Summary
The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries.
Security Fix(es):
* jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods (CVE-2020-11023)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 28
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | cpp | 8.5.0-23.el8_10.alma.1 |
| AlmaLinux · 8 | gcc | 8.5.0-23.el8_10.alma.1 |
| AlmaLinux · 8 | gcc-c++ | 8.5.0-23.el8_10.alma.1 |
| AlmaLinux · 8 | gcc-gdb-plugin | 8.5.0-23.el8_10.alma.1 |
| AlmaLinux · 8 | gcc-gfortran | 8.5.0-23.el8_10.alma.1 |
| AlmaLinux · 8 | gcc-offload-nvptx | 8.5.0-23.el8_10.alma.1 |
| AlmaLinux · 8 | gcc-plugin-annobin | 8.5.0-23.el8_10.alma.1 |
| AlmaLinux · 8 | gcc-plugin-devel | 8.5.0-23.el8_10.alma.1 |
| AlmaLinux · 8 | libasan | 8.5.0-23.el8_10.alma.1 |
| AlmaLinux · 8 | libatomic | 8.5.0-23.el8_10.alma.1 |
| AlmaLinux · 8 | libatomic-static | 8.5.0-23.el8_10.alma.1 |
| AlmaLinux · 8 | libgcc | 8.5.0-23.el8_10.alma.1 |
| AlmaLinux · 8 | libgfortran | 8.5.0-23.el8_10.alma.1 |
| AlmaLinux · 8 | libgfortran-static | 8.5.0-23.el8_10.alma.1 |
| AlmaLinux · 8 | libgomp | 8.5.0-23.el8_10.alma.1 |
| AlmaLinux · 8 | libgomp-offload-nvptx | 8.5.0-23.el8_10.alma.1 |
| AlmaLinux · 8 | libitm | 8.5.0-23.el8_10.alma.1 |
| AlmaLinux · 8 | libitm-devel | 8.5.0-23.el8_10.alma.1 |
| AlmaLinux · 8 | liblsan | 8.5.0-23.el8_10.alma.1 |
| AlmaLinux · 8 | libquadmath | 8.5.0-23.el8_10.alma.1 |
| AlmaLinux · 8 | libquadmath-devel | 8.5.0-23.el8_10.alma.1 |
| AlmaLinux · 8 | libquadmath-static | 8.5.0-23.el8_10.alma.1 |
| AlmaLinux · 8 | libstdc++ | 8.5.0-23.el8_10.alma.1 |
| AlmaLinux · 8 | libstdc++-devel | 8.5.0-23.el8_10.alma.1 |
| AlmaLinux · 8 | libstdc++-docs | 8.5.0-23.el8_10.alma.1 |
| AlmaLinux · 8 | libstdc++-static | 8.5.0-23.el8_10.alma.1 |
| AlmaLinux · 8 | libtsan | 8.5.0-23.el8_10.alma.1 |
| AlmaLinux · 8 | libubsan | 8.5.0-23.el8_10.alma.1 |
Vulnerabilities 1
-
Medium 6.9
Potential XSS vulnerability in jQuery
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute unt…
KEV Jan 23, 2025