Oval Definition:	oval:com.redhat.rhsa:def:20214586
Revision Date: 2021-11-10 Version: 636 Title: RHSA-2021:4586: gcc-toolset-11-gcc security update (Moderate) Description: The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries. Security Fix(es): Developer environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks (CVE-2021-42574) The following changes were introduced in gcc in order to facilitate detection of BiDi Unicode characters: This update implements a new warning option -Wbidirectional to warn about possibly dangerous bidirectional characters. There are three levels of warning supported by gcc: "-Wbidirectional=unpaired", which warns about improperly terminated BiDi contexts. (This is the default.) "-Wbidirectional=none", which turns the warning off. "-Wbidirectional=any", which warns about any use of bidirectional characters. For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Family: unix Class: patch Status: Reference(s): CVE-2021-42574 RHSA-2021:4586 Platform(s): Red Hat Enterprise Linux 8 Product(s): Definition Synopsis Red Hat Enterprise Linux must be installed OR Package Information Red Hat Enterprise Linux 8 is installed OR Red Hat CoreOS 4 is installed AND gcc-toolset-11-gcc is earlier than 0:11.2.1-1.2.el8_5 AND gcc-toolset-11-gcc is signed with Red Hat redhatrelease2 key gcc-toolset-11-gcc-c++ is earlier than 0:11.2.1-1.2.el8_5 AND gcc-toolset-11-gcc-c++ is signed with Red Hat redhatrelease2 key gcc-toolset-11-gcc-gdb-plugin is earlier than 0:11.2.1-1.2.el8_5 AND gcc-toolset-11-gcc-gdb-plugin is signed with Red Hat redhatrelease2 key gcc-toolset-11-gcc-gfortran is earlier than 0:11.2.1-1.2.el8_5 AND gcc-toolset-11-gcc-gfortran is signed with Red Hat redhatrelease2 key gcc-toolset-11-gcc-plugin-devel is earlier than 0:11.2.1-1.2.el8_5 AND gcc-toolset-11-gcc-plugin-devel is signed with Red Hat redhatrelease2 key gcc-toolset-11-libasan-devel is earlier than 0:11.2.1-1.2.el8_5 AND gcc-toolset-11-libasan-devel is signed with Red Hat redhatrelease2 key gcc-toolset-11-libatomic-devel is earlier than 0:11.2.1-1.2.el8_5 AND gcc-toolset-11-libatomic-devel is signed with Red Hat redhatrelease2 key gcc-toolset-11-libgccjit is earlier than 0:11.2.1-1.2.el8_5 AND gcc-toolset-11-libgccjit is signed with Red Hat redhatrelease2 key gcc-toolset-11-libgccjit-devel is earlier than 0:11.2.1-1.2.el8_5 AND gcc-toolset-11-libgccjit-devel is signed with Red Hat redhatrelease2 key gcc-toolset-11-libgccjit-docs is earlier than 0:11.2.1-1.2.el8_5 AND gcc-toolset-11-libgccjit-docs is signed with Red Hat redhatrelease2 key gcc-toolset-11-libitm-devel is earlier than 0:11.2.1-1.2.el8_5 AND gcc-toolset-11-libitm-devel is signed with Red Hat redhatrelease2 key gcc-toolset-11-liblsan-devel is earlier than 0:11.2.1-1.2.el8_5 AND gcc-toolset-11-liblsan-devel is signed with Red Hat redhatrelease2 key gcc-toolset-11-libquadmath-devel is earlier than 0:11.2.1-1.2.el8_5 AND gcc-toolset-11-libquadmath-devel is signed with Red Hat redhatrelease2 key gcc-toolset-11-libstdc++-devel is earlier than 0:11.2.1-1.2.el8_5 AND gcc-toolset-11-libstdc++-devel is signed with Red Hat redhatrelease2 key gcc-toolset-11-libstdc++-docs is earlier than 0:11.2.1-1.2.el8_5 AND gcc-toolset-11-libstdc++-docs is signed with Red Hat redhatrelease2 key gcc-toolset-11-libtsan-devel is earlier than 0:11.2.1-1.2.el8_5 AND gcc-toolset-11-libtsan-devel is signed with Red Hat redhatrelease2 key gcc-toolset-11-libubsan-devel is earlier than 0:11.2.1-1.2.el8_5 AND gcc-toolset-11-libubsan-devel is signed with Red Hat redhatrelease2 key libasan6 is earlier than 0:11.2.1-1.2.el8_5 AND libasan6 is signed with Red Hat redhatrelease2 key
BACK