Fixed packages 31
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gcc-toolset-15-gcc | 0:15.2.1-7.4.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gcc-toolset-15-gcc-c++ | 0:15.2.1-7.4.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gcc-toolset-15-gcc-c++-debuginfo | 0:15.2.1-7.4.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gcc-toolset-15-gcc-debuginfo | 0:15.2.1-7.4.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gcc-toolset-15-gcc-gfortran | 0:15.2.1-7.4.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gcc-toolset-15-gcc-gfortran-debuginfo | 0:15.2.1-7.4.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gcc-toolset-15-gcc-plugin-annobin | 0:15.2.1-7.4.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gcc-toolset-15-gcc-plugin-annobin-debuginfo | 0:15.2.1-7.4.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gcc-toolset-15-gcc-plugin-devel | 0:15.2.1-7.4.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gcc-toolset-15-gcc-plugin-devel-debuginfo | 0:15.2.1-7.4.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gcc-toolset-15-libasan-devel | 0:15.2.1-7.4.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gcc-toolset-15-libatomic-devel | 0:15.2.1-7.4.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gcc-toolset-15-libgccjit | 0:15.2.1-7.4.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gcc-toolset-15-libgccjit-debuginfo | 0:15.2.1-7.4.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gcc-toolset-15-libgccjit-devel | 0:15.2.1-7.4.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gcc-toolset-15-libitm-devel | 0:15.2.1-7.4.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gcc-toolset-15-liblsan-devel | 0:15.2.1-7.4.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gcc-toolset-15-libquadmath-devel | 0:15.2.1-7.4.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gcc-toolset-15-libstdc++-devel | 0:15.2.1-7.4.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gcc-toolset-15-libstdc++-docs | 0:15.2.1-7.4.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gcc-toolset-15-libtsan-devel | 0:15.2.1-7.4.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gcc-toolset-15-libubsan-devel | 0:15.2.1-7.4.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gcc-toolset-15-offload-nvptx | 0:15.2.1-7.4.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gcc-toolset-15-offload-nvptx-debuginfo | 0:15.2.1-7.4.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | libasan8 | 0:15.2.1-7.4.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | libasan8-debuginfo | 0:15.2.1-7.4.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | libhwasan-debuginfo | 0:15.2.1-7.4.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | liblsan | 0:15.2.1-7.4.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | liblsan-debuginfo | 0:15.2.1-7.4.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | libtsan2 | 0:15.2.1-7.4.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | libtsan2-debuginfo | 0:15.2.1-7.4.el9_9 |
Vulnerabilities 4
-
Medium 6.5
Gcc: stack overflow in std::bitset on libstdc++
A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character stream, internal stack memory allocation fails to properly account for character size and alignment. An attacker capable of supplying crafted input to an …
-
Medium 6.2
Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std
A flaw was found in GCC. An out-of-bounds memory access vulnerability exists in the libstdc++ parallel search implementation due to an undersized internal buffer. A local attacker can exploit this flaw by providing crafted search data to an application compil…
-
Medium 5.9
Gcc: integer wrap in `std
A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the conta…
-
Low 3.7
Gcc: out-of-bounds read in std::from_chars
A flaw was found in gcc. An attacker could cause a Denial of Service (DoS) by passing a string that is not null-terminated to the std::from_chars() function in the libstdc++ library. This issue triggers an out-of-bounds read beyond the allocated buffer, poten…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2478508
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2478652
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2562933
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2563044
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_98526.json
-
report
https://access.redhat.com/security/cve/CVE-2026-114690
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-114690
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-114690
-
report
https://access.redhat.com/security/cve/CVE-2026-114691
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-114691
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-114691
-
report
https://access.redhat.com/security/cve/CVE-2026-115455
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-115455
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-115455
-
article
https://gcc.gnu.org/cgit/gcc/commit/?id=5d419c69ce2e6b86d7da75f18736904885674219
-
report
https://access.redhat.com/security/cve/CVE-2026-115456
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-115456
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-115456