Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2021-4743

Опубликовано: 19 нояб. 2021
Источник: oracle-oval
Платформа: Oracle Linux 8

Описание

ELSA-2021-4743: llvm-toolset:ol8 security update (MODERATE)

clang [12.0.1-4.0.1]

  • Use all available CPU cores for build
  • Recognize Oracle Linux distros [OraBug: 29422714]

[12.0.1-4]

  • Trojan source clang-tidy patchset fix

[12.0.1-3]

  • Trojan source clang-tidy patchset

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

Module llvm-toolset:ol8 is enabled

clang

12.0.1-4.0.1.module+el8.5.0+20428+2b4ecd47

clang-analyzer

12.0.1-4.0.1.module+el8.5.0+20428+2b4ecd47

clang-devel

12.0.1-4.0.1.module+el8.5.0+20428+2b4ecd47

clang-libs

12.0.1-4.0.1.module+el8.5.0+20428+2b4ecd47

clang-resource-filesystem

12.0.1-4.0.1.module+el8.5.0+20428+2b4ecd47

clang-tools-extra

12.0.1-4.0.1.module+el8.5.0+20428+2b4ecd47

compiler-rt

12.0.1-1.module+el8.5.0+20373+e968e4f5

git-clang-format

12.0.1-4.0.1.module+el8.5.0+20428+2b4ecd47

libomp

12.0.1-1.module+el8.5.0+20373+e968e4f5

libomp-devel

12.0.1-1.module+el8.5.0+20373+e968e4f5

libomp-test

12.0.1-1.module+el8.5.0+20373+e968e4f5

lld

12.0.1-1.module+el8.5.0+20373+e968e4f5

lld-devel

12.0.1-1.module+el8.5.0+20373+e968e4f5

lld-libs

12.0.1-1.module+el8.5.0+20373+e968e4f5

lld-test

12.0.1-1.module+el8.5.0+20373+e968e4f5

lldb

12.0.1-1.module+el8.5.0+20373+e968e4f5

lldb-devel

12.0.1-1.module+el8.5.0+20373+e968e4f5

llvm

12.0.1-2.0.1.module+el8.5.0+20406+58ff08d7

llvm-devel

12.0.1-2.0.1.module+el8.5.0+20406+58ff08d7

llvm-doc

12.0.1-2.0.1.module+el8.5.0+20406+58ff08d7

llvm-googletest

12.0.1-2.0.1.module+el8.5.0+20406+58ff08d7

llvm-libs

12.0.1-2.0.1.module+el8.5.0+20406+58ff08d7

llvm-static

12.0.1-2.0.1.module+el8.5.0+20406+58ff08d7

llvm-test

12.0.1-2.0.1.module+el8.5.0+20406+58ff08d7

llvm-toolset

12.0.1-1.module+el8.5.0+20373+e968e4f5

python3-clang

12.0.1-4.0.1.module+el8.5.0+20428+2b4ecd47

python3-lit

12.0.1-1.module+el8.5.0+20373+e968e4f5

python3-lldb

12.0.1-1.module+el8.5.0+20373+e968e4f5

Oracle Linux x86_64

Module llvm-toolset:ol8 is enabled

clang

12.0.1-4.0.1.module+el8.5.0+20428+2b4ecd47

clang-analyzer

12.0.1-4.0.1.module+el8.5.0+20428+2b4ecd47

clang-devel

12.0.1-4.0.1.module+el8.5.0+20428+2b4ecd47

clang-libs

12.0.1-4.0.1.module+el8.5.0+20428+2b4ecd47

clang-resource-filesystem

12.0.1-4.0.1.module+el8.5.0+20428+2b4ecd47

clang-tools-extra

12.0.1-4.0.1.module+el8.5.0+20428+2b4ecd47

compiler-rt

12.0.1-1.module+el8.5.0+20373+e968e4f5

git-clang-format

12.0.1-4.0.1.module+el8.5.0+20428+2b4ecd47

libomp

12.0.1-1.module+el8.5.0+20373+e968e4f5

libomp-devel

12.0.1-1.module+el8.5.0+20373+e968e4f5

libomp-test

12.0.1-1.module+el8.5.0+20373+e968e4f5

lld

12.0.1-1.module+el8.5.0+20373+e968e4f5

lld-devel

12.0.1-1.module+el8.5.0+20373+e968e4f5

lld-libs

12.0.1-1.module+el8.5.0+20373+e968e4f5

lld-test

12.0.1-1.module+el8.5.0+20373+e968e4f5

lldb

12.0.1-1.module+el8.5.0+20373+e968e4f5

lldb-devel

12.0.1-1.module+el8.5.0+20373+e968e4f5

llvm

12.0.1-2.0.1.module+el8.5.0+20406+58ff08d7

llvm-devel

12.0.1-2.0.1.module+el8.5.0+20406+58ff08d7

llvm-doc

12.0.1-2.0.1.module+el8.5.0+20406+58ff08d7

llvm-googletest

12.0.1-2.0.1.module+el8.5.0+20406+58ff08d7

llvm-libs

12.0.1-2.0.1.module+el8.5.0+20406+58ff08d7

llvm-static

12.0.1-2.0.1.module+el8.5.0+20406+58ff08d7

llvm-test

12.0.1-2.0.1.module+el8.5.0+20406+58ff08d7

llvm-toolset

12.0.1-1.module+el8.5.0+20373+e968e4f5

python3-clang

12.0.1-4.0.1.module+el8.5.0+20428+2b4ecd47

python3-lit

12.0.1-1.module+el8.5.0+20373+e968e4f5

python3-lldb

12.0.1-1.module+el8.5.0+20373+e968e4f5

Связанные CVE

Связанные уязвимости

CVSS3: 8.3
ubuntu
почти 4 года назад

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and interpreters. Adversaries can leverage this to encode source code for compilers accepting Unicode such that targeted vulnerabilities are introduced invisibly to human reviewers. NOTE: the Unicode Consortium offers the following alternative approach to presenting this concern. An issue is noted in the nature of international text that can affect applications that implement support for The Unicode Standard and the Unicode Bidirectional Algorithm (all versions). Due to text display behavior when text includes left-to-right and right-to-left characters, the visual order of tokens may be different from their logical order. Additionally, control characters needed to fully support the requirements...

CVSS3: 8.5
redhat
почти 4 года назад

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and interpreters. Adversaries can leverage this to encode source code for compilers accepting Unicode such that targeted vulnerabilities are introduced invisibly to human reviewers. NOTE: the Unicode Consortium offers the following alternative approach to presenting this concern. An issue is noted in the nature of international text that can affect applications that implement support for The Unicode Standard and the Unicode Bidirectional Algorithm (all versions). Due to text display behavior when text includes left-to-right and right-to-left characters, the visual order of tokens may be different from their logical order. Additionally, control characters needed to fully support the requirements...

CVSS3: 8.3
nvd
почти 4 года назад

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and interpreters. Adversaries can leverage this to encode source code for compilers accepting Unicode such that targeted vulnerabilities are introduced invisibly to human reviewers. NOTE: the Unicode Consortium offers the following alternative approach to presenting this concern. An issue is noted in the nature of international text that can affect applications that implement support for The Unicode Standard and the Unicode Bidirectional Algorithm (all versions). Due to text display behavior when text includes left-to-right and right-to-left characters, the visual order of tokens may be different from their logical order. Additionally, control characters needed to fully support the requirements of

CVSS3: 8.3
debian
почти 4 года назад

An issue was discovered in the Bidirectional Algorithm in the Unicode ...

rocky
больше 3 лет назад

Moderate: gcc-toolset-10-gcc security update