RHSA-2026:99089: Moderate: gcc security update
The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries.Security Fix(es): gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap eraseif (CVE-2026-102010) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/gccto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/cppto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/cpp-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/cross-gcc-aarch64-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/cross-gcc-plugin-aarch64-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/cross-gcc-plugin-ppc64le-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/cross-gcc-plugin-s390x-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/cross-gcc-ppc64le-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/cross-gcc-s390x-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/gcc-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/gcc-debugsourceto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/gcc-gdb-plugin-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/gcc-gfortranto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/gcc-gfortran-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/gcc-offload-amdgcnto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/gcc-offload-amdgcn-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/gcc-offload-nvptxto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/gcc-offload-nvptx-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/gcc-plugin-annobinto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/gcc-plugin-annobin-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/gcc-plugin-develto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/gcc-plugin-devel-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/libasanto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/libasan-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/libatomicto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/libatomic-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/libgccto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/libgcc-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/libgccjitto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/libgccjit-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/libgccjit-develto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/libgfortranto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/libgfortran-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/libgompto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/libgomp-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/libgomp-offload-amdgcnto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/libgomp-offload-amdgcn-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/libgomp-offload-nvptxto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/libgomp-offload-nvptx-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/libhwasanto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/libhwasan-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/libitmto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/libitm-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/libitm-develto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/liblsanto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/liblsan-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/libquadmathto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/libquadmath-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/libquadmath-develto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/libtsanto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/libtsan-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/libubsanto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/libubsan-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/cppto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/cpp-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/gccto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/gcc-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/gcc-debugsourceto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/gcc-gdb-plugin-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/gcc-gfortranto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/gcc-gfortran-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/gcc-plugin-annobinto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/gcc-plugin-annobin-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/gcc-plugin-develto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/gcc-plugin-devel-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/libasanto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/libasan-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/libatomicto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/libatomic-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/libgccto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/libgcc-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/libgccjitto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/libgccjit-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/libgccjit-develto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/libgfortranto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/libgfortran-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/libgompto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/libgomp-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/libhwasanto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/libhwasan-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/libitmto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/libitm-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/libitm-develto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/liblsanto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/liblsan-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/libtsanto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/libtsan-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/libubsanto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/libubsan-debuginfoto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa - Upgrade
Upgrade
redhat/libgfortran-staticto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/libquadmath-staticto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2 - Upgrade
Upgrade
redhat/libgfortran-staticto a version that resolves this vulnerability.Fixed in 14.3.1-4.5.el10_2.aa