Summary
The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries.
Security Fix(es):
* gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if (CVE-2026-102010)
* gcc: libstdc++ integer overflow in `new` operator (CVE-2026-95619)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 28
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | cpp | 8.5.0-30.el8_10.alma.1 |
| AlmaLinux · 8 | gcc | 8.5.0-30.el8_10.alma.1 |
| AlmaLinux · 8 | gcc-c++ | 8.5.0-30.el8_10.alma.1 |
| AlmaLinux · 8 | gcc-gdb-plugin | 8.5.0-30.el8_10.alma.1 |
| AlmaLinux · 8 | gcc-gfortran | 8.5.0-30.el8_10.alma.1 |
| AlmaLinux · 8 | gcc-offload-nvptx | 8.5.0-30.el8_10.alma.1 |
| AlmaLinux · 8 | gcc-plugin-annobin | 8.5.0-30.el8_10.alma.1 |
| AlmaLinux · 8 | gcc-plugin-devel | 8.5.0-30.el8_10.alma.1 |
| AlmaLinux · 8 | libasan | 8.5.0-30.el8_10.alma.1 |
| AlmaLinux · 8 | libatomic | 8.5.0-30.el8_10.alma.1 |
| AlmaLinux · 8 | libatomic-static | 8.5.0-30.el8_10.alma.1 |
| AlmaLinux · 8 | libgcc | 8.5.0-30.el8_10.alma.1 |
| AlmaLinux · 8 | libgfortran | 8.5.0-30.el8_10.alma.1 |
| AlmaLinux · 8 | libgfortran-static | 8.5.0-30.el8_10.alma.1 |
| AlmaLinux · 8 | libgomp | 8.5.0-30.el8_10.alma.1 |
| AlmaLinux · 8 | libgomp-offload-nvptx | 8.5.0-30.el8_10.alma.1 |
| AlmaLinux · 8 | libitm | 8.5.0-30.el8_10.alma.1 |
| AlmaLinux · 8 | libitm-devel | 8.5.0-30.el8_10.alma.1 |
| AlmaLinux · 8 | liblsan | 8.5.0-30.el8_10.alma.1 |
| AlmaLinux · 8 | libquadmath | 8.5.0-30.el8_10.alma.1 |
| AlmaLinux · 8 | libquadmath-devel | 8.5.0-30.el8_10.alma.1 |
| AlmaLinux · 8 | libquadmath-static | 8.5.0-30.el8_10.alma.1 |
| AlmaLinux · 8 | libstdc++ | 8.5.0-30.el8_10.alma.1 |
| AlmaLinux · 8 | libstdc++-devel | 8.5.0-30.el8_10.alma.1 |
| AlmaLinux · 8 | libstdc++-docs | 8.5.0-30.el8_10.alma.1 |
| AlmaLinux · 8 | libstdc++-static | 8.5.0-30.el8_10.alma.1 |
| AlmaLinux · 8 | libtsan | 8.5.0-30.el8_10.alma.1 |
| AlmaLinux · 8 | libubsan | 8.5.0-30.el8_10.alma.1 |
Vulnerabilities 2
-
High 7.7
Gcc: libstdc++ integer overflow in `new` operator
A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application in…
-
High 7.0
Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if
A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit…