Skip to content
OpenAdvisories
Medium 1 exploited CVE ALSA-2025:1338 1 CVE

Moderate: gcc-toolset-14-gcc security update

Published Feb 12, 2025 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The gcc-toolset-14-gcc package contains the GNU Compiler Collection version 14.

Security Fix(es):

* jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods (CVE-2020-11023)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 20

ReleasePackageFixed in
AlmaLinux · 8 gcc-toolset-14-gcc 14.2.1-7.1.el8_10
AlmaLinux · 8 gcc-toolset-14-gcc-c++ 14.2.1-7.1.el8_10
AlmaLinux · 8 gcc-toolset-14-gcc-gfortran 14.2.1-7.1.el8_10
AlmaLinux · 8 gcc-toolset-14-gcc-plugin-annobin 14.2.1-7.1.el8_10
AlmaLinux · 8 gcc-toolset-14-gcc-plugin-devel 14.2.1-7.1.el8_10
AlmaLinux · 8 gcc-toolset-14-libasan-devel 14.2.1-7.1.el8_10
AlmaLinux · 8 gcc-toolset-14-libatomic-devel 14.2.1-7.1.el8_10
AlmaLinux · 8 gcc-toolset-14-libgccjit 14.2.1-7.1.el8_10
AlmaLinux · 8 gcc-toolset-14-libgccjit-devel 14.2.1-7.1.el8_10
AlmaLinux · 8 gcc-toolset-14-libitm-devel 14.2.1-7.1.el8_10
AlmaLinux · 8 gcc-toolset-14-liblsan-devel 14.2.1-7.1.el8_10
AlmaLinux · 8 gcc-toolset-14-libquadmath-devel 14.2.1-7.1.el8_10
AlmaLinux · 8 gcc-toolset-14-libstdc++-devel 14.2.1-7.1.el8_10
AlmaLinux · 8 gcc-toolset-14-libstdc++-docs 14.2.1-7.1.el8_10
AlmaLinux · 8 gcc-toolset-14-libtsan-devel 14.2.1-7.1.el8_10
AlmaLinux · 8 gcc-toolset-14-libubsan-devel 14.2.1-7.1.el8_10
AlmaLinux · 8 gcc-toolset-14-offload-nvptx 14.2.1-7.1.el8_10
AlmaLinux · 8 libasan8 14.2.1-7.1.el8_10
AlmaLinux · 8 liblsan 14.2.1-7.1.el8_10
AlmaLinux · 8 libtsan2 14.2.1-7.1.el8_10

Vulnerabilities 1

  • Medium 6.9
    CVE-2020-11023 Exploited Public exploit EPSS 85%

    Potential XSS vulnerability in jQuery

    In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute unt…

    jquery jQuery drupal7 cacti Debian Ubuntu Alpine npm Packagist Maven NuGet RubyGems
    KEV Jan 23, 2025

References

  • report
    https://access.redhat.com/security/cve/CVE-2020-11023
  • report
    https://bugzilla.redhat.com/1850004
  • advisory
    https://errata.almalinux.org/8/ALSA-2025-1338.html