Skip to content
OpenAdvisories
Medium ALAS2023-2023-030 1 CVE

Moderate: gcc security update (Amazon Linux 2023)

Published Feb 17, 2023 · Updated Feb 22, 2023

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2021-42574: A flaw was found in the way Unicode standards are implemented in the context of development environments, which have specialized requirements for rendering text. An attacker could exploit this to deceive a human reviewer by creating a malicious patch containing well placed BiDi characters. The special handling and rendering of those characters can be then used in an attempt to hide unexpected and potentially dangerous behaviour from the reviewer.

Fixed packages 55

ReleasePackageFixed in
Amazon Linux · 2023 cpp 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 cpp-debuginfo 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 gcc 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 gcc-c++ 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 gcc-c++-debuginfo 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 gcc-debuginfo 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 gcc-debugsource 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 gcc-gdb-plugin 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 gcc-gdb-plugin-debuginfo 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 gcc-gfortran 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 gcc-gfortran-debuginfo 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 gcc-offload-nvptx 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 gcc-offload-nvptx-debuginfo 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 gcc-plugin-devel 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 gcc-plugin-devel-debuginfo 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libasan 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libasan-debuginfo 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libasan-static 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libatomic 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libatomic-debuginfo 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libatomic-static 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libgcc 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libgcc-debuginfo 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libgccjit 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libgccjit-debuginfo 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libgccjit-devel 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libgfortran 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libgfortran-debuginfo 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libgfortran-static 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libgomp 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libgomp-debuginfo 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libgomp-offload-nvptx 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libgomp-offload-nvptx-debuginfo 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libitm 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libitm-debuginfo 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libitm-devel 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libitm-static 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 liblsan 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 liblsan-debuginfo 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 liblsan-static 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libquadmath 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libquadmath-debuginfo 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libquadmath-devel 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libquadmath-static 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libstdc++ 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libstdc++-debuginfo 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libstdc++-devel 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libstdc++-docs 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libstdc++-static 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libtsan 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libtsan-debuginfo 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libtsan-static 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libubsan 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libubsan-debuginfo 0:11.3.1-4.amzn2023.0.2
Amazon Linux · 2023 libubsan-static 0:11.3.1-4.amzn2023.0.2

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-42574.html