GitLab.com already runs the patched version, and GitLab Dedicated tenants on recent internal releases need no action, GitLab said. Because GitLab bundles its own copy of Ruby and patched it there, installing one of these fixed versions applies the fix.

GitLab also published detection rules that self-managed administrators can use to look for signs of exploitation attempts.

Found this article interesting? Follow us on Google News, Twitter and LinkedIn to read more exclusive content we post.