Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
98
security advisorymoderatered hatRed Hat: RHSA-2021-4724 Moderate: Devtoolset-10 Annobin Trojan Source Risk
An update for devtoolset-10-annobin is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: devtoolset-10-annobin security update Advisory ID: RHSA-2021:4724-01 Product: Red Hat Software Collections Advisory URL: https://access.redhat.com/errata/RHSA-2021:4724 Issue date: 2021-11-17 CVE Names: CVE-2021-42574 ==================================================================== 1. Summary: An update for devtoolset-10-annobin is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) - ppc64, ppc64le, s390x, x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) - x86_64 3. Description: Annobin provides a compiler plugin to annotate and tools to examine compiled binary files. Security Fix(es): * Developer environment: Unicode's bidirectional (BiDi) override characterscan cause trojan source attacks (CVE-2021-42574) The following changes were introduced in annobin in order to facilitate detection of BiDi Unicode characters: This update of annobin adds a new annocheck test to detect the presence of multibyte characters in symbol names. For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, andother related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2005819 - CVE-2021-42574 Developer environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks 6. Package List: Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7): Source: devtoolset-10-annobin-9.23-4.el7.1.src.rpm ppc64: devtoolset-10-annobin-9.23-4.el7.1.ppc64.rpm devtoolset-10-annobin-annocheck-9.23-4.el7.1.ppc64.rpm devtoolset-10-annobin-debuginfo-9.23-4.el7.1.ppc64.rpm ppc64le: devtoolset-10-annobin-9.23-4.el7.1.ppc64le.rpm devtoolset-10-annobin-annocheck-9.23-4.el7.1.ppc64le.rpm devtoolset-10-annobin-debuginfo-9.23-4.el7.1.ppc64le.rpm s390x: devtoolset-10-annobin-9.23-4.el7.1.s390x.rpm devtoolset-10-annobin-annocheck-9.23-4.el7.1.s390x.rpm devtoolset-10-annobin-debuginfo-9.23-4.el7.1.s390x.rpm x86_64: devtoolset-10-annobin-9.23-4.el7.1.x86_64.rpm devtoolset-10-annobin-annocheck-9.23-4.el7.1.x86_64.rpm devtoolset-10-annobin-debuginfo-9.23-4.el7.1.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7): Source: devtoolset-10-annobin-9.23-4.el7.1.src.rpm ppc64: devtoolset-10-annobin-9.23-4.el7.1.ppc64.rpm devtoolset-10-annobin-annocheck-9.23-4.el7.1.ppc64.rpm devtoolset-10-annobin-debuginfo-9.23-4.el7.1.ppc64.rpm ppc64le: devtoolset-10-annobin-9.23-4.el7.1.ppc64le.rpm devtoolset-10-annobin-annocheck-9.23-4.el7.1.ppc64le.rpm devtoolset-10-annobin-debuginfo-9.23-4.el7.1.ppc64le.rpm s390x: devtoolset-10-annobin-9.23-4.el7.1.s390x.rpm devtoolset-10-annobin-annocheck-9.23-4.el7.1.s390x.rpm devtoolset-10-annobin-debuginfo-9.23-4.el7.1.s390x.rpm x86_64: devtoolset-10-annobin-9.23-4.el7.1.x86_64.rpm devtoolset-10-annobin-annocheck-9.23-4.el7.1.x86_64.rpm devtoolset-10-annobin-debuginfo-9.23-4.el7.1.x86_64.rpm Red HatSoftware Collections for Red Hat Enterprise Linux Workstation (v. 7): Source: devtoolset-10-annobin-9.23-4.el7.1.src.rpm x86_64: devtoolset-10-annobin-9.23-4.el7.1.x86_64.rpm devtoolset-10-annobin-annocheck-9.23-4.el7.1.x86_64.rpm devtoolset-10-annobin-debuginfo-9.23-4.el7.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2021-42574 https://access.redhat.com/security/updates/classification/#moderate https://access.redhat.com/security/vulnerabilities/RHSB-2021-007 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYZVo3NzjgjWX9erEAQgefA//dZWTXbypGX+WI7w68obTa7ee9+E+aSgY rLZnnr6txOPe8OQBl6/jDT3TLHTLiLwGeUT0uaHTlUdl7FrKjwNSdT9IRa8ML2Dv cosi46e/axoSPMCJUNjhK6pNwJ+z5ZOIdvo55n8rwEPnQnG+0jLwolFrnQv5vUHJ nZBN1b255R7OMRtONknL/OVq6fgwUQ+R6tk4hxSi3RVpb2bvqqwcKoYhkkobqGwr /a/ocbx8wJCRPHICx8cn75Ld1OQKaQkQz1sGY61Dk84V99IAtAUjlV4v6MidOH4g LMJdsMH/DkY/bsWZ/eY5tNEXHSr7KcjTdczUrEC4P4oTEfZtCEYJSNczeMfs9Eh5 2aTKtHZAbkKiE81QIC0u/Nhb4e7e1sQ+z4ldr5V8eVsUxdVS4sQh8WP4xV6GQqy2 uuEzbBucih2PtPHg51YWaQTFui/3um6PO+ZOb+1edoZFTsYRXQIC5jFuW3HfVYCB cAr+1S9zwDE2L91yj7KFQO9xvKQK2cVF/ZWRR0ZnDGnd6skupCVKRyYW0f/DAG/T 6GqLPezdc6WW+cHKB7qeHw5RakO6R0PEopC0oDLzJ8RJhhPsJrsrnV3Uzpyz/7VJ iu6ssbkEqh8vFbo/WCuO1QJ/HtNWUMQurPKNIZ4LtW95pmHD3dIMv3qmtcySR8Zt eoIclr2N/VI=qSzT -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Nov 17, 2021
Red Hat
98
security advisorymoderate impactRed Hat EnterpriseRed Hat Enterprise Linux Moderate Update: Gcc-Toolset-11-Gcc Trojan Source
An update for gcc-toolset-11-gcc is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: gcc-toolset-11-gcc security update Advisory ID: RHSA-2021:4586-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2021:4586 Issue date: 2021-11-10 CVE Names: CVE-2021-42574 ==================================================================== 1. Summary: An update for gcc-toolset-11-gcc is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 8) - aarch64, ppc64le, s390x, x86_64 3. Description: The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries. Security Fix(es): * Developer environment: Unicode's bidirectional (BiDi) override characterscan cause trojan source attacks (CVE-2021-42574) The following changes were introduced in gcc in order to facilitate detection of BiDi Unicode characters: This update implements a new warning option -Wbidirectional to warn about possibly dangerous bidirectional characters. There are three levels of warning supported by gcc: "-Wbidirectional=unpaired", which warns about improperly terminated BiDi contexts. (This is the default.) "-Wbidirectional=none", which turns the warning off. "-Wbidirectional=any", which warns about any use of bidirectional characters. For moredetails about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2005819 - CVE-2021-42574 Developer environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks 6. Package List: Red Hat Enterprise Linux AppStream (v.8): Source: gcc-toolset-11-gcc-11.2.1-1.2.el8_5.src.rpm aarch64: gcc-toolset-11-gcc-11.2.1-1.2.el8_5.aarch64.rpm gcc-toolset-11-gcc-c++-11.2.1-1.2.el8_5.aarch64.rpm gcc-toolset-11-gcc-c++-debuginfo-11.2.1-1.2.el8_5.aarch64.rpm gcc-toolset-11-gcc-debuginfo-11.2.1-1.2.el8_5.aarch64.rpm gcc-toolset-11-gcc-gdb-plugin-11.2.1-1.2.el8_5.aarch64.rpm gcc-toolset-11-gcc-gdb-plugin-debuginfo-11.2.1-1.2.el8_5.aarch64.rpm gcc-toolset-11-gcc-gfortran-11.2.1-1.2.el8_5.aarch64.rpm gcc-toolset-11-gcc-gfortran-debuginfo-11.2.1-1.2.el8_5.aarch64.rpm gcc-toolset-11-gcc-plugin-devel-11.2.1-1.2.el8_5.aarch64.rpm gcc-toolset-11-gcc-plugin-devel-debuginfo-11.2.1-1.2.el8_5.aarch64.rpm gcc-toolset-11-libasan-devel-11.2.1-1.2.el8_5.aarch64.rpm gcc-toolset-11-libatomic-devel-11.2.1-1.2.el8_5.aarch64.rpm gcc-toolset-11-libgccjit-11.2.1-1.2.el8_5.aarch64.rpm gcc-toolset-11-libgccjit-debuginfo-11.2.1-1.2.el8_5.aarch64.rpm gcc-toolset-11-libgccjit-devel-11.2.1-1.2.el8_5.aarch64.rpm gcc-toolset-11-libgccjit-docs-11.2.1-1.2.el8_5.aarch64.rpm gcc-toolset-11-libitm-devel-11.2.1-1.2.el8_5.aarch64.rpm gcc-toolset-11-liblsan-devel-11.2.1-1.2.el8_5.aarch64.rpm gcc-toolset-11-libstdc++-devel-11.2.1-1.2.el8_5.aarch64.rpm gcc-toolset-11-libstdc++-docs-11.2.1-1.2.el8_5.aarch64.rpm gcc-toolset-11-libtsan-devel-11.2.1-1.2.el8_5.aarch64.rpm gcc-toolset-11-libubsan-devel-11.2.1-1.2.el8_5.aarch64.rpm libasan6-11.2.1-1.2.el8_5.aarch64.rpm libasan6-debuginfo-11.2.1-1.2.el8_5.aarch64.rpm ppc64le: gcc-toolset-11-gcc-11.2.1-1.2.el8_5.ppc64le.rpm gcc-toolset-11-gcc-c++-11.2.1-1.2.el8_5.ppc64le.rpm gcc-toolset-11-gcc-c++-debuginfo-11.2.1-1.2.el8_5.ppc64le.rpm gcc-toolset-11-gcc-debuginfo-11.2.1-1.2.el8_5.ppc64le.rpm gcc-toolset-11-gcc-gdb-plugin-11.2.1-1.2.el8_5.ppc64le.rpm gcc-toolset-11-gcc-gdb-plugin-debuginfo-11.2.1-1.2.el8_5.ppc64le.rpm gcc-toolset-11-gcc-gfortran-11.2.1-1.2.el8_5.ppc64le.rpm gcc-toolset-11-gcc-gfortran-debuginfo-11.2.1-1.2.el8_5.ppc64le.rpm gcc-toolset-11-gcc-plugin-devel-11.2.1-1.2.el8_5.ppc64le.rpm gcc-toolset-11-gcc-plugin-devel-debuginfo-11.2.1-1.2.el8_5.ppc64le.rpm gcc-toolset-11-libasan-devel-11.2.1-1.2.el8_5.ppc64le.rpm gcc-toolset-11-libatomic-devel-11.2.1-1.2.el8_5.ppc64le.rpm gcc-toolset-11-libgccjit-11.2.1-1.2.el8_5.ppc64le.rpm gcc-toolset-11-libgccjit-debuginfo-11.2.1-1.2.el8_5.ppc64le.rpm gcc-toolset-11-libgccjit-devel-11.2.1-1.2.el8_5.ppc64le.rpm gcc-toolset-11-libgccjit-docs-11.2.1-1.2.el8_5.ppc64le.rpm gcc-toolset-11-libitm-devel-11.2.1-1.2.el8_5.ppc64le.rpm gcc-toolset-11-liblsan-devel-11.2.1-1.2.el8_5.ppc64le.rpm gcc-toolset-11-libquadmath-devel-11.2.1-1.2.el8_5.ppc64le.rpm gcc-toolset-11-libstdc++-devel-11.2.1-1.2.el8_5.ppc64le.rpm gcc-toolset-11-libstdc++-docs-11.2.1-1.2.el8_5.ppc64le.rpm gcc-toolset-11-libtsan-devel-11.2.1-1.2.el8_5.ppc64le.rpm gcc-toolset-11-libubsan-devel-11.2.1-1.2.el8_5.ppc64le.rpm gcc-toolset-11-offload-nvptx-debuginfo-11.2.1-1.2.el8_5.ppc64le.rpm libasan6-11.2.1-1.2.el8_5.ppc64le.rpm libasan6-debuginfo-11.2.1-1.2.el8_5.ppc64le.rpm s390x: gcc-toolset-11-gcc-11.2.1-1.2.el8_5.s390x.rpm gcc-toolset-11-gcc-c++-11.2.1-1.2.el8_5.s390x.rpm gcc-toolset-11-gcc-c++-debuginfo-11.2.1-1.2.el8_5.s390x.rpm gcc-toolset-11-gcc-debuginfo-11.2.1-1.2.el8_5.s390x.rpm gcc-toolset-11-gcc-gdb-plugin-11.2.1-1.2.el8_5.s390x.rpm gcc-toolset-11-gcc-gdb-plugin-debuginfo-11.2.1-1.2.el8_5.s390x.rpm gcc-toolset-11-gcc-gfortran-11.2.1-1.2.el8_5.s390x.rpm gcc-toolset-11-gcc-gfortran-debuginfo-11.2.1-1.2.el8_5.s390x.rpm gcc-toolset-11-gcc-plugin-devel-11.2.1-1.2.el8_5.s390x.rpm gcc-toolset-11-gcc-plugin-devel-debuginfo-11.2.1-1.2.el8_5.s390x.rpm gcc-toolset-11-libasan-devel-11.2.1-1.2.el8_5.s390x.rpm gcc-toolset-11-libatomic-devel-11.2.1-1.2.el8_5.s390x.rpm gcc-toolset-11-libgccjit-11.2.1-1.2.el8_5.s390x.rpm gcc-toolset-11-libgccjit-debuginfo-11.2.1-1.2.el8_5.s390x.rpm gcc-toolset-11-libgccjit-devel-11.2.1-1.2.el8_5.s390x.rpm gcc-toolset-11-libgccjit-docs-11.2.1-1.2.el8_5.s390x.rpm gcc-toolset-11-libitm-devel-11.2.1-1.2.el8_5.s390x.rpm gcc-toolset-11-libstdc++-devel-11.2.1-1.2.el8_5.s390x.rpm gcc-toolset-11-libstdc++-docs-11.2.1-1.2.el8_5.s390x.rpm gcc-toolset-11-libubsan-devel-11.2.1-1.2.el8_5.s390x.rpm libasan6-11.2.1-1.2.el8_5.s390x.rpm libasan6-debuginfo-11.2.1-1.2.el8_5.s390x.rpm x86_64: gcc-toolset-11-gcc-11.2.1-1.2.el8_5.x86_64.rpm gcc-toolset-11-gcc-c++-11.2.1-1.2.el8_5.x86_64.rpm gcc-toolset-11-gcc-c++-debuginfo-11.2.1-1.2.el8_5.i686.rpm gcc-toolset-11-gcc-c++-debuginfo-11.2.1-1.2.el8_5.x86_64.rpm gcc-toolset-11-gcc-debuginfo-11.2.1-1.2.el8_5.i686.rpm gcc-toolset-11-gcc-debuginfo-11.2.1-1.2.el8_5.x86_64.rpm gcc-toolset-11-gcc-gdb-plugin-11.2.1-1.2.el8_5.x86_64.rpm gcc-toolset-11-gcc-gdb-plugin-debuginfo-11.2.1-1.2.el8_5.i686.rpm gcc-toolset-11-gcc-gdb-plugin-debuginfo-11.2.1-1.2.el8_5.x86_64.rpm gcc-toolset-11-gcc-gfortran-11.2.1-1.2.el8_5.x86_64.rpm gcc-toolset-11-gcc-gfortran-debuginfo-11.2.1-1.2.el8_5.i686.rpm gcc-toolset-11-gcc-gfortran-debuginfo-11.2.1-1.2.el8_5.x86_64.rpm gcc-toolset-11-gcc-plugin-devel-11.2.1-1.2.el8_5.i686.rpm gcc-toolset-11-gcc-plugin-devel-11.2.1-1.2.el8_5.x86_64.rpm gcc-toolset-11-gcc-plugin-devel-debuginfo-11.2.1-1.2.el8_5.i686.rpm gcc-toolset-11-gcc-plugin-devel-debuginfo-11.2.1-1.2.el8_5.x86_64.rpm gcc-toolset-11-libasan-devel-11.2.1-1.2.el8_5.i686.rpm gcc-toolset-11-libasan-devel-11.2.1-1.2.el8_5.x86_64.rpm gcc-toolset-11-libatomic-devel-11.2.1-1.2.el8_5.i686.rpm gcc-toolset-11-libatomic-devel-11.2.1-1.2.el8_5.x86_64.rpm gcc-toolset-11-libgccjit-11.2.1-1.2.el8_5.x86_64.rpm gcc-toolset-11-libgccjit-debuginfo-11.2.1-1.2.el8_5.i686.rpm gcc-toolset-11-libgccjit-debuginfo-11.2.1-1.2.el8_5.x86_64.rpm gcc-toolset-11-libgccjit-devel-11.2.1-1.2.el8_5.i686.rpm gcc-toolset-11-libgccjit-devel-11.2.1-1.2.el8_5.x86_64.rpm gcc-toolset-11-libgccjit-docs-11.2.1-1.2.el8_5.x86_64.rpm gcc-toolset-11-libitm-devel-11.2.1-1.2.el8_5.i686.rpm gcc-toolset-11-libitm-devel-11.2.1-1.2.el8_5.x86_64.rpm gcc-toolset-11-liblsan-devel-11.2.1-1.2.el8_5.x86_64.rpm gcc-toolset-11-libquadmath-devel-11.2.1-1.2.el8_5.i686.rpm gcc-toolset-11-libquadmath-devel-11.2.1-1.2.el8_5.x86_64.rpm gcc-toolset-11-libstdc++-devel-11.2.1-1.2.el8_5.i686.rpm gcc-toolset-11-libstdc++-devel-11.2.1-1.2.el8_5.x86_64.rpm gcc-toolset-11-libstdc++-docs-11.2.1-1.2.el8_5.x86_64.rpm gcc-toolset-11-libtsan-devel-11.2.1-1.2.el8_5.x86_64.rpm gcc-toolset-11-libubsan-devel-11.2.1-1.2.el8_5.i686.rpm gcc-toolset-11-libubsan-devel-11.2.1-1.2.el8_5.x86_64.rpm gcc-toolset-11-offload-nvptx-debuginfo-11.2.1-1.2.el8_5.x86_64.rpm libasan6-11.2.1-1.2.el8_5.i686.rpm libasan6-11.2.1-1.2.el8_5.x86_64.rpm libasan6-debuginfo-11.2.1-1.2.el8_5.i686.rpm libasan6-debuginfo-11.2.1-1.2.el8_5.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2021-42574 https://access.redhat.com/security/updates/classification#moderate https://access.redhat.com/security/vulnerabilities/RHSB-2021-007 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYYvaNNzjgjWX9erEAQjk7BAAkzxY3J9vlPeKjN3Q9OW0uTpiQRxBbg7x 5rswHpju/IqPbJWgpXvBphF2IkOghf3CqJ2Qa1X3pJk8c9fhiGLLpmRkEVHBhQtP urjN7AYINcXmD8MU6Dox8XfrA6WrN6eSikg+qP1EadpeA4+M+7qiy6m4BpJCk7CG zdrW9VxIjoHgFGHFWz4E/oLnTW2HCTBeFMIHrrukvbMluryG2r2tAgGEoUZl7Bx+ q8lZ5fQX0RTzTxT+M+r7RLUsi3jUlsZSE910GdGLVSD8j8SRQDMOeUBts6PW7mmr 1+HGyJC5tbX3LP/qbJajY9814nSYOmO3JT3evWHwUzKnYOy9x35PtxT0RYJ2k8rf X6RmnSsntSDwAYOeaCVGUBAqNCoP5RGrL2Y1CT4B3SQwZ4Y3wlTwa/tyHxGNyWz2 cNiYLHzfYmhVspQ2G9tgGjsypLK4UDixxgFclbzGv9eyxS+D1KuU2PSPLRkjlmqy dQGm7dwoCkSuAeYj85nnEZxxEdlVWauhfZe1Dj0M2Z4RdETAyWg3bAe3WrsH+ev0 OThTDQ67h2RARvYDlQUioBUwjOlyeLOGkWAP/p0VvqIgxSu+rMccGbKt9T3lHFGi D8XZxHVz7eJLOkHmmZFG09uSNXBEn2IYBYiE2RWZOL/zEdx93pA1A0GhP/Sq3b5Q FvjTsFg/Fq4=j6VK -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Nov 10, 2021
Red Hat
98
security advisorymoderatered hatRed Hat 7 Moderate: RHSA-2021-4039-01 Vulnerability in devtoolset-10-gcc
An update for devtoolset-10-gcc is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: devtoolset-10-gcc security update Advisory ID: RHSA-2021:4039-01 Product: Red Hat Software Collections Advisory URL: https://access.redhat.com/errata/RHSA-2021:4039 Issue date: 2021-11-01 CVE Names: CVE-2021-42574 ==================================================================== 1. Summary: An update for devtoolset-10-gcc is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) - ppc64, ppc64le, s390x, x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) - x86_64 3. Description: The GNU Compiler Collection (GCC) is a portable compiler suite with support for various programming languages, including C, C++, and Fortran. The devtoolset-10-gcc packages provide the Red Hat Developer Toolset 10 version of GCC, as well as related libraries. Security Fix(es): * Developer environment: Unicode's bidirectional (BiDi) override characterscan cause trojan source attacks (CVE-2021-42574) The following changes were introduced in binutils in order to facilitate detection of BiDi Unicode characters: This gcc update implements-Wbidirectional=[none|unpaired|any] to