Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CGA-f825-9f98-gp6x

published 5 months ago

Summary

No summary available.

What to do

Update chainguard gitaly-18.10 to version 18.10.7-r1.
Update wolfi gitaly-18.10 to version 18.10.7-r1.

Affected software

Ecosystem	Vendor	Product	Affected versions
Chainguard	chainguard	gitaly-18.10	< 18.10.7-r1 Fix: upgrade to 18.10.7-r1
Wolfi	wolfi	gitaly-18.10	< 18.10.7-r1 Fix: upgrade to 18.10.7-r1

Original advisory text

CGA-f825-9f98-gp6x

References

https://pkg.go.dev URL
https://groups.google.com/g/golang-announce/c/a082jnz-LvI URL
https://go.dev/cl/781660 URL
https://go.dev/issue/79563 URL
https://pkg.go.dev/vuln/GO-2026-5015 URL
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39835.json URL
https://access.redhat.com/errata/RHSA-2026:26546 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:26547 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-39835 Vendor Advisory
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/39xxx/CVE-2026-39835... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-39835 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2480680 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:36199 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36207 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36319 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36625 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36648 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36651 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36796 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36797 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:37072 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:37123 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:37268 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:37271 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:37272 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:37286 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:37296 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:37387 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:37410 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:38504 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:40118 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:40262 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:40969 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:40974 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:40945 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:40972 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41019 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41031 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41036 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41066 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:42146 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:42796 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:43052 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:43692 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:46885 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:47735 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:47949 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:48151 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:51033 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:51038 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:52857 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:52910 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:51036 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:54525 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:57194 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:59467 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:59593 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:60520 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:62260 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:65126 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:66022 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:66521 Vendor Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

5.3 Medium

Timeline

Published27 May 2026

Updated5 Nov 2026

First seen5 Nov 2026

Sources

CGA-f825-9f98-gp6x · OSV

Track software like this

Free during beta