Alert GCSA-26008 - Aggiornamento di sicurezza per GitLab
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
******************************************************************
alert ID: GCSA-26008
data: 22 gennaio 2026
titolo: Aggiornamento di sicurezza per GitLab
******************************************************************
:: Descrizione del problema
GitLab ha rilasciato nuove versioni della propria piattaforma
con le quali risolve varie vulnerabilita' di sicurezza,
delle quali 3 hanno un livello di gravita' "alto".
Maggiori informazioni sono disponibili alla sezione "Riferimenti".
:: Software interessato
GitLab Community Edition (CE)
GitLab Enterprise Edition (EE)
versioni precedenti alla 18.8.2, 18.7.2, 18.6.4
:: Impatto
Bypass delle funzionalita' di sicurezza (SFB)
Denial of Service (DoS)
:: Soluzioni
Aggiornare alle ultime versioni
https://about.gitlab.com/update
https://docs.gitlab.com/update/
:: Riferimenti
GitLab Security Release
https://about.gitlab.com/releases/2026/01/21/patch-release-gitlab-18-8-2-released/
GitLab - security best practices
https://about.gitlab.com/blog/security-hygiene-best-practices-for-gitlab-users/
https://about.gitlab.com/blog/gitlab-instance-security-best-practices/
https://about.gitlab.com/security/hardening/
Bleeping Computer
https://www.bleepingcomputer.com/news/security/gitlab-warns-of-high-severity-2fa-bypass-denial-of-service-flaws/
Mitre CVE
https://www.cve.org/CVERecord?id=CVE-2025-13335
https://www.cve.org/CVERecord?id=CVE-2025-13927
https://www.cve.org/CVERecord?id=CVE-2025-13928
https://www.cve.org/CVERecord?id=CVE-2026-0723
https://www.cve.org/CVERecord?id=CVE-2026-1102
GARR CERT Security Alert - subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----
iGsEAREIACsWIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCaXJGMQ0cY2VydEBnYXJy
Lml0AAoJEMGcTJNlEmBCA9gAoKp3CjCUwAPzJ8CC72yqSk9/hXIDAKCnALSZ+PLi
JwFT/eTXSU60GQOeHA==
=LiC4
-----END PGP SIGNATURE-----
Hash: SHA256
******************************************************************
alert ID: GCSA-26008
data: 22 gennaio 2026
titolo: Aggiornamento di sicurezza per GitLab
******************************************************************
:: Descrizione del problema
GitLab ha rilasciato nuove versioni della propria piattaforma
con le quali risolve varie vulnerabilita' di sicurezza,
delle quali 3 hanno un livello di gravita' "alto".
Maggiori informazioni sono disponibili alla sezione "Riferimenti".
:: Software interessato
GitLab Community Edition (CE)
GitLab Enterprise Edition (EE)
versioni precedenti alla 18.8.2, 18.7.2, 18.6.4
:: Impatto
Bypass delle funzionalita' di sicurezza (SFB)
Denial of Service (DoS)
:: Soluzioni
Aggiornare alle ultime versioni
https://about.gitlab.com/update
https://docs.gitlab.com/update/
:: Riferimenti
GitLab Security Release
https://about.gitlab.com/releases/2026/01/21/patch-release-gitlab-18-8-2-released/
GitLab - security best practices
https://about.gitlab.com/blog/security-hygiene-best-practices-for-gitlab-users/
https://about.gitlab.com/blog/gitlab-instance-security-best-practices/
https://about.gitlab.com/security/hardening/
Bleeping Computer
https://www.bleepingcomputer.com/news/security/gitlab-warns-of-high-severity-2fa-bypass-denial-of-service-flaws/
Mitre CVE
https://www.cve.org/CVERecord?id=CVE-2025-13335
https://www.cve.org/CVERecord?id=CVE-2025-13927
https://www.cve.org/CVERecord?id=CVE-2025-13928
https://www.cve.org/CVERecord?id=CVE-2026-0723
https://www.cve.org/CVERecord?id=CVE-2026-1102
GARR CERT Security Alert - subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----
iGsEAREIACsWIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCaXJGMQ0cY2VydEBnYXJy
Lml0AAoJEMGcTJNlEmBCA9gAoKp3CjCUwAPzJ8CC72yqSk9/hXIDAKCnALSZ+PLi
JwFT/eTXSU60GQOeHA==
=LiC4
-----END PGP SIGNATURE-----