Nangabe inkampani yakho isebentisa i-GitLab ku-server yayo, yibuyekete namuhla. Mhla ti-12 Okthoba 2026, i-GitLab ikhiphe siphephetfo sekuvikeleka lesibalulekile lesilungisa emaphutsa langu-24. Lelibi kakhulu, CVE-2026-97229, litfole emaphuzu lamakhulu kakhulu ekubaluleka langenteka: 10 kulangu-10. Livumela umuntfu longenayo i-akhawunti ku-server yakho kutsi asebentise ikhodi yakhe khona. Yonkhe i-server lesebentisa inguculo 19.2 ngaphambi kwa-19.2.8, nguculo 19.3 ngaphambi kwa-19.3.5, noma nguculo 19.4 ngaphambi kwa-19.4.2 itsintsekile. Kulungisa kuphela lokushiwo yi-GitLab kuyekela ku-19.4.2, 19.3.5 noma 19.2.8. Nawusebentisa insizakalo ye-cloud ku-GitLab.com, awudzingi kwenta lutfo.

Iyini i-GitLab, futsi kungani umnikati webhizinisi kufanele akhatsateke?

I-GitLab yindzawo lapho licembu lakho lebuchwepheshe ligcina khona ikhodi yemtfombo yetinhlelo netinhlelo tekusebenta takho, nalapho tinguculo letinsha takhiwa khona titfunyelwe kuma-server akho. Tinkampani letinyenti tiyisebentisa ku-server yangekhatsi esikhundleni sensizakalo ye-cloud, kute ikhodi nemniningwane kuhlale ngekhatsi enhlanganweni. Leyo server ivamise kugcina lokunyenti kunaloko lokulindzelwe ngumnikati: yonkhe ikhodi yemtfombo, emaphasiwedi esizindalwati, tikhiye letikuchumanisa netindlela tekukhokha netinsizakalo tahulumende, kanye nelilungelo lekufaka (deploy) kuma-server lasetjentiswa ngemakhasimende akho. Noma ngubani loyilawulako angakufundza konkhe loko, futsi angashintja ikhodi yakho ngaphambi kwekutsi ifike emakhasimendeni akho.

Yini ncamashi i-GitLab leyimemetekile?

Ngekusho kwe-simemetelo lesisemtsetfweni se-GitLab sekukhishwa kwesiphephetfo, lelimphutsa likuyincenye lesebenta ngetinkhulumo letijwayelekile (regular expressions) ngekhatsi kwetilungiselelo te-pipeline yekwakha nekufaka (CI/CD). Inkhulumo lejwayelekile yincenye lencane yembhalo lechaza iphethini yekusesha. Simemetelo sitsi lelimphutsa lingavumela umsebenti longakaciniseki kutsi asebentise noma nguyiphi ikhodi ku-server ye-GitLab ngenkhulumo lejwayelekile lelungiselelwe ngalokukhetsekile, ngenca yekungahlolwa ngalokwanele kwaletinkhulumo. Umcwaningi ulibike ngeluhlelo lwe-GitLab lwemklomelo wemaphutsa ku-HackerOne.

Simemetelo asisho kutsi lelimphutsa selisetjentisiwe ngabahlaselako. Kodvwa emaphuzu langu-10 asho kutsi lingasetjentiswa nge-inthanethi, ngaphandle kwephasiwedi futsi ngaphandle kwelusito lwanoma ngumuphi umsebenti. Labahlaselako bavamise kucala kufuna emaphutsa lanjena ngekhatsi kwemalanga lambalwa ngemuva kwekutsi kulungiswa kwatiwe ngumphakatsi, ngobe kulungiswa ngekwako kukhomba lapho butsakatsaka bukhona.

Yini lenye lesesiphephetfweni?

Lesiphephetfo lesifanako silungisa lamanye emaphutsa langu-23, lasihlanu awo alinganiswa njengalasezingeni lelisetulu:

  • Kufakwa kwe-script lenelunya (XSS) ekugcizeleleni i-syntax, emaphuzu langu-8.7.
  • Imphutsa lekuvunyelwa nakwakhiwa ema-pipeline, emaphuzu langu-8.5.
  • Inkhulumo lejwayelekile levumela kakhulu letsintsa kufinyelela kumafayela, emaphuzu langu-8.2.
  • Imphutsa lekuvunyelwa kumigomo yekusebentiswa kwema-pipeline kuhlobo lolukhokhelwako, emaphuzu langu-7.7.
  • Imphutsa lekufakwa kwemiyalo (prompt injection) ku-ejenti ye-AI ye-GitLab Duo kuhlobo lolukhokhelwako, emaphuzu langu-7.3.

