Skip to content
OpenAdvisories
Medium 1 exploited CVE ELSA-2025-1306 1 CVE

Moderate: gcc-toolset-13-gcc security update (Oracle Linux 8)

Published Feb 12, 2025 · Updated Feb 12, 2025

Ecosystem: Oracle Linux

Summary

[13.3.1-2.2.0.1]
- Merge Oracle patches to 13.3.1-2.2.
gfortran needs install-info at installation time.
Orabug: 36472775

[13.3.1-2.2]
- disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78279)

Fixed packages 19

ReleasePackageFixed in
Oracle Linux · 8 gcc-toolset-13-gcc 0:13.3.1-2.2.0.1.el8_10
Oracle Linux · 8 gcc-toolset-13-gcc-c++ 0:13.3.1-2.2.0.1.el8_10
Oracle Linux · 8 gcc-toolset-13-gcc-gfortran 0:13.3.1-2.2.0.1.el8_10
Oracle Linux · 8 gcc-toolset-13-gcc-plugin-annobin 0:13.3.1-2.2.0.1.el8_10
Oracle Linux · 8 gcc-toolset-13-gcc-plugin-devel 0:13.3.1-2.2.0.1.el8_10
Oracle Linux · 8 gcc-toolset-13-libasan-devel 0:13.3.1-2.2.0.1.el8_10
Oracle Linux · 8 gcc-toolset-13-libatomic-devel 0:13.3.1-2.2.0.1.el8_10
Oracle Linux · 8 gcc-toolset-13-libgccjit 0:13.3.1-2.2.0.1.el8_10
Oracle Linux · 8 gcc-toolset-13-libgccjit-devel 0:13.3.1-2.2.0.1.el8_10
Oracle Linux · 8 gcc-toolset-13-libitm-devel 0:13.3.1-2.2.0.1.el8_10
Oracle Linux · 8 gcc-toolset-13-liblsan-devel 0:13.3.1-2.2.0.1.el8_10
Oracle Linux · 8 gcc-toolset-13-libquadmath-devel 0:13.3.1-2.2.0.1.el8_10
Oracle Linux · 8 gcc-toolset-13-libstdc++-devel 0:13.3.1-2.2.0.1.el8_10
Oracle Linux · 8 gcc-toolset-13-libstdc++-docs 0:13.3.1-2.2.0.1.el8_10
Oracle Linux · 8 gcc-toolset-13-libtsan-devel 0:13.3.1-2.2.0.1.el8_10
Oracle Linux · 8 gcc-toolset-13-libubsan-devel 0:13.3.1-2.2.0.1.el8_10
Oracle Linux · 8 gcc-toolset-13-offload-nvptx 0:13.3.1-2.2.0.1.el8_10
Oracle Linux · 8 libasan8 0:13.3.1-2.2.0.1.el8_10
Oracle Linux · 8 libtsan2 0:13.3.1-2.2.0.1.el8_10

Vulnerabilities 1

  • Medium 6.9
    CVE-2020-11023 Exploited Public exploit EPSS 85%

    Potential XSS vulnerability in jQuery

    In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute unt…

    jquery jQuery drupal7 cacti Debian Ubuntu Alpine npm Packagist Maven NuGet RubyGems
    KEV Jan 23, 2025