CVE-2026-115455

Gcc: stack overflow in std::bitset on libstdc++

6.5 MediumFix available

CVE-2026-115455 is a medium vulnerability (CVSS 6.5) in Red Hat Enterprise Linux 10, published October 30, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 34th percentile. Fixed in gcc-14 14.4.0-4.

What does this mean?

Severity: 6.5 MediumCVSS 3.1, CVE List
Exploit chance: 0.40%EPSS, 34th percentile
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: 14.4.0-4gcc-14 +299 more

Description

A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character stream, internal stack memory allocation fails to properly account for character size and alignment. An attacker capable of supplying crafted input to an affected application could trigger a stack-based buffer overflow leading denial of service (DoS).

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: High
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: Low
Availability: High

Exploit likelihood

0.40%Up 0.1 points since Oct 30, 2026

Discussion

Quiet in the last day.

Post on Blueskybsky.app · Nov 1, 2026

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`gcc` Azure Linux:3	through 13.2.0-7	None known
`gcc-13` Debian:13	All versions, plus listed versions 13.3.0-1613.3.0-1713.4.0-113.4.0-1013.4.0-11 Show 14 moreShow less 13.4.0-11+alpha13.4.0-1213.4.0-213.4.0-313.4.0-413.4.0-513.4.0-613.4.0-713.4.0-813.4.0-913.5.0-113.5.0-213.5.0-313.5.0-4	None known
`gcc-13` Debian:14	All versions, plus listed versions 13.3.0-1613.3.0-1713.4.0-113.4.0-1013.4.0-11 Show 14 moreShow less 13.4.0-11+alpha13.4.0-1213.4.0-213.4.0-313.4.0-413.4.0-513.4.0-613.4.0-713.4.0-813.4.0-913.5.0-113.5.0-213.5.0-313.5.0-4	None known
`gcc-14` Debian:13	All versions, plus listed versions 14.2.0-1914.2.0-2014.2.0-2114.2.0-2214.2.0-23 Show 22 moreShow less 14.2.0-2414.2.0-2514.3.0-114.3.0-1014.3.0-1114.3.0-1214.3.0-1314.3.0-1414.3.0-1514.3.0-1614.3.0-214.3.0-314.3.0-414.3.0-514.3.0-614.3.0-714.3.0-814.3.0-914.4.0-114.4.0-214.4.0-314.4.0-4	None known
`gcc-14` Debian:14	before 14.4.0-4, plus listed versions 14.2.0-1914.2.0-2014.2.0-2114.2.0-2214.2.0-23 Show 21 moreShow less 14.2.0-2414.2.0-2514.3.0-114.3.0-1014.3.0-1114.3.0-1214.3.0-1314.3.0-1414.3.0-1514.3.0-1614.3.0-214.3.0-314.3.0-414.3.0-514.3.0-614.3.0-714.3.0-814.3.0-914.4.0-114.4.0-214.4.0-3	14.4.0-4
`gcc-15` Debian:14	All versions, plus listed versions 15-20241128-115-20241214-115-20241220-115-20241231-115-20250112-1 Show 45 moreShow less 15-20250114-115-20250130-115-20250130-215-20250203-115-20250208-115-20250213-115-20250220-115-20250315-115-20250319-115-20250329-115-20250406-115-20250423-115.1.0-115.1.0-1015.1.0-1115.1.0-215.1.0-315.1.0-415.1.0-515.1.0-615.1.0-715.1.0-815.1.0-8+sh415.1.0-8+sh4.115.1.0-915.2.0-115.2.0-1015.2.0-1115.2.0-1215.2.0-1315.2.0-1415.2.0-1515.2.0-1615.2.0-1715.2.0-215.2.0-315.2.0-415.2.0-515.2.0-615.2.0-715.2.0-815.2.0-915.3.0-115.3.0-215.3.0-3	None known
`gcc-16` Debian:14	All versions, plus listed versions 16-20251130-116-20251202-116-20251210-116-20251214-116-20260119-1 Show 21 moreShow less 16-20260203-116-20260203-216-20260207-116-20260207-216-20260208-116-20260217-116-20260226-116-20260307-116-20260308-116-20260308-1+sh416-20260315-116-20260322-116-20260423-116-20260425-116.1.0-116.1.0-216.1.0-316.2.0-116.2.0-216.2.0-316.2.0-4	None known
`gcc13` Red Hat:hummingbird:1	before 0:13.5.0-0.4.hum1	0:13.5.0-0.4.hum1
`gcc13-c++` Red Hat:hummingbird:1	before 0:13.5.0-0.4.hum1	0:13.5.0-0.4.hum1
`gcc13-gfortran` Red Hat:hummingbird:1	before 0:13.5.0-0.4.hum1	0:13.5.0-0.4.hum1

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`gcc13-plugin-annobin` Red Hat:hummingbird:1	before 0:13.5.0-0.4.hum1	0:13.5.0-0.4.hum1
`cpp` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`gcc` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`gcc-c++` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`gcc-gdb-plugin` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`gcc-gfortran` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`gcc-offload-amdgcn` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`gcc-offload-nvptx` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`gcc-plugin-annobin` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`gcc-plugin-devel` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`libasan` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`libasan-static` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`libatomic` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`libgcc` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`libgccjit` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`libgccjit-devel` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`libgdiagnostics` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`libgdiagnostics-devel` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`libgfortran` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`libgfortran-static` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`libgomp` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`libgomp-offload-amdgcn` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`libgomp-offload-nvptx` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`libhwasan` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`libhwasan-static` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`libitm` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`libitm-devel` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`libitm-static` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`liblsan` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`liblsan-static` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`libquadmath` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`libquadmath-devel` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`libquadmath-static` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`libstdc++` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`libstdc++-devel` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`libstdc++-docs` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`libstdc++-static` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`libtsan` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`libtsan-static` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`libubsan` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`libubsan-static` Red Hat:hummingbird:1 From an advisory covering 5 CVEs	before 0:16.2.1-3.2.hum1	0:16.2.1-3.2.hum1
`gcc-toolset-15-gcc` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-gcc-c++` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-gcc-c++-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-gcc-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-gcc-gfortran` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-gcc-gfortran-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-gcc-plugin-annobin` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-gcc-plugin-annobin-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-gcc-plugin-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-gcc-plugin-devel-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-libasan-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-libatomic-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-libgccjit` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-libgccjit-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-libgccjit-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-libitm-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-liblsan-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-libquadmath-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-libstdc++-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-libstdc++-docs` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-libtsan-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-libubsan-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-offload-nvptx` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-offload-nvptx-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`libasan8` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`libasan8-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`libhwasan-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`liblsan` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`liblsan-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`libtsan2` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`libtsan2-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-16-gcc` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-gcc-c++` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-gcc-c++-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-gcc-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-gcc-gfortran` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-gcc-gfortran-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-gcc-plugin-annobin` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-gcc-plugin-annobin-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-gcc-plugin-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-gcc-plugin-devel-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-libasan-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-libatomic-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-libgccjit` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-libgccjit-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-libgccjit-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-libgdiagnostics-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-libitm-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-liblsan-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-libquadmath-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-libstdc++-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-libstdc++-docs` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-libtsan-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