medium
advisory
GitHub Enterprise Server Security Updates
GitHub has released security updates for multiple versions of GitHub Enterprise Server to address undisclosed vulnerabilities.
Triage facts
Revision 1- Applicability
- Enterprise Server (3.19.0 < 3.19.14), Enterprise Server (3.20.0 < 3.20.10) +2
- Evidence
- Unknown
- Severity
- Medium
- Action
- Elevated
- Sources
- 5 public sources
- Freshness
- Revision 1Nov 4, 21:09 UTC
- Source quality
- A1Likely
The Canadian Centre for Cyber Security has issued an advisory regarding security updates for GitHub Enterprise Server. These updates address multiple vulnerabilities across versions 3.19, 3.20, 3.21, and 3.22. Specific vulnerability details (CVEs and impact) were not disclosed in the advisory. Users and administrators are encouraged to consult the official release notes and apply updates to the recommended versions.
Recommendation
- Inventory all GitHub Enterprise Server instances to identify versions 3.19.0-3.19.13, 3.20.0-3.20.9, 3.21.0-3.21.7, and 3.22.0-3.22.2.
- Upgrade affected GitHub Enterprise Server instances to the following minimum versions: 3.19.14, 3.20.10, 3.21.8, or 3.22.3.
- Monitor the official GitHub Enterprise Server documentation for forthcoming vulnerability details.
Mitigations
Upgrade GitHub Enterprise Server to at least versions 3.19.14, 3.20.10, 3.21.8, or 3.22.3.
immediate
IT Operations
GitHub Enterprise Server security updates