Skip to content

Bump git-lfs version to 3.4.0

Axel von Bertoldi requested to merge avonbertoldi/upgrade-git-lfs into main

This is one in a series of MRs to clean up and reduce actual and potential CVE reports runner fips images:

Version 3.4.0 of git-lfs includes a number of CVE vulnerability fixes, but we won't actually realize some of those fixes until we stop building git-lfs from source and instead install it from the release tarball (!4289 (merged)).

Addresses https://gitlab.com/gitlab-org/gitlab-runner/-/issues/31065#note_1460548929

Edited by Axel von Bertoldi

Merge request reports