SUSE-SU-2026:4637-2: Security update for gcc48
This update for gcc48 fixes the following issue:
- CVE-2026-102010: UAF due to improper pointer update when an application calls the eraseif function on a binary heap priority queue in libstdc++ (bsc#1283123).
Other sources
This update for gcc48 fixes the following issue: CVE-2026-102010: UAF due to improper pointer update when an application calls the eraseif function on a binary heap priority queue in libstdc++ (bsc#1283123).
— SUSE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/gcc48to a version that resolves this vulnerability.Fixed in 4.8.5-31.32.1 - Upgrade
Upgrade
suse/gcc48-objcto a version that resolves this vulnerability.Fixed in 4.8.5-31.32.1 - Upgrade
Upgrade
suse/cpp48-debuginfoto a version that resolves this vulnerability.Fixed in 4.8.5-31.32.1 - Upgrade
Upgrade
suse/cpp48to a version that resolves this vulnerability.Fixed in 4.8.5-31.32.1 - Upgrade
Upgrade
suse/gcc48-debuginfoto a version that resolves this vulnerability.Fixed in 4.8.5-31.32.1 - Upgrade
Upgrade
suse/gcc48-objc-debuginfoto a version that resolves this vulnerability.Fixed in 4.8.5-31.32.1 - Upgrade
Upgrade
suse/gcc48-debugsourceto a version that resolves this vulnerability.Fixed in 4.8.5-31.32.1 - Upgrade
Upgrade
suse/gcc48-localeto a version that resolves this vulnerability.Fixed in 4.8.5-31.32.1 - Upgrade
Upgrade
suse/gcc48to a version that resolves this vulnerability.Fixed in 32bit-4.8.5-31.32.1 - Upgrade
Upgrade
suse/gcc48-infoto a version that resolves this vulnerability.Fixed in 4.8.5-31.32.1 - Upgrade
Upgrade
suse/libasan0to a version that resolves this vulnerability.Fixed in 4.8.5-31.32.1 - Upgrade
Upgrade
suse/libasan0-debuginfoto a version that resolves this vulnerability.Fixed in 4.8.5-31.32.1 - Upgrade
Upgrade
suse/libasan0to a version that resolves this vulnerability.Fixed in 32bit-4.8.5-31.32.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4637 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4637