ALSA-2026:89830: Moderate: gcc security update
The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries.
Security Fix(es):
gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap eraseif (CVE-2026-102010) gcc: libstdc++ integer overflow in new operator (CVE-2026-95619)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
almalinux/cppto a version that resolves this vulnerability.Fixed in 8.5.0-30.el8_10.alma.1 - Upgrade
Upgrade
almalinux/gccto a version that resolves this vulnerability.Fixed in 8.5.0-30.el8_10.alma.1 - Upgrade
Upgrade
almalinux/gcc-c++to a version that resolves this vulnerability.Fixed in 8.5.0-30.el8_10.alma.1 - Upgrade
Upgrade
almalinux/gcc-gdb-pluginto a version that resolves this vulnerability.Fixed in 8.5.0-30.el8_10.alma.1 - Upgrade
Upgrade
almalinux/gcc-gfortranto a version that resolves this vulnerability.Fixed in 8.5.0-30.el8_10.alma.1 - Upgrade
Upgrade
almalinux/gcc-offload-nvptxto a version that resolves this vulnerability.Fixed in 8.5.0-30.el8_10.alma.1 - Upgrade
Upgrade
almalinux/gcc-plugin-annobinto a version that resolves this vulnerability.Fixed in 8.5.0-30.el8_10.alma.1 - Upgrade
Upgrade
almalinux/gcc-plugin-develto a version that resolves this vulnerability.Fixed in 8.5.0-30.el8_10.alma.1 - Upgrade
Upgrade
almalinux/libasanto a version that resolves this vulnerability.Fixed in 8.5.0-30.el8_10.alma.1 - Upgrade
Upgrade
almalinux/libatomicto a version that resolves this vulnerability.Fixed in 8.5.0-30.el8_10.alma.1 - Upgrade
Upgrade
almalinux/libatomic-staticto a version that resolves this vulnerability.Fixed in 8.5.0-30.el8_10.alma.1 - Upgrade
Upgrade
almalinux/libgccto a version that resolves this vulnerability.Fixed in 8.5.0-30.el8_10.alma.1 - Upgrade
Upgrade
almalinux/libgfortranto a version that resolves this vulnerability.Fixed in 8.5.0-30.el8_10.alma.1 - Upgrade
Upgrade
almalinux/libgfortran-staticto a version that resolves this vulnerability.Fixed in 8.5.0-30.el8_10.alma.1 - Upgrade
Upgrade
almalinux/libgompto a version that resolves this vulnerability.Fixed in 8.5.0-30.el8_10.alma.1 - Upgrade
Upgrade
almalinux/libgomp-offload-nvptxto a version that resolves this vulnerability.Fixed in 8.5.0-30.el8_10.alma.1 - Upgrade
Upgrade
almalinux/libitmto a version that resolves this vulnerability.Fixed in 8.5.0-30.el8_10.alma.1 - Upgrade
Upgrade
almalinux/libitm-develto a version that resolves this vulnerability.Fixed in 8.5.0-30.el8_10.alma.1 - Upgrade
Upgrade
almalinux/liblsanto a version that resolves this vulnerability.Fixed in 8.5.0-30.el8_10.alma.1 - Upgrade
Upgrade
almalinux/libquadmathto a version that resolves this vulnerability.Fixed in 8.5.0-30.el8_10.alma.1 - Upgrade
Upgrade
almalinux/libquadmath-develto a version that resolves this vulnerability.Fixed in 8.5.0-30.el8_10.alma.1 - Upgrade
Upgrade
almalinux/libquadmath-staticto a version that resolves this vulnerability.Fixed in 8.5.0-30.el8_10.alma.1 - Upgrade
Upgrade
almalinux/libstdc++to a version that resolves this vulnerability.Fixed in 8.5.0-30.el8_10.alma.1 - Upgrade
Upgrade
almalinux/libstdc++-develto a version that resolves this vulnerability.Fixed in 8.5.0-30.el8_10.alma.1 - Upgrade
Upgrade
almalinux/libstdc++-docsto a version that resolves this vulnerability.Fixed in 8.5.0-30.el8_10.alma.1 - Upgrade
Upgrade
almalinux/libstdc++-staticto a version that resolves this vulnerability.Fixed in 8.5.0-30.el8_10.alma.1 - Upgrade
Upgrade
almalinux/libtsanto a version that resolves this vulnerability.Fixed in 8.5.0-30.el8_10.alma.1 - Upgrade
Upgrade
almalinux/libubsanto a version that resolves this vulnerability.Fixed in 8.5.0-30.el8_10.alma.1