-15-gcc` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-gcc-c++` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-gcc-c++-debuginfo` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-gcc-debuginfo` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-gcc-gfortran` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-gcc-gfortran-debuginfo` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-gcc-plugin-annobin` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-gcc-plugin-annobin-debuginfo` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-gcc-plugin-devel` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-gcc-plugin-devel-debuginfo` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-libasan-devel` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-libatomic-devel` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-libgccjit` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-libgccjit-debuginfo` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-libgccjit-devel` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-libitm-devel` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-liblsan-devel` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-libstdc++-devel` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-libstdc++-docs` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-libtsan-devel` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-libubsan-devel` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-libquadmath-devel` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-offload-nvptx` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-15-offload-nvptx-debuginfo` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:15.2.1-7.4.el9_9	0:15.2.1-7.4.el9_9
`gcc-toolset-16-gcc` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-gcc-c++` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-gcc-c++-debuginfo` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-gcc-debuginfo` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-gcc-gfortran` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-gcc-gfortran-debuginfo` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-gcc-plugin-annobin` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-gcc-plugin-annobin-debuginfo` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-gcc-plugin-devel` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-gcc-plugin-devel-debuginfo` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-libasan-devel` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-libatomic-devel` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-libgccjit` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-libgccjit-debuginfo` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-libgccjit-devel` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-libgdiagnostics-devel` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-libitm-devel` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-liblsan-devel` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-libstdc++-devel` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-libstdc++-docs` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-libtsan-devel` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-libubsan-devel` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`libasan8` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`libasan8-debuginfo` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`libgdiagnostics` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`libgdiagnostics-debuginfo` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`libtsan2` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`libtsan2-debuginfo` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-libquadmath-devel` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-offload-nvptx` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-16-offload-nvptx-debuginfo` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`liblsan` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`liblsan-debuginfo` Rocky Linux:9 From an advisory covering 4 CVEs	before 0:16.2.1-1.4.el9_9	0:16.2.1-1.4.el9_9
`gcc-toolset-15-gcc` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:15.2.1-8.2.el10_3	0:15.2.1-8.2.el10_3
`gcc-toolset-15-gcc-plugin-devel-debuginfo` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:15.2.1-8.2.el10_3	0:15.2.1-8.2.el10_3
`gcc-toolset-15-libubsan-devel` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:15.2.1-8.2.el10_3	0:15.2.1-8.2.el10_3
`gcc-toolset-15-gcc-c++` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:15.2.1-8.2.el10_3	0:15.2.1-8.2.el10_3
`gcc-toolset-15-gcc-c++-debuginfo` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:15.2.1-8.2.el10_3	0:15.2.1-8.2.el10_3
`gcc-toolset-15-gcc-plugin-annobin-debuginfo` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:15.2.1-8.2.el10_3	0:15.2.1-8.2.el10_3
`gcc-toolset-15-liblsan-devel` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:15.2.1-8.2.el10_3	0:15.2.1-8.2.el10_3
`gcc-toolset-15-gcc-plugin-devel` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:15.2.1-8.2.el10_3	0:15.2.1-8.2.el10_3
`gcc-toolset-15-libstdc++-docs` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:15.2.1-8.2.el10_3	0:15.2.1-8.2.el10_3
`gcc-toolset-15-libasan-devel` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:15.2.1-8.2.el10_3	0:15.2.1-8.2.el10_3
`gcc-toolset-15-gcc-gfortran-debuginfo` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:15.2.1-8.2.el10_3	0:15.2.1-8.2.el10_3
`gcc-toolset-15-gcc-debuginfo` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:15.2.1-8.2.el10_3	0:15.2.1-8.2.el10_3
`gcc-toolset-15-gcc-gfortran` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:15.2.1-8.2.el10_3	0:15.2.1-8.2.el10_3
`gcc-toolset-15-libstdc++-devel` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:15.2.1-8.2.el10_3	0:15.2.1-8.2.el10_3
`gcc-toolset-15-libtsan-devel` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:15.2.1-8.2.el10_3	0:15.2.1-8.2.el10_3
`gcc-toolset-15-libgccjit-devel` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:15.2.1-8.2.el10_3	0:15.2.1-8.2.el10_3
`gcc-toolset-15-libgccjit` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:15.2.1-8.2.el10_3	0:15.2.1-8.2.el10_3
`gcc-toolset-15-libgccjit-debuginfo` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:15.2.1-8.2.el10_3	0:15.2.1-8.2.el10_3
