CVE-2021-39947
Fixed in a distro release EPSS <1%CVSS 5.3
In specific circumstances, trace file buffers in GitLab Runner versions up to 14.3.4, 14.4 to 14.4.2, and 14.5 to 14.5.2 would re-use the file descriptor 0 for multiple traces and mix the output of several jobs
Products: GitLab Runner
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | gitlab-runner | 14.5.2-1 |
| Ubuntu 18.04 LTS | gitlab-ci-multi-runner | no fix |
| Ubuntu 20.04 LTS | gitlab-ci-multi-runner | no fix |