Vulnerability in llvm-toolset:rhel8
Summary
ALEA-2021:4233: llvm-toolset:rhel8 bug fix and enhancement update. Affects compiler-rt versions < 12.0.1-1.module_el8.4.0+2600+cefb5d4c. Fixed in 12.0.1-1.module_el8.4.0+2600+cefb5d4c. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
LLVM Toolset is a compiler infrastructure framework that includes the Clang compiler, the LLDB debugger, and other code analysis tools. It is used for compiling C and C++ languages. The llvm-toolset package in AlmaLinux:8 is affected by a vulnerability.
Vulnerability Detail
The vulnerability in llvm-toolset:rhel8 could allow an attacker to execute arbitrary code or cause a denial of service. The specific technical details of the vulnerability are not provided in the given information.
How To Fix
Minimum fixed version
12.0.1-1.module_el8.4.0+2600+cefb5d4c
This is the first release that contains the fix.
sudo dnf update compiler-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No workaround is mentioned in the provided information.
Conclusion
The llvm-toolset package in AlmaLinux:8 is affected by a vulnerability that could allow arbitrary code execution or denial of service. It is recommended to update the package to the latest version to fix the vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for compiler-rt →
FAQ
LLVM Toolset is a compiler infrastructure framework that provides the LLVM compiler, Clang compiler, LLDB debugger, and other code analysis tools for C and C++ languages.
The impact of this vulnerability could be the execution of arbitrary code or a denial of service.
You can fix the vulnerability by updating the llvm-toolset package to version 12.0.1-1.module_el8.4.0+2600+cefb5d4c or later.
No workaround is mentioned in the provided information.
You can find more information about this vulnerability in the AlmaLinux Release Notes linked in the References section.
