Linux · Security advisory · November 7, 2026
ALSA-2026:89830: Security update for 28 packages
ALSA-2026:89830, released November 7, 2026, fixes 2 CVEs across 28 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0044
38th percentile
Priority of the 2 CVEs
Patch now 0
Urgent 0
High 2
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| cpp | almalinux 8 | 8.5.0-30.el8_10.alma.1 |
| gcc | almalinux 8 | 8.5.0-30.el8_10.alma.1 |
| gcc-c++ | almalinux 8 | 8.5.0-30.el8_10.alma.1 |
| gcc-gdb-plugin | almalinux 8 | 8.5.0-30.el8_10.alma.1 |
| gcc-gfortran | almalinux 8 | 8.5.0-30.el8_10.alma.1 |
| gcc-offload-nvptx | almalinux 8 | 8.5.0-30.el8_10.alma.1 |
| gcc-plugin-annobin | almalinux 8 | 8.5.0-30.el8_10.alma.1 |
| gcc-plugin-devel | almalinux 8 | 8.5.0-30.el8_10.alma.1 |
| libasan | almalinux 8 | 8.5.0-30.el8_10.alma.1 |
| libatomic | almalinux 8 | 8.5.0-30.el8_10.alma.1 |
| libatomic-static | almalinux 8 | 8.5.0-30.el8_10.alma.1 |
| libgcc | almalinux 8 | 8.5.0-30.el8_10.alma.1 |
| libgfortran | almalinux 8 | 8.5.0-30.el8_10.alma.1 |
| libgfortran-static | almalinux 8 | 8.5.0-30.el8_10.alma.1 |
| libgomp | almalinux 8 | 8.5.0-30.el8_10.alma.1 |
| libgomp-offload-nvptx | almalinux 8 | 8.5.0-30.el8_10.alma.1 |
| libitm | almalinux 8 | 8.5.0-30.el8_10.alma.1 |
| libitm-devel | almalinux 8 | 8.5.0-30.el8_10.alma.1 |
| liblsan | almalinux 8 | 8.5.0-30.el8_10.alma.1 |
| libquadmath | almalinux 8 | 8.5.0-30.el8_10.alma.1 |
| libquadmath-devel | almalinux 8 | 8.5.0-30.el8_10.alma.1 |
| libquadmath-static | almalinux 8 | 8.5.0-30.el8_10.alma.1 |
| libstdc++ | almalinux 8 | 8.5.0-30.el8_10.alma.1 |
| libstdc++-devel | almalinux 8 | 8.5.0-30.el8_10.alma.1 |
| libstdc++-docs | almalinux 8 | 8.5.0-30.el8_10.alma.1 |
| libstdc++-static | almalinux 8 | 8.5.0-30.el8_10.alma.1 |
| libtsan | almalinux 8 | 8.5.0-30.el8_10.alma.1 |
| libubsan | almalinux 8 | 8.5.0-30.el8_10.alma.1 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2026-95619 | Gcc: libstdc++ integer overflow in `new` operator | 7.7 | 0.0044 | None reported | |
| High | CVE-2026-102010 | Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if | 7.7 | 0.0035 | None reported |
Showing 1 to 2 of 2
1