curl removed from Omnibus-GitLab FIPS packages in 19.0
about.gitlab.com | blog | #supply-chain | #gitlab | #compliance | #package-management | #curl | #supply-chain-security | #fips | #omnibus
Summary
From Omnibus-GitLab 19.0, FIPS packages drop GitLab's bundled curl for the distribution's package, mirroring the OpenSSL approach; customers must track OS-level curl security updates themselves.
- Published
- Collected
Skip to content