’s September 2026 Patch Tuesday saw the release of 972 security fixes, including 113 critical issues and two zero‑days that had already been weaponized. The updates span Windows, Office, and other key Microsoft products, underscoring the urgency for rapid patch deployment across all environments.
Read briefing
Apple Unveils iOS 26.5 RC – What Developers Need to Know
Apple has rolled out the 26.5 Release Candidate for iOS, giving developers early access to the newest features and bug fixes ahead of the public launch. The RC includes updated APIs, performance tweaks, and a handful of security patches. While no critical vulnerabilities have been highlighted, the update is a good opportunity to run your security testing suites and ensure compatibility. Download the build from the Apple Developer portal and start testing.
Read briefing