warn about possibly dangerous bidirectional characters. There are three levels of warning supported by GCC: "-Wbidirectional=unpaired", which warns about improperly terminated bidi contexts. (This is the default) "-Wbidirectional=none", turns the warning off. "-Wbidirectional=any" warns about any use of bidirectional characters. For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2005819 - CVE-2021-42574 Developer environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks 6. Package List: Red Hat Software Collections for Red Hat Enterprise Linux Server (v.7): Source: devtoolset-10-gcc-10.2.1-11.2.el7.src.rpm ppc64: devtoolset-10-gcc-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-gcc-c++-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-gcc-debuginfo-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-gcc-gdb-plugin-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-gcc-gfortran-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-gcc-plugin-devel-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-libasan-devel-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-libatomic-devel-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-libgccjit-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-libgccjit-devel-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-libgccjit-docs-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-libitm-devel-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-liblsan-devel-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-libquadmath-devel-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-libstdc++-devel-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-libstdc++-docs-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-libtsan-devel-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-libubsan-devel-10.2.1-11.2.el7.ppc64.rpm libasan6-10.2.1-11.2.el7.ppc64.rpm liblsan-10.2.1-11.2.el7.ppc64.rpm libtsan-10.2.1-11.2.el7.ppc64.rpm libubsan1-10.2.1-11.2.el7.ppc64.rpm ppc64le: devtoolset-10-gcc-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-gcc-c++-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-gcc-debuginfo-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-gcc-gdb-plugin-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-gcc-gfortran-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-gcc-plugin-devel-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-libasan-devel-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-libatomic-devel-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-libgccjit-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-libgccjit-devel-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-libgccjit-docs-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-libitm-devel-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-liblsan-devel-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-libquadmath-devel-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-libstdc++-devel-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-libstdc++-docs-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-libtsan-devel-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-libubsan-devel-10.2.1-11.2.el7.ppc64le.rpm libasan6-10.2.1-11.2.el7.ppc64le.rpm liblsan-10.2.1-11.2.el7.ppc64le.rpm libtsan-10.2.1-11.2.el7.ppc64le.rpm libubsan1-10.2.1-11.2.el7.ppc64le.rpm s390x: devtoolset-10-gcc-10.2.1-11.2.el7.s390x.rpm devtoolset-10-gcc-c++-10.2.1-11.2.el7.s390x.rpm devtoolset-10-gcc-debuginfo-10.2.1-11.2.el7.s390x.rpm devtoolset-10-gcc-gdb-plugin-10.2.1-11.2.el7.s390x.rpm devtoolset-10-gcc-gfortran-10.2.1-11.2.el7.s390x.rpm devtoolset-10-gcc-plugin-devel-10.2.1-11.2.el7.s390x.rpm devtoolset-10-libasan-devel-10.2.1-11.2.el7.s390x.rpm