Alert GCSA-26231 - Aggiornamento di sicurezza per GitLab

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** alert ID: GCSA-26231 data: 24 settembre 2026 titolo: Aggiornamento di sicurezza per GitLab ****************************************************************** :: Descrizione del problema GitLab ha rilasciato nuove versioni della propria piattaforma con le quali risolve 11 vulnerabilita', delle quali 2 sono di livello "critico, e 2 di livello "alto". Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Software interessato GitLab Community Edition (CE) GitLab Enterprise Edition (EE) versioni precedenti alla 19.4.1, 19.3.3, 19.2.7 :: Impatto Cross-site Scripting (XSS) Bypass delle funzionalita' di sicurezza (SFB) Attacco alla confidenzialita' dei dati (ID) :: Soluzioni Aggiornare alle ultime versioni https://about.gitlab.com/update https://docs.gitlab.com/update/ :: Riferimenti GitLab Security Release https://docs.gitlab.com/releases/19/gitlab-19-4-released/ https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/ GitLab - security best practices https://about.gitlab.com/blog/security-hygiene-best-practices-for-gitlab-users/ https://about.gitlab.com/blog/gitlab-instance-security-best-practices/ https://about.gitlab.com/security/hardening/ https://about.gitlab.com/it-it/the-source/security/how-to-implement-secret-management-best-practices-with-gitlab/ https://about.gitlab.com/it-it/the-source/security/enterprise-scale-security-and-compliance-policy-management-in-the-ai-era/ https://thehackernews.com/2026/09/a-leaked-gitlab-issue-email-address.html CVE ID https://www.cve.org/CVERecord?id=CVE-2026-89078 https://www.cve.org/CVERecord?id=CVE-2026-93577 https://www.cve.org/CVERecord?id=CVE-2026-84739 https://www.cve.org/CVERecord?id=CVE-2026-92470 https://www.cve.org/CVERecord?id=CVE-2026-92874 https://www.cve.org/CVERecord?id=CVE-2026-92530 https://www.cve.org/CVERecord?id=CVE-2026-8937 https://www.cve.org/CVERecord?id=CVE-2026-92529 https://www.cve.org/CVERecord?id=CVE-2026-10518 https://www.cve.org/CVERecord?id=CVE-2026-4523 https://www.cve.org/CVERecord?id=CVE-2026-92628 GARR CERT Security Alert - subscribe/unsubscribe: http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCarTtZAAKCRDBnEyTZRJg QnmsAJ9rD3WSFxx34doO2iJ0YFl82CoN4wCcCB7Tyx8SzAAvivbExHbch0XqY/0= =abh/ -----END PGP SIGNATURE-----