RHSA-2007:0473: Moderate: gcc security and bug fix update
The gcc packages include C, C++, Java, Fortran 77, Objective C, and Ada 95GNU compilers and related support libraries.Jürgen Weigert discovered a directory traversal flaw in fastjar. Anattacker could create a malicious JAR file which, if unpacked usingfastjar, could write to any files the victim had write access to.(CVE-2006-3619)These updated packages also fix a reload internal compiler error withfnon-call-exceptions option. All users of gcc should upgrade to these updated packages, which resolvethese issues.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2007:0473?
The severity of RHSA-2007:0473 is classified as moderate.
How do I fix RHSA-2007:0473?
To fix RHSA-2007:0473, you should update the gcc packages to the latest version provided by your vendor.
What is the impact of RHSA-2007:0473?
The impact of RHSA-2007:0473 includes the potential for an attacker to exploit a directory traversal flaw for unauthorized file access.
Which versions of GCC are affected by RHSA-2007:0473?
RHSA-2007:0473 affects multiple versions of the GCC compiler packages.
Who discovered the vulnerability in RHSA-2007:0473?
The directory traversal flaw in RHSA-2007:0473 was discovered by Jürgen Weigert.