Low: mingw-gcc security and bug fix update
Summary
ALSA-2022:8415: Low: mingw-gcc security and bug fix update. Affects mingw32-cpp versions < 12.0.1-11.2.el9. Fixed in 12.0.1-11.2.el9. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries.
Vulnerability Detail
The mingw-gcc package is affected by a low-severity vulnerability (CVE-2021-46195) that allows uncontrolled recursion in libiberty/rust-demangle.c. This vulnerability could potentially be exploited by an attacker to cause a denial of service or execute arbitrary code.
How To Fix
Minimum fixed version
12.0.1-11.2.el9
This is the first release that contains the fix.
sudo dnf update mingw32-cppTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
In conclusion, the mingw-gcc package is affected by a low-severity vulnerability that could potentially allow an attacker to cause a denial of service or execute arbitrary code. It is recommended to update the package to the latest version to mitigate this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for mingw32-cpp →
FAQ
This vulnerability could allow an attacker to cause a denial of service or execute arbitrary code.
There are no known exploits for this vulnerability at the moment.
No specific conditions are required for this vulnerability to be exploited.
There is no known workaround for this vulnerability. It is recommended to update the mingw-gcc package to the latest version.
You can find more information about this vulnerability in the CVE page listed in the References section.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
