---
id: 2614
title: "curl removed from Omnibus-GitLab FIPS packages in 19.0"
source_domain: about.gitlab.com
source_url: "https://about.gitlab.com/blog/curl-removed-from-omnibus-gitlab-fips-packages-in-19-0/"
published_at: "2026-04-24 00:00"
tags: ["supply-chain", "gitlab", "compliance", "package-management", "curl", "supply-chain-security", "fips", "omnibus"]
phying_url: "https://phying.com/item/2614"
lang: en
---

# curl removed from Omnibus-GitLab FIPS packages in 19.0

## Summary

From Omnibus-GitLab 19.0, FIPS packages drop GitLab's bundled curl for the distribution's package, mirroring the OpenSSL approach; customers must track OS-level curl security updates themselves.

## Intelligence Metadata

- **Sources:** about.gitlab.com
- **Published:** 2026-04-24 00:00
- **Original:** https://about.gitlab.com/blog/curl-removed-from-omnibus-gitlab-fips-packages-in-19-0/
- **Phying News:** https://phying.com/item/2614