GitLab Patch Release: 18.11.9
On August 6, 2026, we released versions 18.11.9 for GitLab Community Edition and Enterprise Edition. These versions resolve a number of regressions and bugs. This patch release does not include any security fixes. GitLab Community Edition and Enterprise Edition 18.11.9 We have pulled the omnibus install of 18.11.8 and replaced it with 18.11.9. A bug was found in the deprecation code that enabled Mattermost incorrectly. If you have a local cache of our omnibus package, you will want to remove 18.11.8 and get 18.11.9. Update gitlab-logger to v4.0.1 (18-11-stable) Backport of ‘Keep virtual registry settings toggle visible when disabled’ into 18.11 Backport of “Fix blob preview diff hiding blank added lines” Backport of ‘Backfill duo_secret_detection_fp_enabled to false’ [18.11] Backport of “Remove –unlink-first and –recursive-unlink from tar extract” Backport of ‘Add postgres_index_bloat_estimate SQL function’ [18.11 Backport] Bump PostgreSQL versions to 16.14 and 17.10 Backport fix for Mattermost deprecation to 18.11 Fix accidental enable of mattermost by deprecation check -> in 18.11.9 Important notes on upgrading This patch includes database migrations that may impact your upgrade process. Postgresql server versions were updated to 16.14 and 17.10 to include the latest upstream patches and fixes. This version fixes an issue where upgrading to 19.x failed with a Mattermost deprecation error for Linux package installations, even when Mattermost was not actively configured. Upgrade to this version before upgrading to 19.0 or later. For details, see Mattermost removed from the Linux package . On very large installations, the gitlab:db:reindex task could time out while estimating index bloat for a single index, causing the job to fail repeatedly and leaving PostgreSQL indexes to grow increasingly bloated, which in turn degraded overall instance performance and complicated upgrades. This release restructures the bloat-estimation query for single-index lookups, restoring r
CSIRTS triage
- What
- This is a patch release addressing regressions and bugs, with no security fixes included.
- Who is affected
- All deployments of GitLab Community Edition and Enterprise Edition 18.11.x.
- Urgency
- No security urgency; this is a non-security maintenance release.
- Action
- Update to version 18.11.9 to fix regressions, particularly the Mattermost deprecation code bug.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch GitLab Community Edition and Enterprise Edition
Get an email when a new GitLab Community Edition and Enterprise Edition advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://docs.gitlab.com/releases/patches/patch-release-gitlab-18-11-9-released/
Recent advisories for GitLab Patch Release
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- unknownGitLab Patch Release: 18.11.9gitlab · 2026-08-06
- unknownGitLab Patch Release: 18.11.8gitlab · 2026-08-05
- unknownGitLab Patch Release: 18.11.8gitlab · 2026-08-05
- criticalGitLab Patch Release: 19.2.1, 19.1.3, 19.0.5gitlab · 2026-07-29
- criticalGitLab Patch Release: 19.2.1, 19.1.3, 19.0.5gitlab · 2026-07-29
- criticalGitLab Patch Release: 19.1.2, 19.0.4, 18.11.7gitlab · 2026-07-08
More from GitLab Security Releases
- unknownGitLab Patch Release: 18.11.92026-08-06
- unknownGitLab Patch Release: 18.11.82026-08-05
- unknownGitLab Patch Release: 18.11.82026-08-05
- criticalGitLab Patch Release: 19.2.1, 19.1.3, 19.0.52026-07-29
- criticalGitLab Patch Release: 19.2.1, 19.1.3, 19.0.52026-07-29