Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CGA-5prq-8gr5-fcpw

published 1 month ago

Summary

No summary available.

What to do

Update chainguard commercial-gitlab-rails-ee-fips-19.2 to version 19.2.7-r1.

Affected software

Ecosystem	Vendor	Product	Affected versions
Chainguard	chainguard	commercial-gitlab-rails-ee-fips-19.2	< 19.2.7-r1 Fix: upgrade to 19.2.7-r1

Original advisory text

CGA-5prq-8gr5-fcpw

References

https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42338.json URL
https://access.redhat.com/errata/RHSA-2026:33155 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:33160 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:33163 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:33173 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:33183 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:33574 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:34374 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:35841 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:35842 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:35891 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:35892 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-42338 Vendor Advisory
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42338... Vendor Advisory
https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-42338 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2476810 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:36754 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36820 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:39246 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:39868 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41928 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41947 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:44267 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:44237 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:44263 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:51200 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:52399 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:56928 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:57590 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:60520 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:62336 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:62335 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:65126 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:66488 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:66545 Vendor Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

8.1 High

Timeline

Published9 Sep 2026

Updated8 Oct 2026

First seen8 Oct 2026

Sources

CGA-5prq-8gr5-fcpw · OSV

Track software like this

Free during beta