{"id":"ALSA-2021:4585","summary":"Moderate: gcc-toolset-10-gcc security update","details":"The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries.\n\nSecurity Fix(es):\n\n* Developer environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks (CVE-2021-42574)\n\nThe following changes were introduced in gcc in order to facilitate detection of BiDi Unicode characters:\n\nThis update implements a new warning option -Wbidirectional to warn about possibly dangerous bidirectional characters.\n\nThere are three levels of warning supported by gcc:\n\"-Wbidirectional=unpaired\", which warns about improperly terminated BiDi contexts. (This is the default.)\n\"-Wbidirectional=none\", which turns the warning off.\n\"-Wbidirectional=any\", which warns about any use of bidirectional characters.\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","modified":"2026-02-04T02:19:41.004973Z","published":"2021-11-10T08:31:42Z","related":["CVE-2021-42574"],"references":[{"type":"ADVISORY","url":"https://errata.almalinux.org/8/ALSA-2021-4585.html"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2021-42574"}],"affected":[{"package":{"name":"gcc-toolset-10-gcc","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gcc-toolset-10-gcc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4585.json"}},{"package":{"name":"gcc-toolset-10-gcc-c++","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gcc-toolset-10-gcc-c%2B%2B"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4585.json"}},{"package":{"name":"gcc-toolset-10-gcc-gdb-plugin","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gcc-toolset-10-gcc-gdb-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4585.json"}},{"package":{"name":"gcc-toolset-10-gcc-gfortran","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gcc-toolset-10-gcc-gfortran"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4585.json"}},{"package":{"name":"gcc-toolset-10-gcc-plugin-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gcc-toolset-10-gcc-plugin-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4585.json"}},{"package":{"name":"gcc-toolset-10-libasan-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gcc-toolset-10-libasan-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4585.json"}},{"package":{"name":"gcc-toolset-10-libatomic-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gcc-toolset-10-libatomic-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4585.json"}},{"package":{"name":"gcc-toolset-10-libitm-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gcc-toolset-10-libitm-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4585.json"}},{"package":{"name":"gcc-toolset-10-liblsan-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gcc-toolset-10-liblsan-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4585.json"}},{"package":{"name":"gcc-toolset-10-libquadmath-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gcc-toolset-10-libquadmath-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4585.json"}},{"package":{"name":"gcc-toolset-10-libstdc++-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gcc-toolset-10-libstdc%2B%2B-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4585.json"}},{"package":{"name":"gcc-toolset-10-libstdc++-docs","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gcc-toolset-10-libstdc%2B%2B-docs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4585.json"}},{"package":{"name":"gcc-toolset-10-libtsan-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gcc-toolset-10-libtsan-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4585.json"}},{"package":{"name":"gcc-toolset-10-libubsan-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gcc-toolset-10-libubsan-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4585.json"}},{"package":{"name":"libasan6","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/libasan6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4585.json"}}],"schema_version":"1.7.3"}