`gcc-toolset-15-libatomic-devel` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:15.2.1-8.2.el10_3	0:15.2.1-8.2.el10_3
`gcc-toolset-15-gcc-plugin-annobin` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:15.2.1-8.2.el10_3	0:15.2.1-8.2.el10_3
`gcc-toolset-15-libitm-devel` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:15.2.1-8.2.el10_3	0:15.2.1-8.2.el10_3
`gcc-toolset-15-offload-nvptx` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:15.2.1-8.2.el10_3	0:15.2.1-8.2.el10_3
`gcc-toolset-15-offload-nvptx-debuginfo` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:15.2.1-8.2.el10_3	0:15.2.1-8.2.el10_3
`gcc-toolset-15-libquadmath-devel` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:15.2.1-8.2.el10_3	0:15.2.1-8.2.el10_3
`libubsan-debuginfo` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:14.4.1-5.el10_3	0:14.4.1-5.el10_3
`libstdc++-devel` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:14.4.1-5.el10_3	0:14.4.1-5.el10_3
`libgfortran` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:14.4.1-5.el10_3	0:14.4.1-5.el10_3
`libgfortran-static` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:14.4.1-5.el10_3	0:14.4.1-5.el10_3
`gcc-gfortran` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:14.4.1-5.el10_3	0:14.4.1-5.el10_3
`libgccjit` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:14.4.1-5.el10_3	0:14.4.1-5.el10_3
`gcc-plugin-devel-debuginfo` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:14.4.1-5.el10_3	0:14.4.1-5.el10_3
`gcc` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:14.4.1-5.el10_3	0:14.4.1-5.el10_3
`libasan` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:14.4.1-5.el10_3	0:14.4.1-5.el10_3
`libtsan-debuginfo` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:14.4.1-5.el10_3	0:14.4.1-5.el10_3
`libgfortran-debuginfo` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:14.4.1-5.el10_3	0:14.4.1-5.el10_3
`gcc-plugin-annobin` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:14.4.1-5.el10_3	0:14.4.1-5.el10_3
`libgomp` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:14.4.1-5.el10_3	0:14.4.1-5.el10_3
`libstdc++-docs` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:14.4.1-5.el10_3	0:14.4.1-5.el10_3
`libasan-debuginfo` Rocky Linux:10 From an advisory covering 4 CVEs	before 0:14.4.1-5.el10_3	0:14.4.1-5.el10_3
`gcc-3.3` Ubuntu:14.04:LTS	All versions, plus listed versions 1:3.3.6ds1-25ubuntu4	None known
`gcc-4.7` Ubuntu:14.04:LTS	All versions, plus listed versions 4.7.3-7ubuntu34.7.3-8ubuntu14.7.3-9ubuntu14.7.3-9ubuntu24.7.3-10ubuntu14.7.3-11ubuntu14.7.3-12ubuntu1	None known
`gcc-4.8` Ubuntu:14.04:LTS	All versions, plus listed versions 4.8.1-10ubuntu84.8.2-1ubuntu14.8.2-1ubuntu24.8.2-10ubuntu14.8.2-10ubuntu2 Show 18 moreShow less 4.8.2-12ubuntu24.8.2-13ubuntu14.8.2-14ubuntu14.8.2-14ubuntu24.8.2-14ubuntu44.8.2-15ubuntu34.8.2-16ubuntu14.8.2-16ubuntu34.8.2-16ubuntu44.8.2-16ubuntu54.8.2-16ubuntu64.8.2-17ubuntu14.8.2-17ubuntu24.8.2-19ubuntu14.8.4-2ubuntu1~14.044.8.4-2ubuntu1~14.04.14.8.4-2ubuntu1~14.04.34.8.4-2ubuntu1~14.04.4	None known
`gcc-defaults` Ubuntu:14.04:LTS	All versions, plus listed versions 1.122ubuntu31.124ubuntu21.124ubuntu31.124ubuntu41.124ubuntu51.124ubuntu6	None known
`gcc-mingw-w64` Ubuntu:14.04:LTS	All versions, plus listed versions 891112	None known
`gccgo-4.9` Ubuntu:14.04:LTS	All versions, plus listed versions 4.9-20140213-0ubuntu14.9-20140213-0ubuntu24.9-20140217-0ubuntu14.9-20140222-0ubuntu14.9-20140303-0ubuntu2 Show 6 moreShow less 4.9-20140303-0ubuntu34.9-20140321-0ubuntu14.9-20140330-0ubuntu14.9-20140406-0ubuntu14.9.1-0ubuntu14.9.3-0ubuntu4	None known
`gcc-5` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 5.2.1-22ubuntu25.2.1-22ubuntu55.2.1-23ubuntu15.2.1-26ubuntu15.2.1-27ubuntu1 Show 34 moreShow less 5.3.1-2ubuntu25.3.1-3ubuntu15.3.1-3ubuntu35.3.1-4ubuntu15.3.1-5ubuntu15.3.1-5ubuntu25.3.1-5ubuntu35.3.1-6ubuntu15.3.1-6ubuntu25.3.1-7ubuntu15.3.1-8ubuntu25.3.1-8ubuntu35.3.1-9ubuntu35.3.1-10ubuntu25.3.1-11ubuntu15.3.1-12ubuntu15.3.1-12ubuntu25.3.1-12ubuntu45.3.1-13ubuntu15.3.1-13ubuntu35.3.1-13ubuntu45.3.1-13ubuntu65.3.1-14ubuntu25.3.1-14ubuntu2.15.4.0-6ubuntu1~16.04.15.4.0-6ubuntu1~16.04.25.4.0-6ubuntu1~16.04.45.4.0-6ubuntu1~16.04.55.4.0-6ubuntu1~16.04.65.4.0-6ubuntu1~16.04.95.4.0-6ubuntu1~16.04.105.4.0-6ubuntu1~16.04.115.4.0-6ubuntu1~16.04.125.4.0-6ubuntu1~16.04.12+esm2	None known
`gcc-5-cross` Ubuntu:16.04:LTS	All versions, plus listed versions 12ubuntu115ubuntu118ubuntu120ubuntu320ubuntu5 Show 4 moreShow less 20ubuntu624ubuntu0.124ubuntu0.224ubuntu0.3	None known
`gcc-defaults` Ubuntu:16.04:LTS	All versions, plus listed versions 1.144ubuntu11.146ubuntu81.149ubuntu21.150ubuntu1	None known
`gccgo-6` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 6-20160210-0ubuntu26-20160217-0ubuntu16-20160220-0ubuntu16-20160225-0ubuntu16-20160225-0ubuntu2 Show 7 moreShow less 6-20160227-0ubuntu16-20160313-0ubuntu16-20160319-0ubuntu16-20160405-0ubuntu16-20160405-0ubuntu26.0.1-0ubuntu16.0.1-0ubuntu1+esm1	None known
`gcc-3.3` Ubuntu:16.04:LTS	All versions, plus listed versions 1:3.3.6ds1-27.2ubuntu11:3.3.6ds1-28ubuntu1	None known
`gcc-4.7` Ubuntu:16.04:LTS	All versions, plus listed versions 4.7.4-3ubuntu34.7.4-3ubuntu74.7.4-3ubuntu94.7.4-3ubuntu104.7.4-3ubuntu114.7.4-3ubuntu12	None known
`gcc-4.7-armel-cross` Ubuntu:16.04:LTS	All versions, plus listed versions 1.861.903	None known
`gcc-4.7-armhf-cross` Ubuntu:16.04:LTS	All versions, plus listed versions 1.861.873	None known
`gcc-4.8` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.5-1ubuntu14.8.5-2ubuntu14.8.5-3ubuntu14.8.5-3ubuntu24.8.5-3ubuntu34.8.5-4ubuntu14.8.5-4ubuntu2	None known
`gcc-4.8-arm64-cross` Ubuntu:16.04:LTS	All versions, plus listed versions 0.170.182	None known
`gcc-4.8-armhf-cross` Ubuntu:16.04:LTS	All versions, plus listed versions 0.160.172	None known
`gcc-4.8-powerpc-cross` Ubuntu:16.04:LTS	All versions, plus listed versions 0.190.203	None known
`gcc-4.8-ppc64el-cross` Ubuntu:16.04:LTS	All versions, plus listed versions 0.80.92	None known
`gcc-4.9` Ubuntu:16.04:LTS	All versions, plus listed versions 4.9.3-5ubuntu14.9.3-6ubuntu24.9.3-8ubuntu14.9.3-8ubuntu24.9.3-9ubuntu1 Show 4 moreShow less 4.9.3-11ubuntu14.9.3-11ubuntu24.9.3-12ubuntu14.9.3-13ubuntu2	None known
