GitLab Patch Release and Security Update: 19.5.3, 19.4.5, 19.3.7, 19.2.10, 19.1.10, 19.0.11, 18.11.14

We have released versions 19.5.3, 19.4.5, 19.3.7, 19.2.10, 19.1.10, 19.0.11, 18.11.14 for GitLab Community Edition (CE) and Enterprise Edition (EE). We also released version 19.5.1 for GitLab Runner and released versions 18.11.8, 19.0.13, 19.1.9, 19.2.5, 19.3.3, 19.4.3, 19.5.3 for GitLab AI Gateway. GitLab.com is already running the patched version. GitLab Dedicated tenants running 19.4.3-internal0 or later already include these fixes and do not need to take action. These versions address CVE-2026-111943, along with additional unrelated bug fixes. We strongly recommend that all self-managed GitLab installations be upgraded to one of these versions. If you use the self-hosted version of Runners or AI Gateway, you must also upgrade those components to the latest versions; guidance is included below. GitLab-hosted infrastructure has already been upgraded. Security update CVE-2026-111943 - GitLab has removed trust for compromised eMudhra Intermediate CA Certificates for GitLab CE/EE For GitLab CE/EE, GitLab has removed trust for eight eMudhra intermediate CA certificates whose private keys have been compromised. This release removes trust for those certificates from the certificate stores GitLab ships. For background, see eMudhra’s public incident write-up. Impacted Versions: GitLab CE/EE: all versions before 18.11.14, 19.0 before 19.0.11, 19.1 before 19.1.10, 19.2 before 19.2.10, 19.3 before 19.3.7, 19.4 before 19.4.5, and 19.5 before 19.5.3. Action required: update Self-Hosted GitLab Runner to version 19.5.1 Upgrading GitLab does not update GitLab Runner. Runner verifies certificates on its own, so you must also update GitLab Runner to version 19.5.1, and rebuild any CI/CD job images that include their own ca-certificates package. To update, see the Updating the Runner page. Action required: update Self-Hosted GitLab AI Gateway to versions 18.11.8, 19.0.13, 19.1.9, 19.2.5, 19.3.3, 19.4.3, 19.5.3 Upgrading GitLab does not update the GitLab AI Gateway. AI Gateway veri…