ALSA-2021:4743
- Source
- https://errata.almalinux.org/8/ALSA-2021-4743.html
- Import Source
- https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4743.json
- JSON Data
- https://api.osv.dev/v1/vulns/ALSA-2021:4743
- Related
- Published
- 2021-11-18T16:29:15Z
- Modified
- 2021-11-21T06:08:08Z
- Summary
- Moderate: llvm-toolset:rhel8 security update
- Details
-
LLVM Toolset provides the LLVM compiler infrastructure framework, the Clang compiler for the C and C++ languages, the LLDB debugger, and related tools for code analysis.
Security Fix(es):
- Developer environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks (CVE-2021-42574)
The following changes were introduced in clang in order to facilitate detection of BiDi Unicode characters:
clang-tidy now finds identifiers that contain Unicode characters with right-to-left direction, which can be confusing as they may change the understanding of a whole statement.
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- References
Affected packages
AlmaLinux:8 / clang
Package
- Name
- clang
AlmaLinux:8 / clang-analyzer
Package
- Name
- clang-analyzer
AlmaLinux:8 / clang-devel
Package
- Name
- clang-devel
AlmaLinux:8 / clang-libs
Package
- Name
- clang-libs
AlmaLinux:8 / clang-resource-filesystem
Package
- Name
- clang-resource-filesystem
AlmaLinux:8 / clang-tools-extra
Package
- Name
- clang-tools-extra
AlmaLinux:8 / compiler-rt
Package
- Name
- compiler-rt
AlmaLinux:8 / git-clang-format
Package
- Name
- git-clang-format
AlmaLinux:8 / libomp
Package
- Name
- libomp
AlmaLinux:8 / libomp-devel
Package
- Name
- libomp-devel
AlmaLinux:8 / libomp-test
Package
- Name
- libomp-test
AlmaLinux:8 / lld
Package
- Name
- lld
AlmaLinux:8 / lld-devel
Package
- Name
- lld-devel
AlmaLinux:8 / lld-libs
Package
- Name
- lld-libs
AlmaLinux:8 / lld-test
Package
- Name
- lld-test
AlmaLinux:8 / lldb
Package
- Name
- lldb
AlmaLinux:8 / lldb-devel
Package
- Name
- lldb-devel
AlmaLinux:8 / llvm
Package
- Name
- llvm
AlmaLinux:8 / llvm-devel
Package
- Name
- llvm-devel
AlmaLinux:8 / llvm-doc
Package
- Name
- llvm-doc
AlmaLinux:8 / llvm-googletest
Package
- Name
- llvm-googletest
AlmaLinux:8 / llvm-libs
Package
- Name
- llvm-libs
AlmaLinux:8 / llvm-static
Package
- Name
- llvm-static
AlmaLinux:8 / llvm-test
Package
- Name
- llvm-test
AlmaLinux:8 / llvm-toolset
Package
- Name
- llvm-toolset
AlmaLinux:8 / python3-clang
Package
- Name
- python3-clang
AlmaLinux:8 / python3-lit
Package
- Name
- python3-lit