`gcc-4.9-cross` Ubuntu:16.04:LTS	All versions, plus listed versions 0ubuntu100ubuntu110ubuntu130ubuntu1434	None known
`gcc-5-cross-ports` Ubuntu:16.04:LTS	All versions, plus listed versions 2ubuntu15ubuntu27ubuntu37ubuntu47ubuntu510ubuntu0.110ubuntu0.2	None known
`gcc-arm-linux-androideabi` Ubuntu:16.04:LTS	All versions, plus listed versions 0.20130705.1-0ubuntu80.20130705.1-0ubuntu9	None known
`gcc-arm-none-eabi` Ubuntu:16.04:LTS	All versions, plus listed versions 15:4.9.3+svn227297-115:4.9.3+svn227297-1build115:4.9.3+svn231177-1	None known
`gcc-avr` Ubuntu:16.04:LTS	All versions, plus listed versions 1:4.8.1+Atmel3.4.5-11:4.9.2+Atmel3.5.0-1	None known
`gcc-h8300-hms` Ubuntu:16.04:LTS	All versions, plus listed versions 1:3.4.6+dfsg2-4ubuntu1	None known
`gcc-i686-linux-android` Ubuntu:16.04:LTS	All versions, plus listed versions 79	None known
`gcc-m68hc1x` Ubuntu:16.04:LTS	All versions, plus listed versions 1:3.3.6+3.1+dfsg-3ubuntu1	None known
`gcc-mingw-w64` Ubuntu:16.04:LTS	All versions, plus listed versions 15.415.715.7build116build117	None known
`gcc-msp430` Ubuntu:16.04:LTS	All versions, plus listed versions 4.6.3~mspgcc-20120406-7ubuntu3	None known
`gcc-snapshot` Ubuntu:16.04:LTS	All versions, plus listed versions 20151011-0ubuntu120151030-1ubuntu220151104-0ubuntu120151122-1ubuntu120151209-0ubuntu1 Show 5 moreShow less 20151215-0ubuntu120160105-1ubuntu120160125-1ubuntu120160320-1ubuntu120160415-0ubuntu1	None known
`gcc-7` Ubuntu:18.04:LTS	All versions, plus listed versions 7.2.0-8ubuntu37.2.0-12ubuntu17.2.0-13ubuntu17.2.0-16ubuntu17.2.0-17ubuntu1 Show 14 moreShow less 7.2.0-18ubuntu27.3.0-3ubuntu17.3.0-5ubuntu17.3.0-11ubuntu17.3.0-12ubuntu17.3.0-13ubuntu17.3.0-14ubuntu17.3.0-15ubuntu27.3.0-16ubuntu27.3.0-16ubuntu37.3.0-27ubuntu1~18.047.4.0-1ubuntu1~18.047.4.0-1ubuntu1~18.04.17.5.0-3ubuntu1~18.04	None known
`gcc-7-cross` Ubuntu:18.04:LTS	All versions, plus listed versions 8ubuntu213ubuntu117ubuntu118ubuntu118ubuntu2 Show 8 moreShow less 20ubuntu120ubuntu220ubuntu320ubuntu421ubuntu0.121ubuntu0.221ubuntu0.321ubuntu0.4	None known
`gcc-8` Ubuntu:18.04:LTS	All versions, plus listed versions 8-20180208-0ubuntu18-20180218-1ubuntu18-20180312-2ubuntu18-20180319-1ubuntu28-20180321-1ubuntu1 Show 11 moreShow less 8-20180331-1ubuntu18-20180402-1ubuntu18-20180406-0ubuntu18-20180408-0ubuntu18-20180414-1ubuntu18-20180414-1ubuntu28.2.0-1ubuntu2~18.048.3.0-6ubuntu1~18.048.3.0-6ubuntu1~18.04.18.3.0-26ubuntu1~18.048.4.0-1ubuntu1~18.04	None known
`gcc-8-cross` Ubuntu:18.04:LTS	All versions, plus listed versions 5ubuntu26ubuntu17ubuntu19ubuntu19ubuntu2 Show 4 moreShow less 18ubuntu0.118ubuntu0.318ubuntu0.418ubuntu0.6	None known
`gcc-defaults` Ubuntu:18.04:LTS	All versions, plus listed versions 1.173ubuntu11.174ubuntu21.175ubuntu11.176ubuntu21.176ubuntu2.11.176ubuntu2.21.176ubuntu2.3	None known
`gcc-3.3` Ubuntu:18.04:LTS	All versions, plus listed versions 1:3.3.6ds1-28ubuntu11:3.3.6ds1-30	None known
`gcc-4.8` Ubuntu:18.04:LTS	All versions, plus listed versions 4.8.5-4ubuntu64.8.5-4ubuntu74.8.5-4ubuntu8	None known
`gcc-5` Ubuntu:18.04:LTS	All versions, plus listed versions 5.5.0-1ubuntu15.5.0-2ubuntu35.5.0-3ubuntu15.5.0-4ubuntu15.5.0-5ubuntu1 Show 4 moreShow less 5.5.0-8ubuntu15.5.0-10ubuntu15.5.0-11ubuntu15.5.0-12ubuntu1	None known
`gcc-5-cross` Ubuntu:18.04:LTS	All versions, plus listed versions 26ubuntu127ubuntu127ubuntu232ubuntu133ubuntu2	None known
`gcc-5-cross-ports` Ubuntu:18.04:LTS	All versions, plus listed versions 12ubuntu112ubuntu218ubuntu221ubuntu1	None known
`gcc-6` Ubuntu:18.04:LTS	All versions, plus listed versions 6.4.0-8ubuntu16.4.0-9ubuntu16.4.0-10ubuntu16.4.0-11ubuntu16.4.0-12ubuntu1 Show 5 moreShow less 6.4.0-13ubuntu16.4.0-15ubuntu16.4.0-16ubuntu16.4.0-17ubuntu16.5.0-2ubuntu1~18.04	None known
`gcc-6-cross` Ubuntu:18.04:LTS	All versions, plus listed versions 25ubuntu126ubuntu128ubuntu129ubuntu130ubuntu230ubuntu330ubuntu3.1	None known
`gcc-6-cross-ports` Ubuntu:18.04:LTS	All versions, plus listed versions 23ubuntu124ubuntu125ubuntu127ubuntu128ubuntu228ubuntu328ubuntu3.1	None known
`gcc-7-cross-ports` Ubuntu:18.04:LTS	All versions, plus listed versions 6ubuntu19ubuntu113ubuntu114ubuntu116ubuntu2 Show 6 moreShow less 16ubuntu316ubuntu417ubuntu0.117ubuntu0.217ubuntu0.317ubuntu0.4	None known
`gcc-8-cross-ports` Ubuntu:18.04:LTS	All versions, plus listed versions 2ubuntu23ubuntu13ubuntu24ubuntu16ubuntu2 Show 5 moreShow less 6ubuntu39ubuntu0.19ubuntu0.39ubuntu0.49ubuntu0.5	None known
`gcc-arm-none-eabi` Ubuntu:18.04:LTS	All versions, plus listed versions 15:5.4.1+svn241155-115:6.3.1+svn253039-115:6.3.1+svn253039-1build1	None known
`gcc-avr` Ubuntu:18.04:LTS	All versions, plus listed versions 1:5.4.0+Atmel3.6.0-11:5.4.0+Atmel3.6.0-1build1	None known
`gcc-h8300-hms` Ubuntu:18.04:LTS	All versions, plus listed versions 1:3.4.6+dfsg2-4ubuntu11:3.4.6+dfsg2-4ubuntu3	None known
`gcc-m68hc1x` Ubuntu:18.04:LTS	All versions, plus listed versions 1:3.3.6+3.1+dfsg-3ubuntu11:3.3.6+3.1+dfsg-3ubuntu2	None known
`gcc-mingw-w64` Ubuntu:18.04:LTS	All versions, plus listed versions 19.32020.120.220.2build1	None known
`gcc-msp430` Ubuntu:18.04:LTS	All versions, plus listed versions 4.6.3~mspgcc-20120406-7ubuntu44.6.3~mspgcc-20120406-7ubuntu5	None known
`gcc-snapshot` Ubuntu:18.04:LTS	All versions, plus listed versions 20171017-1ubuntu120171109-1ubuntu120180107-1ubuntu120180130-0ubuntu220180216-1ubuntu11:20180322-1ubuntu11:20180425-1ubuntu1	None known
`gcc-10` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 10-20200202-1ubuntu110-20200204-1ubuntu310-20200204-1ubuntu410-20200204-1ubuntu510-20200211-1ubuntu1 Show 12 moreShow less 10-20200222-1ubuntu110-20200228-0ubuntu110-20200304-1ubuntu110-20200307-0ubuntu110-20200321-1ubuntu110-20200324-1ubuntu110-20200405-0ubuntu110-20200411-0ubuntu110.2.0-5ubuntu1~20.0410.3.0-1ubuntu1~20.0410.5.0-1ubuntu1~20.0410.5.0-1ubuntu1~20.04.1+esm1	None known
`gcc-10-cross` Ubuntu:20.04:LTS	All versions, plus listed versions 3ubuntu34ubuntu15ubuntu26ubuntu26ubuntu36ubuntu46ubuntu6	None known
`gcc-9` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 9.2.1-9ubuntu29.2.1-12ubuntu19.2.1-15ubuntu19.2.1-16ubuntu19.2.1-17ubuntu1 Show 20 moreShow less 9.2.1-19ubuntu19.2.1-20ubuntu39.2.1-21ubuntu19.2.1-25ubuntu19.2.1-28ubuntu19.2.1-29ubuntu19.2.1-30ubuntu19.2.1-30ubuntu29.2.1-31ubuntu19.3.0-3ubuntu19.3.0-5ubuntu19.3.0-7ubuntu19.3.0-8ubuntu19.3.0-10ubuntu19.3.0-10ubuntu29.3.0-17ubuntu1~20.049.4.0-1ubuntu1~20.049.4.0-1ubuntu1~20.04.19.4.0-1ubuntu1~20.04.29.4.0-1ubuntu1~20.04.3	None known
`gcc-9-cross` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 12ubuntu214ubuntu117ubuntu118ubuntu218ubuntu3 Show 8 moreShow less 20ubuntu121ubuntu121ubuntu321ubuntu421ubuntu521ubuntu621ubuntu721ubuntu7.1	None known
`gcc-defaults` Ubuntu:20.04:LTS	All versions, plus listed versions 1.185.1ubuntu11.185.1ubuntu2	None known
`gcc-10-cross-mipsen` Ubuntu:20.04:LTS	All versions, plus listed versions 2+c12+c1ubuntu1.12+c1ubuntu1.22+c1ubuntu1.4	None known
`gcc-10-cross-ports` Ubuntu:20.04:LTS	All versions, plus listed versions 2ubuntu23ubuntu14ubuntu15ubuntu15ubuntu25ubuntu35ubuntu6	None known
`gcc-3.3` Ubuntu:20.04:LTS	All versions, plus listed versions 1:3.3.6ds1-301:3.3.6ds1-30ubuntu2	None known
`gcc-7` Ubuntu:20.04:LTS	All versions, plus listed versions 7.4.0-14ubuntu27.4.0-15ubuntu17.5.0-1ubuntu17.5.0-2ubuntu17.5.0-3ubuntu17.5.0-4ubuntu17.5.0-4ubuntu47.5.0-6ubuntu2	None known
`gcc-8` Ubuntu:20.04:LTS	All versions, plus listed versions 8.3.0-23ubuntu28.3.0-24ubuntu18.3.0-25ubuntu38.3.0-26ubuntu18.3.0-27ubuntu1 Show 6 moreShow less 8.3.0-29ubuntu18.3.0-29ubuntu28.4.0-1ubuntu18.4.0-1ubuntu38.4.0-3ubuntu18.4.0-3ubuntu2	None known
`gcc-8-cross` Ubuntu:20.04:LTS	All versions, plus listed versions 31ubuntu232ubuntu133ubuntu133ubuntu2	None known
`gcc-8-cross-ports` Ubuntu:20.04:LTS	All versions, plus listed versions 24ubuntu226ubuntu127ubuntu127ubuntu2	None known
`gcc-9-cross-mipsen` Ubuntu:20.04:LTS	All versions, plus listed versions 3+c1ubuntu14+c24+c2ubuntu24+c2ubuntu2.14+c2ubuntu2.2	None known
`gcc-9-cross-ports` Ubuntu:20.04:LTS	All versions, plus listed versions 10ubuntu211ubuntu114ubuntu115ubuntu115ubuntu2 Show 5 moreShow less 17ubuntu118ubuntu118ubuntu318ubuntu418ubuntu5	None known
`gcc-arm-none-eabi` Ubuntu:20.04:LTS	All versions, plus listed versions 15:7-2018-q2-615:8-2019-q3-115:9-2019-q4-0ubuntu1	None known
`gcc-avr` Ubuntu:20.04:LTS	All versions, plus listed versions 1:5.4.0+Atmel3.6.1-21:5.4.0+Atmel3.6.1-2build1	None known
`gcc-h8300-hms` Ubuntu:20.04:LTS	All versions, plus listed versions 1:3.4.6+dfsg2-4ubuntu31:3.4.6+dfsg2-4.1	None known
`gcc-m68hc1x` Ubuntu:20.04:LTS	All versions, plus listed versions 1:3.3.6+3.1+dfsg-3.1ubuntu1	None known
`gcc-mingw-w64` Ubuntu:20.04:LTS	All versions, plus listed versions 22~exp1ubuntu222~exp1ubuntu322~exp1ubuntu4	None known
`gcc-msp430` Ubuntu:20.04:LTS	All versions, plus listed versions 4.6.3~mspgcc-20120406-7.1ubuntu3	None known
`gcc-riscv64-unknown-elf` Ubuntu:20.04:LTS	All versions, plus listed versions 8.3.0.2019.08+dfsg-18.3.0.2019.08+dfsg-1build19.3.0-0ubuntu1	None known
`gcc-snapshot` Ubuntu:20.04:LTS	All versions, plus listed versions 1:20191008-1ubuntu11:20191201-0ubuntu11:20200124-1ubuntu11:20200402-0ubuntu11:20200418-1ubuntu1	None known
`gcc-xtensa-lx106` Ubuntu:20.04:LTS	All versions, plus listed versions 3456	None known
`gcc-10` Ubuntu:22.04:LTS	All versions, plus listed versions 10.3.0-11ubuntu110.3.0-12ubuntu110.3.0-13ubuntu110.3.0-14ubuntu110.3.0-15ubuntu1 Show 4 moreShow less 10.4.0-4ubuntu1~22.0410.5.0-1ubuntu1~22.0410.5.0-1ubuntu1~22.04.210.5.0-1ubuntu1~22.04.3	None known
`gcc-10-cross` Ubuntu:22.04:LTS	All versions, plus listed versions 18ubuntu118ubuntu1.118ubuntu1.218ubuntu1.3	None known
`gcc-10-cross-mipsen` Ubuntu:22.04:LTS	All versions, plus listed versions 3+c4ubuntu1	None known
`gcc-10-cross-ports` Ubuntu:22.04:LTS	All versions, plus listed versions 19ubuntu119ubuntu1.119ubuntu1.2	None known
`gcc-11` Ubuntu:22.04:LTS	All versions, plus listed versions 11.2.0-7ubuntu211.2.0-10ubuntu111.2.0-12ubuntu111.2.0-13ubuntu111.2.0-14ubuntu1 Show 8 moreShow less 11.2.0-16ubuntu111.2.0-18ubuntu111.2.0-19ubuntu111.3.0-1ubuntu1~22.0411.3.0-1ubuntu1~22.04.111.4.0-1ubuntu1~22.0411.4.0-1ubuntu1~22.04.211.4.0-1ubuntu1~22.04.3	None known
`gcc-11-cross` Ubuntu:22.04:LTS	All versions, plus listed versions 6ubuntu210ubuntu111ubuntu111ubuntu1.111ubuntu1.211ubuntu1.311ubuntu1.4	None known
`gcc-11-cross-ports` Ubuntu:22.04:LTS	All versions, plus listed versions 4ubuntu28ubuntu18ubuntu1.18ubuntu1.28ubuntu1.3	None known
`gcc-12` Ubuntu:22.04:LTS	All versions, plus listed versions 12-20220222-1ubuntu112-20220302-1ubuntu112-20220313-1ubuntu112-20220319-1ubuntu112.1.0-2ubuntu1~22.0412.3.0-1ubuntu1~22.0412.3.0-1ubuntu1~22.04.212.3.0-1ubuntu1~22.04.3	None known
`gcc-12-cross` Ubuntu:22.04:LTS	All versions, plus listed versions 5ubuntu25ubuntu2.25ubuntu2.45ubuntu2.5	None known
`gcc-12-cross-ports` Ubuntu:22.04:LTS	All versions, plus listed versions 1ubuntu11ubuntu1.11ubuntu1.3	None known
`gcc-3.3` Ubuntu:22.04:LTS	All versions, plus listed versions 1:3.3.6ds1-30ubuntu2	None known
`gcc-9` Ubuntu:22.04:LTS	All versions, plus listed versions 9.4.0-3ubuntu19.4.0-4ubuntu19.4.0-5ubuntu19.5.0-1ubuntu1~22.049.5.0-1ubuntu1~22.04.1	None known
`gcc-9-cross` Ubuntu:22.04:LTS	All versions, plus listed versions 26ubuntu226ubuntu326ubuntu3.126ubuntu3.2	None known
`gcc-9-cross-mipsen` Ubuntu:22.04:LTS	All versions, plus listed versions 4+c2ubuntu6	None known
`gcc-9-cross-ports` Ubuntu:22.04:LTS	All versions, plus listed versions 24ubuntu124ubuntu1.1	None known
`gcc-arm-none-eabi` Ubuntu:22.04:LTS	All versions, plus listed versions 15:9-2019-q4-0ubuntu215:10.3-2021.07-115:10.3-2021.07-215:10.3-2021.07-315:10.3-2021.07-4	None known
`gcc-avr` Ubuntu:22.04:LTS	All versions, plus listed versions 1:5.4.0+Atmel3.6.2-11:5.4.0+Atmel3.6.2-21:5.4.0+Atmel3.6.2-3	None known
`gcc-defaults` Ubuntu:22.04:LTS	All versions, plus listed versions 1.193ubuntu1	None known
`gcc-h8300-hms` Ubuntu:22.04:LTS	All versions, plus listed versions 1:3.4.6+dfsg2-4.11:3.4.6+dfsg2-4.2	None known
`gcc-m68hc1x` Ubuntu:22.04:LTS	All versions, plus listed versions 1:3.3.6+3.1+dfsg-3.1ubuntu1	None known
`gcc16` openSUSE:Tumbleweed From an advisory covering 4 CVEs	before 16.2.1+git9901-1.1	16.2.1+git9901-1.1
`gcc14` openSUSE:Tumbleweed From an advisory covering 5 CVEs	before 14.4.0+git12698-2.1	14.4.0+git12698-2.1
`gcc13` openSUSE:Tumbleweed From an advisory covering 4 CVEs	before 13.5.0+git10516-3.1	13.5.0+git10516-3.1
`gcc15` openSUSE:Tumbleweed From an advisory covering 4 CVEs	before 15.3.0+git11272-4.1	15.3.0+git11272-4.1

