RHSA-2026:98115: Moderate: gcc security update
The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries.Security Fix(es): gcc: Integer wrap in std (CVE-2026-114691) gcc: Confirmed out-of-bounds read/write in libstdc++ parallel std (CVE-2026-114690) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/gccto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/cppto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/cpp-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/gcc-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/gcc-debugsourceto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/gcc-gdb-pluginto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/gcc-gdb-plugin-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/gcc-gfortranto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/gcc-gfortran-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/gcc-offload-nvptxto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/gcc-offload-nvptx-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/gcc-plugin-annobinto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/gcc-plugin-annobin-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/gcc-plugin-devel-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/libasanto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/libasan-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/libatomicto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/libatomic-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/libatomic-staticto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/libgccto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/libgcc-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/libgfortranto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/libgfortran-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/libgompto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/libgomp-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/libgomp-offload-nvptxto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/libgomp-offload-nvptx-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/libitmto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/libitm-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/libitm-develto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/liblsanto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/liblsan-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/libquadmathto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/libquadmath-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/libquadmath-develto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/libtsanto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/libtsan-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/libubsanto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/libubsan-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/cppto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/cpp-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/gccto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/gcc-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/gcc-debugsourceto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/gcc-gdb-pluginto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/gcc-gdb-plugin-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/gcc-gfortranto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/gcc-gfortran-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/gcc-plugin-annobinto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/gcc-plugin-annobin-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/gcc-plugin-devel-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/libasanto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/libasan-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/libatomicto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/libatomic-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/libatomic-staticto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/libgccto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/libgcc-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/libgfortranto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/libgfortran-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/libgompto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/libgomp-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/libitmto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/libitm-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/libitm-develto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/liblsanto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/liblsan-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/libtsanto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/libtsan-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/libubsanto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/libubsan-debuginfoto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/gcc-plugin-develto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/libgfortran-staticto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/libquadmath-staticto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10 - Upgrade
Upgrade
redhat/gcc-plugin-develto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa - Upgrade
Upgrade
redhat/libgfortran-staticto a version that resolves this vulnerability.Fixed in 8.5.0-31.el8_10.aa
Event History
Frequently Asked Questions
Which installed components are covered by this update?
The advisory lists gcc, cpp, gcc-gfortran, gcc-gdb-plugin, and their associated debuginfo and debugsource packages. The security fixes specifically mention an integer wrap in std and an out-of-bounds read/write in libstdc++ parallel std.
Do the supplied details indicate whether a default installation is vulnerable or what access an attacker needs?
No. The advisory data does not state affected configurations, attack prerequisites, exposure conditions, or whether the issues are reachable in default deployments.
What mitigation is documented if the packages cannot be updated immediately?
No temporary mitigation or workaround is provided in the advisory data. The described remediation is the gcc security update.