Summary
The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries.
Security Fix(es):
* jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods (CVE-2020-11023)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 26
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | cpp | 11.5.0-5.el9_5.alma.1 |
| AlmaLinux · 9 | gcc | 11.5.0-5.el9_5.alma.1 |
| AlmaLinux · 9 | gcc-c++ | 11.5.0-5.el9_5.alma.1 |
| AlmaLinux · 9 | gcc-gfortran | 11.5.0-5.el9_5.alma.1 |
| AlmaLinux · 9 | gcc-offload-nvptx | 11.5.0-5.el9_5.alma.1 |
| AlmaLinux · 9 | gcc-plugin-annobin | 11.5.0-5.el9_5.alma.1 |
| AlmaLinux · 9 | gcc-plugin-devel | 11.5.0-5.el9_5.alma.1 |
| AlmaLinux · 9 | libasan | 11.5.0-5.el9_5.alma.1 |
| AlmaLinux · 9 | libatomic | 11.5.0-5.el9_5.alma.1 |
| AlmaLinux · 9 | libgcc | 11.5.0-5.el9_5.alma.1 |
| AlmaLinux · 9 | libgccjit | 11.5.0-5.el9_5.alma.1 |
| AlmaLinux · 9 | libgccjit-devel | 11.5.0-5.el9_5.alma.1 |
| AlmaLinux · 9 | libgfortran | 11.5.0-5.el9_5.alma.1 |
| AlmaLinux · 9 | libgomp | 11.5.0-5.el9_5.alma.1 |
| AlmaLinux · 9 | libgomp-offload-nvptx | 11.5.0-5.el9_5.alma.1 |
| AlmaLinux · 9 | libitm | 11.5.0-5.el9_5.alma.1 |
| AlmaLinux · 9 | libitm-devel | 11.5.0-5.el9_5.alma.1 |
| AlmaLinux · 9 | liblsan | 11.5.0-5.el9_5.alma.1 |
| AlmaLinux · 9 | libquadmath | 11.5.0-5.el9_5.alma.1 |
| AlmaLinux · 9 | libquadmath-devel | 11.5.0-5.el9_5.alma.1 |
| AlmaLinux · 9 | libstdc++ | 11.5.0-5.el9_5.alma.1 |
| AlmaLinux · 9 | libstdc++-devel | 11.5.0-5.el9_5.alma.1 |
| AlmaLinux · 9 | libstdc++-docs | 11.5.0-5.el9_5.alma.1 |
| AlmaLinux · 9 | libstdc++-static | 11.5.0-5.el9_5.alma.1 |
| AlmaLinux · 9 | libtsan | 11.5.0-5.el9_5.alma.1 |
| AlmaLinux · 9 | libubsan | 11.5.0-5.el9_5.alma.1 |
Vulnerabilities 1
-
Medium 6.9
Potential XSS vulnerability in jQuery
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute unt…
KEV Jan 23, 2025