What each source reports

CVE List Score used6.5

Gcc: stack overflow in std::bitset on libstdc++

Record: CVE-2026-115455
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Weakness: CWE-787
Updated: 2026-11-13

EUVDEUVD-2026-1137476.5

Record: EUVD-2026-113747
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated: 2026-11-13

GitHub AdvisoriesGHSA-jgwq-jmrj-p95p6.5

A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide...

Record: GHSA-jgwq-jmrj-p95p
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Weakness: CWE-787
Updated: 2026-11-13

NVD6.5

Record: CVE-2026-115455
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Weakness: CWE-787
Updated: 2026-11-13

OSV6.5

Gcc: stack overflow in std::bitset on libstdc++

Record: CVE-2026-115455
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Weakness: CWE-787
Updated: 2026-11-14

OSVDEBIAN-CVE-2026-1154556.5

Record: DEBIAN-CVE-2026-115455
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated: 2026-11-13

Show 19 moreShow less

OSVRHSA-2026:949896.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record: RHSA-2026:94989
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated: 2026-11-13

OSVRHSA-2026:955817.0

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record: RHSA-2026:95581
CVSS 3.1: 7.0 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated: 2026-11-13

OSVRHSA-2026:985266.5

Red Hat Security Advisory: gcc-toolset-15-gcc security update

Record: RHSA-2026:98526
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated: 2026-11-13

OSVRHSA-2026:985346.5

Red Hat Security Advisory: gcc-toolset-16-gcc security update

Record: RHSA-2026:98534
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated: 2026-11-13

OSVRHSA-2026:986336.5

Red Hat Security Advisory: gcc-toolset-15-gcc security update

Record: RHSA-2026:98633
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated: 2026-11-13

OSVRHSA-2026:986406.5

Red Hat Security Advisory: gcc-toolset-16-gcc security update

Record: RHSA-2026:98640
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated: 2026-11-13

OSVRHSA-2026:986486.5

Red Hat Security Advisory: gcc security update

Record: RHSA-2026:98648
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated: 2026-11-13

OSVRHSA-2026:996326.5

Red Hat Security Advisory: gcc-toolset-15-gcc security update

Record: RHSA-2026:99632
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated: 2026-11-13

OSVRLSA-2026:985266.5

Moderate: gcc-toolset-15-gcc security update

The gcc-toolset-15-gcc package contains the GNU Compiler Collection version 15.

