Linux · Security advisory · November 7, 2026

ELSA-2026-89830: Security update for 28 packages

ELSA-2026-89830, released November 7, 2026, fixes 2 CVEs across 28 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0044
38th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 2 Routine 0

Fixed package versions

ProductReleaseFixed in
cppol 80:8.5.0-30.0.1.el8_10
gccol 80:8.5.0-30.0.1.el8_10
gcc-c++ol 80:8.5.0-30.0.1.el8_10
gcc-gdb-pluginol 80:8.5.0-30.0.1.el8_10
gcc-gfortranol 80:8.5.0-30.0.1.el8_10
gcc-offload-nvptxol 80:8.5.0-30.0.1.el8_10
gcc-plugin-annobinol 80:8.5.0-30.0.1.el8_10
gcc-plugin-develol 80:8.5.0-30.0.1.el8_10
libasanol 80:8.5.0-30.0.1.el8_10
libatomicol 80:8.5.0-30.0.1.el8_10
libatomic-staticol 80:8.5.0-30.0.1.el8_10
libgccol 80:8.5.0-30.0.1.el8_10
libgfortranol 80:8.5.0-30.0.1.el8_10
libgfortran-staticol 80:8.5.0-30.0.1.el8_10
libgompol 80:8.5.0-30.0.1.el8_10
libgomp-offload-nvptxol 80:8.5.0-30.0.1.el8_10
libitmol 80:8.5.0-30.0.1.el8_10
libitm-develol 80:8.5.0-30.0.1.el8_10
liblsanol 80:8.5.0-30.0.1.el8_10
libquadmathol 80:8.5.0-30.0.1.el8_10
libquadmath-develol 80:8.5.0-30.0.1.el8_10
libquadmath-staticol 80:8.5.0-30.0.1.el8_10
libstdc++ol 80:8.5.0-30.0.1.el8_10
libstdc++-develol 80:8.5.0-30.0.1.el8_10
libstdc++-docsol 80:8.5.0-30.0.1.el8_10
libstdc++-staticol 80:8.5.0-30.0.1.el8_10
libtsanol 80:8.5.0-30.0.1.el8_10
libubsanol 80:8.5.0-30.0.1.el8_10

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-95619 Gcc: libstdc++ integer overflow in `new` operator 7.7 0.0044 None reported
High CVE-2026-102010 Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if 7.7 0.0035 None reported
Showing 1 to 2 of 2 1