devtoolset-10-libatomic-devel-10.2.1-11.2.el7.s390x.rpm devtoolset-10-libgccjit-10.2.1-11.2.el7.s390x.rpm devtoolset-10-libgccjit-devel-10.2.1-11.2.el7.s390x.rpm devtoolset-10-libgccjit-docs-10.2.1-11.2.el7.s390x.rpm devtoolset-10-libitm-devel-10.2.1-11.2.el7.s390x.rpm devtoolset-10-libstdc++-devel-10.2.1-11.2.el7.s390x.rpm devtoolset-10-libstdc++-docs-10.2.1-11.2.el7.s390x.rpm devtoolset-10-libubsan-devel-10.2.1-11.2.el7.s390x.rpm libasan6-10.2.1-11.2.el7.s390x.rpm libubsan1-10.2.1-11.2.el7.s390x.rpm x86_64: devtoolset-10-gcc-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-gcc-c++-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-gcc-debuginfo-10.2.1-11.2.el7.i686.rpm devtoolset-10-gcc-debuginfo-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-gcc-gdb-plugin-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-gcc-gfortran-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-gcc-plugin-devel-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libasan-devel-10.2.1-11.2.el7.i686.rpm devtoolset-10-libasan-devel-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libatomic-devel-10.2.1-11.2.el7.i686.rpm devtoolset-10-libatomic-devel-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libgccjit-10.2.1-11.2.el7.i686.rpm devtoolset-10-libgccjit-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libgccjit-devel-10.2.1-11.2.el7.i686.rpm devtoolset-10-libgccjit-devel-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libgccjit-docs-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libitm-devel-10.2.1-11.2.el7.i686.rpm devtoolset-10-libitm-devel-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-liblsan-devel-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libquadmath-devel-10.2.1-11.2.el7.i686.rpm devtoolset-10-libquadmath-devel-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libstdc++-devel-10.2.1-11.2.el7.i686.rpm devtoolset-10-libstdc++-devel-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libstdc++-docs-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libtsan-devel-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libubsan-devel-10.2.1-11.2.el7.i686.rpm devtoolset-10-libubsan-devel-10.2.1-11.2.el7.x86_64.rpm libasan6-10.2.1-11.2.el7.i686.rpm libasan6-10.2.1-11.2.el7.x86_64.rpm liblsan-10.2.1-11.2.el7.x86_64.rpm libtsan-10.2.1-11.2.el7.x86_64.rpm libubsan1-10.2.1-11.2.el7.i686.rpm libubsan1-10.2.1-11.2.el7.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v.7.7): Source: devtoolset-10-gcc-10.2.1-11.2.el7.src.rpm ppc64: devtoolset-10-gcc-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-gcc-c++-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-gcc-debuginfo-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-gcc-gdb-plugin-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-gcc-gfortran-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-gcc-plugin-devel-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-libasan-devel-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-libatomic-devel-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-libgccjit-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-libgccjit-devel-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-libgccjit-docs-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-libitm-devel-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-liblsan-devel-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-libquadmath-devel-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-libstdc++-devel-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-libstdc++-docs-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-libtsan-devel-10.2.1-11.2.el7.ppc64.rpm devtoolset-10-libubsan-devel-10.2.1-11.2.el7.ppc64.rpm