Summary
The gcc-toolset-15-gcc package contains the GNU Compiler Collection version 15.
Security Fix(es):
* gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if (CVE-2026-102010)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 20
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | gcc-toolset-15-gcc | 15.2.1-7.2.el8_10 |
| AlmaLinux · 8 | gcc-toolset-15-gcc-c++ | 15.2.1-7.2.el8_10 |
| AlmaLinux · 8 | gcc-toolset-15-gcc-gfortran | 15.2.1-7.2.el8_10 |
| AlmaLinux · 8 | gcc-toolset-15-gcc-plugin-annobin | 15.2.1-7.2.el8_10 |
| AlmaLinux · 8 | gcc-toolset-15-gcc-plugin-devel | 15.2.1-7.2.el8_10 |
| AlmaLinux · 8 | gcc-toolset-15-libasan-devel | 15.2.1-7.2.el8_10 |
| AlmaLinux · 8 | gcc-toolset-15-libatomic-devel | 15.2.1-7.2.el8_10 |
| AlmaLinux · 8 | gcc-toolset-15-libgccjit | 15.2.1-7.2.el8_10 |
| AlmaLinux · 8 | gcc-toolset-15-libgccjit-devel | 15.2.1-7.2.el8_10 |
| AlmaLinux · 8 | gcc-toolset-15-libitm-devel | 15.2.1-7.2.el8_10 |
| AlmaLinux · 8 | gcc-toolset-15-liblsan-devel | 15.2.1-7.2.el8_10 |
| AlmaLinux · 8 | gcc-toolset-15-libquadmath-devel | 15.2.1-7.2.el8_10 |
| AlmaLinux · 8 | gcc-toolset-15-libstdc++-devel | 15.2.1-7.2.el8_10 |
| AlmaLinux · 8 | gcc-toolset-15-libstdc++-docs | 15.2.1-7.2.el8_10 |
| AlmaLinux · 8 | gcc-toolset-15-libtsan-devel | 15.2.1-7.2.el8_10 |
| AlmaLinux · 8 | gcc-toolset-15-libubsan-devel | 15.2.1-7.2.el8_10 |
| AlmaLinux · 8 | gcc-toolset-15-offload-nvptx | 15.2.1-7.2.el8_10 |
| AlmaLinux · 8 | libasan8 | 15.2.1-7.2.el8_10 |
| AlmaLinux · 8 | liblsan | 15.2.1-7.2.el8_10 |
| AlmaLinux · 8 | libtsan2 | 15.2.1-7.2.el8_10 |
Vulnerabilities 1
-
High 7.0
Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if
A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit…