Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2021-4587

Опубликовано: 18 нояб. 2021
Источник: oracle-oval
Платформа: Oracle Linux 8

Описание

ELSA-2021-4587: gcc security update (MODERATE)

[8.5.0-4.0.1]

[8.5.0-4]

  • add -Wbidirectional patch (#2008391)

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

cpp

8.5.0-4.0.1.el8_5

gcc

8.5.0-4.0.1.el8_5

gcc-c++

8.5.0-4.0.1.el8_5

gcc-gdb-plugin

8.5.0-4.0.1.el8_5

gcc-gfortran

8.5.0-4.0.1.el8_5

gcc-plugin-devel

8.5.0-4.0.1.el8_5

libasan

8.5.0-4.0.1.el8_5

libatomic

8.5.0-4.0.1.el8_5

libatomic-static

8.5.0-4.0.1.el8_5

libgcc

8.5.0-4.0.1.el8_5

libgfortran

8.5.0-4.0.1.el8_5

libgomp

8.5.0-4.0.1.el8_5

libitm

8.5.0-4.0.1.el8_5

libitm-devel

8.5.0-4.0.1.el8_5

liblsan

8.5.0-4.0.1.el8_5

libstdc++

8.5.0-4.0.1.el8_5

libstdc++-devel

8.5.0-4.0.1.el8_5

libstdc++-docs

8.5.0-4.0.1.el8_5

libstdc++-static

8.5.0-4.0.1.el8_5

libtsan

8.5.0-4.0.1.el8_5

libubsan

8.5.0-4.0.1.el8_5

Oracle Linux x86_64

cpp

8.5.0-4.0.1.el8_5

gcc

8.5.0-4.0.1.el8_5

gcc-c++

8.5.0-4.0.1.el8_5

gcc-gdb-plugin

8.5.0-4.0.1.el8_5

gcc-gfortran

8.5.0-4.0.1.el8_5

gcc-offload-nvptx

8.5.0-4.0.1.el8_5

gcc-plugin-devel

8.5.0-4.0.1.el8_5

libasan

8.5.0-4.0.1.el8_5

libatomic

8.5.0-4.0.1.el8_5

libatomic-static

8.5.0-4.0.1.el8_5

libgcc

8.5.0-4.0.1.el8_5

libgfortran

8.5.0-4.0.1.el8_5

libgomp

8.5.0-4.0.1.el8_5

libgomp-offload-nvptx

8.5.0-4.0.1.el8_5

libitm

8.5.0-4.0.1.el8_5

libitm-devel

8.5.0-4.0.1.el8_5

liblsan

8.5.0-4.0.1.el8_5

libquadmath

8.5.0-4.0.1.el8_5

libquadmath-devel

8.5.0-4.0.1.el8_5

libstdc++

8.5.0-4.0.1.el8_5

libstdc++-devel

8.5.0-4.0.1.el8_5

libstdc++-docs

8.5.0-4.0.1.el8_5

libstdc++-static

8.5.0-4.0.1.el8_5

libtsan

8.5.0-4.0.1.el8_5

libubsan

8.5.0-4.0.1.el8_5

Связанные CVE

Связанные уязвимости

CVSS3: 8.3
ubuntu
почти 4 года назад

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and interpreters. Adversaries can leverage this to encode source code for compilers accepting Unicode such that targeted vulnerabilities are introduced invisibly to human reviewers. NOTE: the Unicode Consortium offers the following alternative approach to presenting this concern. An issue is noted in the nature of international text that can affect applications that implement support for The Unicode Standard and the Unicode Bidirectional Algorithm (all versions). Due to text display behavior when text includes left-to-right and right-to-left characters, the visual order of tokens may be different from their logical order. Additionally, control characters needed to fully support the requirements...

CVSS3: 8.5
redhat
почти 4 года назад

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and interpreters. Adversaries can leverage this to encode source code for compilers accepting Unicode such that targeted vulnerabilities are introduced invisibly to human reviewers. NOTE: the Unicode Consortium offers the following alternative approach to presenting this concern. An issue is noted in the nature of international text that can affect applications that implement support for The Unicode Standard and the Unicode Bidirectional Algorithm (all versions). Due to text display behavior when text includes left-to-right and right-to-left characters, the visual order of tokens may be different from their logical order. Additionally, control characters needed to fully support the requirements...

CVSS3: 8.3
nvd
почти 4 года назад

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and interpreters. Adversaries can leverage this to encode source code for compilers accepting Unicode such that targeted vulnerabilities are introduced invisibly to human reviewers. NOTE: the Unicode Consortium offers the following alternative approach to presenting this concern. An issue is noted in the nature of international text that can affect applications that implement support for The Unicode Standard and the Unicode Bidirectional Algorithm (all versions). Due to text display behavior when text includes left-to-right and right-to-left characters, the visual order of tokens may be different from their logical order. Additionally, control characters needed to fully support the requirements of

CVSS3: 8.3
debian
почти 4 года назад

An issue was discovered in the Bidirectional Algorithm in the Unicode ...

rocky
больше 3 лет назад

Moderate: gcc-toolset-10-gcc security update