p PatchFirst

RLSA-2026:89830

RLSA-2026:89830 · Moderate: gcc security update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries. Security Fix(es): * gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if (CVE-2026-102010) * gcc: libstdc++ integer overflow in `new` operator (CVE-2026-95619) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVSS 7.7 · High · Fix available

Published
Updated

Stack: system

Affected products and versions

  • gcc Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:8.5.0-30.el8_10

    Update to 0:8.5.0-30.el8_10

Original sources

Check your server →