{"id":"ALSA-2021:4586","summary":"Moderate: gcc-toolset-11-gcc security update","details":"The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries.\n\nSecurity Fix(es):\n\n* Developer environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks (CVE-2021-42574)\n\nThe following changes were introduced in gcc in order to facilitate detection of BiDi Unicode characters:\n\nThis update implements a new warning option -Wbidirectional to warn about possibly dangerous bidirectional characters.\n\nThere are three levels of warning supported by gcc:\n\"-Wbidirectional=unpaired\", which warns about improperly terminated BiDi contexts. (This is the default.)\n\"-Wbidirectional=none\", which turns the warning off.\n\"-Wbidirectional=any\", which warns about any use of bidirectional characters.\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","modified":"2026-02-04T03:56:37.068533Z","published":"2021-11-10T08:32:49Z","related":["CVE-2021-42574"],"references":[{"type":"REPORT","url":"https://vulners.com/cve/CVE-2021-42574"}],"affected":[{"package":{"name":"gcc-toolset-11-gcc","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gcc-toolset-11-gcc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4586.json"}},{"package":{"name":"gcc-toolset-11-gcc-c++","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gcc-toolset-11-gcc-c%2B%2B"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4586.json"}},{"package":{"name":"gcc-toolset-11-gcc-gdb-plugin","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gcc-toolset-11-gcc-gdb-plugin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4586.json"}},{"package":{"name":"gcc-toolset-11-gcc-gfortran","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gcc-toolset-11-gcc-gfortran"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4586.json"}},{"package":{"name":"gcc-toolset-11-gcc-plugin-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gcc-toolset-11-gcc-plugin-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4586.json"}},{"package":{"name":"gcc-toolset-11-libasan-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gcc-toolset-11-libasan-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4586.json"}},{"package":{"name":"gcc-toolset-11-libatomic-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gcc-toolset-11-libatomic-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4586.json"}},{"package":{"name":"gcc-toolset-11-libgccjit","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gcc-toolset-11-libgccjit"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4586.json"}},{"package":{"name":"gcc-toolset-11-libgccjit-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gcc-toolset-11-libgccjit-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4586.json"}},{"package":{"name":"gcc-toolset-11-libgccjit-docs","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gcc-toolset-11-libgccjit-docs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4586.json"}},{"package":{"name":"gcc-toolset-11-libitm-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gcc-toolset-11-libitm-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4586.json"}},{"package":{"name":"gcc-toolset-11-liblsan-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gcc-toolset-11-liblsan-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4586.json"}},{"package":{"name":"gcc-toolset-11-libquadmath-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gcc-toolset-11-libquadmath-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4586.json"}},{"package":{"name":"gcc-toolset-11-libstdc++-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gcc-toolset-11-libstdc%2B%2B-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4586.json"}},{"package":{"name":"gcc-toolset-11-libstdc++-docs","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gcc-toolset-11-libstdc%2B%2B-docs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4586.json"}},{"package":{"name":"gcc-toolset-11-libtsan-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gcc-toolset-11-libtsan-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4586.json"}},{"package":{"name":"gcc-toolset-11-libubsan-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/gcc-toolset-11-libubsan-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4586.json"}},{"package":{"name":"libasan6","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/libasan6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.1-1.2.el8_5"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4586.json"}}],"schema_version":"1.7.3"}