[El-errata] ELSA-2025-1309 Moderate: Oracle Linux 9 gcc-toolset-13-gcc security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2025-1309

http://linux.oracle.com/errata/ELSA-2025-1309.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
gcc-toolset-13-gcc-13.3.1-2.2.0.1.el9_5.x86_64.rpm
gcc-toolset-13-gcc-c++-13.3.1-2.2.0.1.el9_5.x86_64.rpm
gcc-toolset-13-gcc-gfortran-13.3.1-2.2.0.1.el9_5.x86_64.rpm
gcc-toolset-13-gcc-plugin-annobin-13.3.1-2.2.0.1.el9_5.x86_64.rpm
gcc-toolset-13-gcc-plugin-devel-13.3.1-2.2.0.1.el9_5.i686.rpm
gcc-toolset-13-gcc-plugin-devel-13.3.1-2.2.0.1.el9_5.x86_64.rpm
gcc-toolset-13-libasan-devel-13.3.1-2.2.0.1.el9_5.i686.rpm
gcc-toolset-13-libasan-devel-13.3.1-2.2.0.1.el9_5.x86_64.rpm
gcc-toolset-13-libatomic-devel-13.3.1-2.2.0.1.el9_5.i686.rpm
gcc-toolset-13-libatomic-devel-13.3.1-2.2.0.1.el9_5.x86_64.rpm
gcc-toolset-13-libgccjit-13.3.1-2.2.0.1.el9_5.i686.rpm
gcc-toolset-13-libgccjit-13.3.1-2.2.0.1.el9_5.x86_64.rpm
gcc-toolset-13-libgccjit-devel-13.3.1-2.2.0.1.el9_5.i686.rpm
gcc-toolset-13-libgccjit-devel-13.3.1-2.2.0.1.el9_5.x86_64.rpm
gcc-toolset-13-libitm-devel-13.3.1-2.2.0.1.el9_5.i686.rpm
gcc-toolset-13-libitm-devel-13.3.1-2.2.0.1.el9_5.x86_64.rpm
gcc-toolset-13-liblsan-devel-13.3.1-2.2.0.1.el9_5.x86_64.rpm
gcc-toolset-13-libquadmath-devel-13.3.1-2.2.0.1.el9_5.i686.rpm
gcc-toolset-13-libquadmath-devel-13.3.1-2.2.0.1.el9_5.x86_64.rpm
gcc-toolset-13-libstdc++-devel-13.3.1-2.2.0.1.el9_5.i686.rpm
gcc-toolset-13-libstdc++-devel-13.3.1-2.2.0.1.el9_5.x86_64.rpm
gcc-toolset-13-libstdc++-docs-13.3.1-2.2.0.1.el9_5.x86_64.rpm
gcc-toolset-13-libtsan-devel-13.3.1-2.2.0.1.el9_5.x86_64.rpm
gcc-toolset-13-libubsan-devel-13.3.1-2.2.0.1.el9_5.i686.rpm
gcc-toolset-13-libubsan-devel-13.3.1-2.2.0.1.el9_5.x86_64.rpm
gcc-toolset-13-offload-nvptx-13.3.1-2.2.0.1.el9_5.x86_64.rpm
libasan8-13.3.1-2.2.0.1.el9_5.i686.rpm
libasan8-13.3.1-2.2.0.1.el9_5.x86_64.rpm
libtsan2-13.3.1-2.2.0.1.el9_5.x86_64.rpm

aarch64:
gcc-toolset-13-gcc-13.3.1-2.2.0.1.el9_5.aarch64.rpm
gcc-toolset-13-gcc-c++-13.3.1-2.2.0.1.el9_5.aarch64.rpm
gcc-toolset-13-gcc-gfortran-13.3.1-2.2.0.1.el9_5.aarch64.rpm
gcc-toolset-13-gcc-plugin-annobin-13.3.1-2.2.0.1.el9_5.aarch64.rpm
gcc-toolset-13-gcc-plugin-devel-13.3.1-2.2.0.1.el9_5.aarch64.rpm
gcc-toolset-13-libasan-devel-13.3.1-2.2.0.1.el9_5.aarch64.rpm
gcc-toolset-13-libatomic-devel-13.3.1-2.2.0.1.el9_5.aarch64.rpm
gcc-toolset-13-libgccjit-13.3.1-2.2.0.1.el9_5.aarch64.rpm
gcc-toolset-13-libgccjit-devel-13.3.1-2.2.0.1.el9_5.aarch64.rpm
gcc-toolset-13-libitm-devel-13.3.1-2.2.0.1.el9_5.aarch64.rpm
gcc-toolset-13-liblsan-devel-13.3.1-2.2.0.1.el9_5.aarch64.rpm
gcc-toolset-13-libstdc++-devel-13.3.1-2.2.0.1.el9_5.aarch64.rpm
gcc-toolset-13-libstdc++-docs-13.3.1-2.2.0.1.el9_5.aarch64.rpm
gcc-toolset-13-libtsan-devel-13.3.1-2.2.0.1.el9_5.aarch64.rpm
gcc-toolset-13-libubsan-devel-13.3.1-2.2.0.1.el9_5.aarch64.rpm
libasan8-13.3.1-2.2.0.1.el9_5.aarch64.rpm
libtsan2-13.3.1-2.2.0.1.el9_5.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//gcc-toolset-13-gcc-13.3.1-2.2.0.1.el9_5.src.rpm

Related CVEs:

CVE-2020-11023




Description of changes:

[13.3.1-2.2.0.1]
- Merge Oracle patches to 13.3.1-2.2.
  Oracle history:
  November-20-2024 Qing Zhao <qing.zhao at oracle.com> 13.3.1-2.1.0.1
  - gfortran needs install-info at installation time.
    Orabug: 36472775

[13.3.1-2.2]
- disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78378)