Linux · AlmaLinux · Security advisory · November 11, 2026

ALSA-2026:96235: Security update for 24 packages

ALSA-2026:96235, released November 11, 2026, fixes 4 CVEs across 24 products. One of them is being exploited (CVE-2026-97229); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
4
2 rated Critical
Exploited
1
CVE-2026-97229
Highest CVSS
10.0
Base score, 0 to 10
Highest EPSS
0.6522
99th percentile

Priority of the 4 CVEs

Patch now 1 Urgent 1 High 2 Routine 0

Fixed package versions

ProductReleaseFixed in
rubyalmalinux 103.3.13-16.el10_2
ruby-bundled-gemsalmalinux 103.3.13-16.el10_2
ruby-default-gemsalmalinux 103.3.13-16.el10_2
ruby-develalmalinux 103.3.13-16.el10_2
ruby-docalmalinux 103.3.13-16.el10_2
ruby-libsalmalinux 103.3.13-16.el10_2
rubygem-bigdecimalalmalinux 103.1.5-16.el10_2
rubygem-bundleralmalinux 102.5.22-16.el10_2
rubygem-io-consolealmalinux 100.7.1-16.el10_2
rubygem-irbalmalinux 101.13.1-16.el10_2
rubygem-jsonalmalinux 102.7.2-16.el10_2
rubygem-minitestalmalinux 105.20.0-16.el10_2
rubygem-power_assertalmalinux 102.0.3-16.el10_2
rubygem-psychalmalinux 105.1.2-16.el10_2
rubygem-raccalmalinux 101.7.3-16.el10_2
rubygem-rakealmalinux 1013.1.0-16.el10_2
rubygem-rbsalmalinux 103.4.0-16.el10_2
rubygem-rdocalmalinux 106.6.3.1-16.el10_2
rubygem-rexmlalmalinux 103.4.4-16.el10_2
rubygem-rssalmalinux 100.3.1-16.el10_2
rubygem-test-unitalmalinux 103.6.1-16.el10_2
rubygem-typeprofalmalinux 100.21.9-16.el10_2
rubygemsalmalinux 103.5.22-16.el10_2
rubygems-develalmalinux 103.5.22-16.el10_2

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Patch now CVE-2026-97229 Integer Overflow or Wraparound in GitLab10.0 0.6522 KEVExploited
Urgent CVE-2026-110264 Integer Overflow or Wraparound in GitLab10.0 0.0135 None reported
High CVE-2026-93577 ruby4.0-rubygem-pg: Fix: integer overflow issue in regular expression compiler9.9 0.0063 None reported
High CVE-2026-89078 ruby: Fix: double free issue in regular expression parser9.9 0.0052 None reported
Showing 1 to 4 of 4 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.