RHSA-2026:99632: Moderate: gcc-toolset-15-gcc security update
Moderate: gcc-toolset-15-gcc security update
Other sources
The gcc-toolset-15-gcc package contains the GNU Compiler Collection version 15.Security Fix(es): gcc: Integer wrap in std (CVE-2026-114691) gcc: Confirmed out-of-bounds read/write in libstdc++ parallel std (CVE-2026-114690) gcc: Stack overflow in std::bitset on libstdc++ (CVE-2026-115455) gcc: Out-of-bounds read in std::fromchars (CVE-2026-115456) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
Which environments are covered by this advisory?
The advisory applies to Red Hat Enterprise Linux on x86_64, ARM 64, IBM z Systems, and Power little endian. It also covers the corresponding Extended Life Cycle offerings.
Which parts of GCC are implicated by the listed fixes?
The fixes concern libstdc++ functionality, including parallel standard-library operations, std::bitset, and std::from_chars, as well as an integer-wrap issue in std.
What vulnerability classes are addressed?
The listed issues include integer wrap, confirmed out-of-bounds read/write, stack overflow, and out-of-bounds read vulnerabilities.