Security Fix(es):

gcc: Integer wrap in `std (CVE-2026-114691)
gcc: Confirmed out-of-bounds read/write in libstdc++ parallel `std (CVE-2026-114690)
gcc: Stack overflow in std::bitset on libstdc++ (CVE-2026-115455)
gcc: Out-of-bounds read in std::from_chars (CVE-2026-115456)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:98526
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated: 2026-11-13

OSVRLSA-2026:985346.5

Moderate: gcc-toolset-16-gcc security update

The gcc-toolset-16-gcc13 package contains the GNU Compiler Collection version 16.

Security Fix(es):

gcc: Integer wrap in `std (CVE-2026-114691)
gcc: Confirmed out-of-bounds read/write in libstdc++ parallel `std (CVE-2026-114690)
gcc: Stack overflow in std::bitset on libstdc++ (CVE-2026-115455)
gcc: Out-of-bounds read in std::from_chars (CVE-2026-115456)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:98534
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated: 2026-11-13

OSVRLSA-2026:986336.5

Moderate: gcc-toolset-15-gcc security update

The gcc-toolset-15-gcc package contains the GNU Compiler Collection version 15.

Security Fix(es):

gcc: Integer wrap in `std (CVE-2026-114691)
gcc: Confirmed out-of-bounds read/write in libstdc++ parallel `std (CVE-2026-114690)
gcc: Stack overflow in std::bitset on libstdc++ (CVE-2026-115455)
gcc: Out-of-bounds read in std::from_chars (CVE-2026-115456)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:98633
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated: 2026-11-13

OSVRLSA-2026:986486.5

Moderate: gcc security update

The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries.

Security Fix(es):

gcc: Integer wrap in `std (CVE-2026-114691)
gcc: Confirmed out-of-bounds read/write in libstdc++ parallel `std (CVE-2026-114690)
gcc: Stack overflow in std::bitset on libstdc++ (CVE-2026-115455)
gcc: Out-of-bounds read in std::from_chars (CVE-2026-115456)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:98648
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated: 2026-11-13

OSVRLSA-2026:996326.5

Moderate: gcc-toolset-15-gcc security update

The gcc-toolset-15-gcc package contains the GNU Compiler Collection version 15.

Security Fix(es):

gcc: Integer wrap in `std (CVE-2026-114691)
gcc: Confirmed out-of-bounds read/write in libstdc++ parallel `std (CVE-2026-114690)
gcc: Stack overflow in std::bitset on libstdc++ (CVE-2026-115455)
gcc: Out-of-bounds read in std::from_chars (CVE-2026-115456)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:99632
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated: 2026-11-13

OSVUBUNTU-CVE-2026-1154556.5

Record: UBUNTU-CVE-2026-115455
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated: 2026-11-05

OSVAZL-112433No score

CVE-2026-115455 affecting package gcc 13.2.0-7

Record: AZL-112433
Updated: 2026-11-05

OSVopenSUSE-SU-2026:12482-1No score

cpp16-16.2.1+git9901-1.1 on GA media

These are all security issues fixed in the cpp16-16.2.1+git9901-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12482-1
Updated: 2026-11-09

OSVopenSUSE-SU-2026:12496-1No score

cpp14-14.4.0+git12698-2.1 on GA media

These are all security issues fixed in the cpp14-14.4.0+git12698-2.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12496-1
Updated: 2026-11-10

OSVopenSUSE-SU-2026:12510-1No score

cpp13-13.5.0+git10516-3.1 on GA media

These are all security issues fixed in the cpp13-13.5.0+git10516-3.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12510-1
Updated: 2026-11-11

OSVopenSUSE-SU-2026:12511-1No score

cpp15-15.3.0+git11272-4.1 on GA media

These are all security issues fixed in the cpp15-15.3.0+git11272-4.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12511-1
Updated: 2026-11-11

History

History
Recorded	Changed	Sources
Nov 13, 2026	affected, aliases, references	OSV
Nov 13, 2026	affected, affected_more, aliases, references	OSV
Nov 13, 2026	affected, facts	OSV
Nov 13, 2026	affected, aliases, references	EUVD, GitHub Advisories, NVD, OSV
Nov 13, 2026	references	CVE List
Nov 13, 2026	references	OSV
Nov 12, 2026	references	CVE List, EUVD, GitHub Advisories, NVD
Nov 12, 2026	references	OSV
Nov 12, 2026	affected	OSV
Nov 12, 2026	references	GitHub Advisories, OSV

Show 17 moreShow less

History
Recorded	Changed	Sources
Nov 11, 2026	references	CVE List, NVD
Nov 11, 2026	references	EUVD
Nov 11, 2026	affected, aliases	GitHub Advisories, NVD, OSV
Nov 11, 2026	references	CVE List
Nov 11, 2026	references	EUVD, NVD
Nov 11, 2026	references	CVE List, EUVD, NVD
Nov 11, 2026	references	CVE List
Nov 11, 2026	references	CVE List, GitHub Advisories
Nov 11, 2026	references	EUVD
Nov 10, 2026	affected, aliases, references	OSV
Nov 9, 2026	affected, aliases, references	OSV
Nov 7, 2026	affected	CVE List, EUVD, NVD, OSV
Nov 5, 2026	published	OSV
Nov 5, 2026	references	EUVD, GitHub Advisories, NVD, OSV
Nov 4, 2026	references	CVE List, EUVD, NVD
Nov 3, 2026	facts	CVE List
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 49 moreShow less

This page doesn't list everything

Left out here: 287 package rows and 2 versions. The JSON record has them. Also not on the record: 117 package claims. ID and package lookups still check them.