ESSA-2025:2446: Moderate: SUSE Liberty Linux Moderate: gcc-toolset-14-gcc security update

[Update Advisories for SUSE Liberty Linux]

# Moderate: gcc-toolset-14-gcc security update

Announcement ID: ESSA-2025:2446
Rating: Moderate

Cross-References:

  * CVE-2020-11023



CVSS scores:

  * CVE-2020-11023 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected Products:

  * SUSE Liberty Linux 8


An update that solves one vulnerability can now be installed.

## Description:

The gcc-toolset-14-gcc package contains the GNU Compiler Collection version 14.Security Fix(es): jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods (CVE-2020-11023) 
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

## Package List:

  * SUSE Liberty Linux 8:
    * gcc-toolset-14-gcc 14.2.1-7.1.el8_10.1
    * gcc-toolset-14-gcc-c++ 14.2.1-7.1.el8_10.1
    * gcc-toolset-14-gcc-gfortran 14.2.1-7.1.el8_10.1
    * gcc-toolset-14-gcc-plugin-annobin 14.2.1-7.1.el8_10.1
    * gcc-toolset-14-gcc-plugin-devel 14.2.1-7.1.el8_10.1
    * gcc-toolset-14-libasan-devel 14.2.1-7.1.el8_10.1
    * gcc-toolset-14-libatomic-devel 14.2.1-7.1.el8_10.1
    * gcc-toolset-14-libgccjit 14.2.1-7.1.el8_10.1
    * gcc-toolset-14-libgccjit-devel 14.2.1-7.1.el8_10.1
    * gcc-toolset-14-libhwasan-devel 14.2.1-7.1.el8_10.1
    * gcc-toolset-14-libitm-devel 14.2.1-7.1.el8_10.1
    * gcc-toolset-14-liblsan-devel 14.2.1-7.1.el8_10.1
    * gcc-toolset-14-libquadmath-devel 14.2.1-7.1.el8_10.1
    * gcc-toolset-14-libstdc++-devel 14.2.1-7.1.el8_10.1
    * gcc-toolset-14-libstdc++-docs 14.2.1-7.1.el8_10.1
    * gcc-toolset-14-libtsan-devel 14.2.1-7.1.el8_10.1
    * gcc-toolset-14-libubsan-devel 14.2.1-7.1.el8_10.1
    * gcc-toolset-14-offload-nvptx 14.2.1-7.1.el8_10.1
    * libasan8 14.2.1-7.1.el8_10.1
    * libhwasan 14.2.1-7.1.el8_10.1
    * libtsan2 14.2.1-7.1.el8_10.1

## References:

  * https://www.suse.com/security/cve/CVE-2020-11023.html