libasan6-10.2.1-11.2.el7.ppc64.rpm liblsan-10.2.1-11.2.el7.ppc64.rpm libtsan-10.2.1-11.2.el7.ppc64.rpm libubsan1-10.2.1-11.2.el7.ppc64.rpm ppc64le: devtoolset-10-gcc-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-gcc-c++-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-gcc-debuginfo-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-gcc-gdb-plugin-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-gcc-gfortran-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-gcc-plugin-devel-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-libasan-devel-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-libatomic-devel-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-libgccjit-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-libgccjit-devel-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-libgccjit-docs-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-libitm-devel-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-liblsan-devel-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-libquadmath-devel-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-libstdc++-devel-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-libstdc++-docs-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-libtsan-devel-10.2.1-11.2.el7.ppc64le.rpm devtoolset-10-libubsan-devel-10.2.1-11.2.el7.ppc64le.rpm libasan6-10.2.1-11.2.el7.ppc64le.rpm liblsan-10.2.1-11.2.el7.ppc64le.rpm libtsan-10.2.1-11.2.el7.ppc64le.rpm libubsan1-10.2.1-11.2.el7.ppc64le.rpm s390x: devtoolset-10-gcc-10.2.1-11.2.el7.s390x.rpm devtoolset-10-gcc-c++-10.2.1-11.2.el7.s390x.rpm devtoolset-10-gcc-debuginfo-10.2.1-11.2.el7.s390x.rpm devtoolset-10-gcc-gdb-plugin-10.2.1-11.2.el7.s390x.rpm devtoolset-10-gcc-gfortran-10.2.1-11.2.el7.s390x.rpm devtoolset-10-gcc-plugin-devel-10.2.1-11.2.el7.s390x.rpm devtoolset-10-libasan-devel-10.2.1-11.2.el7.s390x.rpm devtoolset-10-libatomic-devel-10.2.1-11.2.el7.s390x.rpm devtoolset-10-libgccjit-10.2.1-11.2.el7.s390x.rpm devtoolset-10-libgccjit-devel-10.2.1-11.2.el7.s390x.rpm devtoolset-10-libgccjit-docs-10.2.1-11.2.el7.s390x.rpm devtoolset-10-libitm-devel-10.2.1-11.2.el7.s390x.rpm devtoolset-10-libstdc++-devel-10.2.1-11.2.el7.s390x.rpm devtoolset-10-libstdc++-docs-10.2.1-11.2.el7.s390x.rpm devtoolset-10-libubsan-devel-10.2.1-11.2.el7.s390x.rpm libasan6-10.2.1-11.2.el7.s390x.rpm libubsan1-10.2.1-11.2.el7.s390x.rpm x86_64: devtoolset-10-gcc-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-gcc-c++-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-gcc-debuginfo-10.2.1-11.2.el7.i686.rpm devtoolset-10-gcc-debuginfo-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-gcc-gdb-plugin-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-gcc-gfortran-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-gcc-plugin-devel-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libasan-devel-10.2.1-11.2.el7.i686.rpm devtoolset-10-libasan-devel-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libatomic-devel-10.2.1-11.2.el7.i686.rpm devtoolset-10-libatomic-devel-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libgccjit-10.2.1-11.2.el7.i686.rpm devtoolset-10-libgccjit-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libgccjit-devel-10.2.1-11.2.el7.i686.rpm devtoolset-10-libgccjit-devel-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libgccjit-docs-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libitm-devel-10.2.1-11.2.el7.i686.rpm devtoolset-10-libitm-devel-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-liblsan-devel-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libquadmath-devel-10.2.1-11.2.el7.i686.rpm devtoolset-10-libquadmath-devel-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libstdc++-devel-10.2.1-11.2.el7.i686.rpm