Ngako-ke tinguculo letindzala kuna-19.2, letingatsintsekanga ngalelimphutsa lelibalulekile, akusho kutsi tiphephile. Umgomo losemtsetfweni we-GitLab wekunakekela utsi kulungiswa kwekuvikeleka kubuyiselwa kuphela kulokukhishwe nyalo nakulokukhishwe kwanyanga ngayinye lokubili lokwendlulile. I-server lesenguculweni lendzala ayisatfoli nhlobo kulungiswa kwekuvikeleka, futsi idzinga kuyekelwa embili noma kunjani.

Ngubani lodzinga kutsatsa sinyatselo?

  • Basebentisi be-GitLab.com ku-cloud: kute lokufanele kwentiwe; i-GitLab itsi insizakalo seyivele isebentisa inguculo lenesiphephetfo.
  • Emakhasimende e-GitLab Dedicated: nawo kute lokufanele akwente, ngekusho kwesimemetelo.
  • Noma ngubani losebentisa i-GitLab ku-server yakhe: yekela embili masinyane. Lesi sincomo lesicacile se-GitLab sakuko konkhe kufakwa lokulawulwa ngumnikati.
  • Noma ngubani longaciniseki kutsi i-GitLab yakhe isebenta kuphi: buta licembu lakho noma umhlinzeki lowakha tinhlelo takho namuhla. Ema-server langekhatsi lamanyenti afakwa ngumhlinzeki wakadzeni ase akhohlakala.

Tinyatselo letisebentako talelisontfo

  1. Tfola inguculo: cela umholi wakho webuchwepheshe kutsi avule likhasi le-Help ku-GitLab, afundze inombolo yenguculo lekhonjiswe lapho, ayicatsanise netinombolo letingenhla.
  2. Hlela kuyekela embili namuhla, hhayi ekupheleni kwenyanga: ngekusho kwesimemetelo se-GitLab, i-server lenenodi yinye iyacisha ngesikhatsi sesiphephetfo kuze kuphele kudluliswa kwesizindalwati, kantsi kuhlelwa lokunemanodi lamanyenti kungafakwa siphephetfo ngaphandle kwekucisha nangabe kulandzelwa inchubo lefanele yekungacishi. Kucisha kwelihora linye ngaphandle kwemahora emsebenti kubita kancane kakhulu kune-server legcilaziwe.
  3. Nawuku-19.3: yani ngco ku-19.3.5, hhayi ku-19.3.4. Simemetelo siphawula kutsi i-19.3.4 beyinenkinga lebeyitsintsa emakhasi ekucela kuhlanganiswa (merge request) nangabe kuhlanganiswa ne-Ona kuvuliwe, lelungiswe ku-19.3.5.
  4. Nciphisa kuvuleleka ku-inthanethi: nangabe kute umuntfu ngaphandle kwenkampani lodzinga kufinyelela ku-server yakho ye-GitLab, yenta kutsi yemukele kuchumana kuphela kusuka kunethiwekhi yenkampani noma nge-VPN. Loku akutsatsi indzawo yesiphephetfo, kodvwa kuyancipha umnyango ngalokulandzelako.
  5. Hlola ngemuva kwesiphephetfo: buketa basebentisi, tikhiye nema-token ekufinyelela lasandza kwakhiwa. Nangabe kuvela lokutsite lokungaziwa ngumuntfu, shintja emaphasiwedi netikhiye letigcinwe ku-server.

Tinyatselo tekuyekela embili kuyo yonkhe indlela yekufaka titfolakala emhlahlandleleni losemtsetfweni we-GitLab wekuyekela embili.

Umbono we-Origami

Sisebentisa i-GitLab onkhe malanga, ngobe tindzawo tetfu tekugcina ikhodi tikhona, ngako-ke silandzelela timemetelo tayo tekuvikeleka ngekucophelela lokufanana nalesikwenta kuma-invoyisi etfu. Sifundvo sibanti kune-GitLab: yonkhe inhlelo loyisebentisa wena ngekwakho kute ugcine imniningwane ngekhatsi iza nemsebenti wekuyifaka siphephetfo ngalona lilanga kulungiswa lokukhishwa ngalo. Inkinga lesiyibona kakhulu akusiso leso sincumo ngekwaso, kodvwa kungabi khona libito lalowo lophetse kubuyeketa. I-server leyafakwa ngumhlinzeki eminyakeni lemitsatfu leyendlulile, lekute umuntfu lowatiko kutsi ngubani loyinakekelako, yintfo yekucala lefunwa ngulohlaselako. Sasho lokufanako nge-imphutsa letitolo te-Magento: kufaka siphephetfo kuphela akwanele nangabe kufika sekwephuzile. Nangabe udzinga umuntfu lotawubuketa ema-server akho noma atsatse umsebenti wekuwabuyeketa, sitsintse.

Imitfombo