Upgrade your external PostgreSQL 12 & 13 servers now
Jun 23, 2022Yannis Roussos

Summary
This post addresses a critical external dependency on PostgreSQL versions, specifically highlighting a use-after-free bug in PostgreSQL 12.x (<12.7) and 13.x (<13.3) that can cause segmentation faults. It informs users that GitLab EE versions 14.9+ and CE versions 15.1+ are affected if they are using these vulnerable PostgreSQL versions. It strongly recommends upgrading to patched PostgreSQL versions (12.7+ or 13.3+) and clarifies that Omnibus GitLab instances with bundled PostgreSQL are not affected. A link to an internal issue for further details is provided.
More from the Database Migration Debugging and Cross-Database Compatibility trail
- Seamlessly migrate from Jira to GitLab with Jira2Lab at scale
- We are upgrading the operating system on our Postgres database clusters
- Decomposing the GitLab backend database, Part 1: Designing and planning
- GitLab database decomposition: Final migration and results
- Decomposing the GitLab backend database, Part 3: Challenges and surprises