Skip to content
OpenAdvisories
Medium 1 exploited CVE ELSA-2025-1601 1 CVE

Moderate: gcc security update (Oracle Linux 7)

Published Mar 12, 2025 · Updated Mar 12, 2025

Ecosystem: Oracle Linux

Summary

[4.8.5-45.0.1]
- [Orabug: 37603707]
ELSA-2025-1601 Moderate: gcc security update CVE-2020-11023
rebuild for CVE-2020-11023
- Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>

[4.8.5-44.0.5]
- fix arm cross building inline issue.
gcc48-cfns-fix-protos.patch
- Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>

[4.8.5-44.0.3]
- [Orabug: 31505739]
backport fix for sorry, unimplemented ms_abi attribute requires
-maccumulate-outgoing-args or subtarget optimization implying it
- Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>

Fixed packages 39

ReleasePackageFixed in
Oracle Linux · 7 cpp 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 gcc 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 gcc-c++ 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 gcc-gfortran 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 gcc-gnat 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 gcc-go 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 gcc-objc 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 gcc-objc++ 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 gcc-plugin-devel 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 libasan 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 libasan-static 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 libatomic 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 libatomic-static 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 libgcc 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 libgfortran 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 libgfortran-static 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 libgnat 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 libgnat-devel 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 libgnat-static 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 libgo 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 libgo-devel 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 libgo-static 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 libgomp 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 libitm 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 libitm-devel 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 libitm-static 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 libmudflap 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 libmudflap-devel 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 libmudflap-static 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 libobjc 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 libquadmath 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 libquadmath-devel 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 libquadmath-static 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 libstdc++ 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 libstdc++-devel 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 libstdc++-docs 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 libstdc++-static 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 libtsan 0:4.8.5-45.0.1.el7_9
Oracle Linux · 7 libtsan-static 0:4.8.5-45.0.1.el7_9

Vulnerabilities 1

  • Medium 6.9
    CVE-2020-11023 Exploited Public exploit EPSS 85%

    Potential XSS vulnerability in jQuery

    In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute unt…

    jquery jQuery drupal7 cacti Debian Ubuntu Alpine npm Packagist Maven NuGet RubyGems
    KEV Jan 23, 2025