Red Hat Security Advisory

RHSA-2026:88861

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-10-23 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Hardened Images ruby3.4-3.4.12-33.1.hum1@aarch64, ruby3.4-3.4.12-33.1.hum1@s390x, ruby3.4-3.4.12-33.1.hum1@src +16

Fixes 4 records

TI-2026-71508 CVE-2026-97229 · GHSA-9hj5-r43h-h3xg

Integer overflow in GitLab allows code execution on the server

CRITICAL 100KEV

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to exec…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.6522 Published 2026-10-13 Partial fix · 19.2.8, 19.3.5 +1 CWE-190

TI-2026-79139 CVE-2026-110264 · GHSA-83vq-rvff-66gw

Integer overflow in GitLab regex compilation allows code execution

MEDIUM 52

An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 th…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01349 Published 2026-10-22 Partial fix · 18.11.13, 19.0.10 +5 CWE-190

TI-2026-63046 CVE-2026-93577 · GHSA-wqwg-376r-c226

Integer Overflow or Wraparound in GitLab

MEDIUM 44

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.0063 Published 2026-09-23 Partial fix · 19.2.7, 19.3.3 +1 CWE-190

TI-2026-60363 CVE-2026-89078 · GHSA-9chr-4x58-948m

Double Free in GitLab

MEDIUM 43

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00522 Published 2026-09-23 Partial fix · 19.2.7, 19.3.3 +1 CWE-415