devtoolset-10-libstdc++-devel-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libstdc++-docs-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libtsan-devel-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libubsan-devel-10.2.1-11.2.el7.i686.rpm devtoolset-10-libubsan-devel-10.2.1-11.2.el7.x86_64.rpm libasan6-10.2.1-11.2.el7.i686.rpm libasan6-10.2.1-11.2.el7.x86_64.rpm liblsan-10.2.1-11.2.el7.x86_64.rpm libtsan-10.2.1-11.2.el7.x86_64.rpm libubsan1-10.2.1-11.2.el7.i686.rpm libubsan1-10.2.1-11.2.el7.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v.7): Source: devtoolset-10-gcc-10.2.1-11.2.el7.src.rpm x86_64: devtoolset-10-gcc-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-gcc-c++-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-gcc-debuginfo-10.2.1-11.2.el7.i686.rpm devtoolset-10-gcc-debuginfo-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-gcc-gdb-plugin-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-gcc-gfortran-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-gcc-plugin-devel-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libasan-devel-10.2.1-11.2.el7.i686.rpm devtoolset-10-libasan-devel-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libatomic-devel-10.2.1-11.2.el7.i686.rpm devtoolset-10-libatomic-devel-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libgccjit-10.2.1-11.2.el7.i686.rpm devtoolset-10-libgccjit-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libgccjit-devel-10.2.1-11.2.el7.i686.rpm devtoolset-10-libgccjit-devel-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libgccjit-docs-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libitm-devel-10.2.1-11.2.el7.i686.rpm devtoolset-10-libitm-devel-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-liblsan-devel-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libquadmath-devel-10.2.1-11.2.el7.i686.rpm devtoolset-10-libquadmath-devel-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libstdc++-devel-10.2.1-11.2.el7.i686.rpm devtoolset-10-libstdc++-devel-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libstdc++-docs-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libtsan-devel-10.2.1-11.2.el7.x86_64.rpm devtoolset-10-libubsan-devel-10.2.1-11.2.el7.i686.rpm devtoolset-10-libubsan-devel-10.2.1-11.2.el7.x86_64.rpm libasan6-10.2.1-11.2.el7.i686.rpm libasan6-10.2.1-11.2.el7.x86_64.rpm liblsan-10.2.1-11.2.el7.x86_64.rpm libtsan-10.2.1-11.2.el7.x86_64.rpm libubsan1-10.2.1-11.2.el7.i686.rpm libubsan1-10.2.1-11.2.el7.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7.References: https://access.redhat.com/security/cve/CVE-2021-42574 https://access.redhat.com/security/updates/classification#moderate https://access.redhat.com/security/vulnerabilities/RHSB-2021-007 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYX+dgNzjgjWX9erEAQh1ng/+KfHZZVGBNpHlFb8SXUezGupFvsWm6JXL fw94jqsWnRWpK97aV/7PJVR0+/o2xDzI8zDZJmukQNyYhoG94Mhy0QuHM9Jt9pWf 0Xj7JLYhIi+rP0PqbzoeKJ+XZWSlfm+h2DZVf9nFwpKZnbrRpersKYu51wWVcMNI agB26pbmKL/5VR8/Y1UI4dzehZ5dkgAZWYiroL7Ec9HbkKFTSk6umvqWrbzQLb6I wnbn17ot0G1hAOoXjDGTruMSBXZqHw6U9QZLFzLy6XRoDxkiLDTqqAOO6mcDjKRC j58mH8ULeKtfd8NzuC1ldOWzXhJAkno2Kd+c/JwZ1PhMcGKJQrg/nWY+sqyCMoXn YoMO6SvlcHLe4Fr0lp428uf1lDpD9q4NgAxKLaIRdlhJKSrbqDUDRycwuCVu21dk 5gqaM6lRxvtA77yTOZi1RYu9eoIIOc7qib+bTvcoEnMjxs1hS4jAWS5+TLdvzXfu HbibKadGtfHveWcYt6b4y9Wu9TJPiFbMUu80ytSooP1BY9mnZ79JzEP+wmDCb8/+ IVvQuN1a/hq4/FbPwHDtAO/mBr2ndDlqy2qd74N2dlRpYTJeG8yHh9PDhx2NU7AR lMjPc9aynS/gHAMkvDQzGA0o2bZTfu/5lCkSHz7HlBgjPYuI6oWhqgn8voLjtPq6 sRRx46jlqlE=Zfa/ -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Nov 01, 2021
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!