CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

lang/gcc16-devel 16.2.1.s20261003

GNU Compiler Collection 16

Port info

Maintainer
salvadore@FreeBSD.org
Packages
latest: 16.2.1.s20261003
Upstream
up to date
Last update
to 16.2.1.s20261003 · 945282c96b
Quarterly
2026Q4: 16.2.1.s20260815
WWW
https://gcc.gnu.org
Links
cgit · VuXML

Install

Package
# pkg install gcc16-devel
installs 16.2.1.s20261003 from latest; from quarterly (2026Q4) 16.2.1.s20260815
Port
# cd /usr/ports/lang/gcc16-devel && make install clean
# make -C /usr/ports/lang/gcc16-devel config  # change options first
Size
108 MiB download · 406 MiB installed
Depends on
devel/binutils 2.44,1, math/gmp 6.3.0, math/mpc 1.4.1, math/mpfr 4.2.2,1, print/indexinfo 0.3.1_1
License
GPLv3 and GPLv3RLE
Options
2 of 4 on in the package: MULTILIB STANDARD_BOOTSTRAP
Show the 2 options that are off
GRAPHITE LTO_BOOTSTRAP
pkg-message
Shown after installing
To ensure binaries built with this toolchain find appropriate versions
of the necessary run-time libraries, you may want to link using

  -Wl,-rpath=/usr/local/lib/gcc16

For ports leveraging USE_GCC, USES=compiler, or USES=fortran this happens
transparently.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 1616.2.1.s2026100316.2.1.s20261003–
FreeBSD 1516.2.1.s2026100316.2.1.s20261003–
FreeBSD 1416.2.1.s2026100316.2.1.s2026092616.2.1.s20261003

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 1516.2.1.s2026081516.2.1.s20260815–
FreeBSD 1416.2.1.s2026081516.2.1.s2026081516.2.1.s20260815

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 16.2.1.s20261003.

Not counted (1)

CVEs that match this port only loosely: inherited from the whole project, or with versions that cannot be compared. What does this mean?

1 with versions that cannot be compared
The CVE record gives dates or the port uses snapshot versions (or the other way round), so the version of this port cannot be placed in the affected range.
CVECVSSPublishedDescription
CVE-2023-40394.82023-09-13**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamic…

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (66)

Lorenzo Salvadore (salvadore) · 16.2.1.s20261003
lang/gcc16-devel: Update to 16.2.1.s20261003
945282c96b
Lorenzo Salvadore (salvadore) · 16.2.1.s20260926
lang/gcc16-devel: Update to 16.2.1.s20260926
10575279d6
Dimitry Andric (dim) · 16.2.1.s20260815 MFH 2026Q3 ✓
lang/gcc16-devel: fix build after base d08296c7ab0d

After base d08296c7ab0d7bb259bf7b8cdf9ffb819c1929ab ("libc: Implement
qualifier-preserving standard library functions"), lang/gcc16-devel
fails to build with an error like:

  In file included from /wrkdirs/usr/ports/lang/gcc16-devel/work/.build/gcc/include-fixed/stdio.h:52,
                   from cp-demangle.c:109:
  /wrkdirs/usr/ports/lang/gcc16-devel/work/gcc-16-20260725/libstdc++-v3/../include/libiberty.h:225:14: error: expected identifier or '(' before '_Generic'
    225 | extern void *memrchr(const void *, int, size_t);
        |              ^~~~~~~

This is because memrchr is now a macro, similar to the other functions
in <string.h>, and libiberty.h attempts to incorrectly redeclare it.

In turn, cp-demangle.c includes libiberty.h, but does not include the
config.h generated for libiberty.h, instead using the config.h generated
for libstdc++.

The problem is really with the way upstream creates its config.h
headers: they should either make libiberty.h automatically include its
own config.h file, or rename that one to libiberty-config.h, so it can
be included at the same time as the libstdc++ config.h header.

The easiest way to fix it is to add a '!defined(__FreeBSD__)'
conditional to the #if statement that attempts to declare the
incompatible memrchr.

PR:		297628
Approved by:	salvadore (maintainer)
MFH:		2026Q3
4e5276e134
Lorenzo Salvadore (salvadore) · 16.2.1.s20260815
lang/gcc16-devel: Update to 16.2.1.s20260815
6c05de92ea
Lorenzo Salvadore (salvadore) · 16.1.1.s20260725
lang/gcc16-devel: Update to 16.1.1.s20260725
7d59d52c7a
Lorenzo Salvadore (salvadore) · 16.1.1.s20260718
lang/gcc16-devel: Update to 16.1.1.s20260718
86d0b18e4c
Lorenzo Salvadore (salvadore) · 16.1.1.s20260711
lang/gcc16-devel: Update to 16.1.1.s20260711
29cf845ac0
Lorenzo Salvadore (salvadore) · 16.1.1.s20260704
lang/gcc16-devel: Update to 16.1.1.s20260704
40c850c3c4
Lorenzo Salvadore (salvadore) · 16.1.1.s20260627
lang/gcc16-devel: Update to 16.1.1.s20260627
54414a08b5
Lorenzo Salvadore (salvadore) · 16.1.1.s20260620
lang/gcc16-devel: Update to 16.1.1.s20260620
8ab95cd8b1
Lorenzo Salvadore (salvadore) · 16.1.1.s20260613
lang/gcc16-devel: Update to 16.1.1.s20260613
36d27a6930
Lorenzo Salvadore (salvadore) · 16.1.1.s20260606
lang/gcc16-devel: Fix build on arm64

GCC upstream has removed conditional definitions for some constants,
defining them directly with the same values used on Linux. However,
FreeBSD values for the same constants are different. Then revert
upstream commit.

Co-authored-by: Mark Millard <marklmi26-fbsd@yahoo.com>
PR:		294062
Reported by:	Luke Yasuda <jing@jing.rocks>
8195f25124
Lorenzo Salvadore (salvadore) · 16.1.1.s20260606
lang/gcc16-devel: Update to 16.1.1.s20260606
66d76517ca
Lorenzo Salvadore (salvadore) · 16.1.1.s20260530
lang/gcc16-devel: Update to 16.1.1.s20260530
11438e21aa
Lorenzo Salvadore (salvadore) · 16.1.1.s20260523
lang/gcc16-devel: Update to 16.1.1.s20260523
2137c12e35
Lorenzo Salvadore (salvadore) · 16.1.1.s20260516
lang/gcc16-devel: Update to 16.1.1.s20260516
266fb2512b
Lorenzo Salvadore (salvadore) · 16.1.1.s20260509
lang/gcc16-devel: Update to 16.1.1.s20260509
a7e0e1651c
Lorenzo Salvadore (salvadore) · 16.1.1.s20260502
lang/gcc16-devel: Update to 16.0.1.s20260502
c3d3e158f7
Lorenzo Salvadore (salvadore) · 16.0.1.s20260425
lang/gcc16-devel: Update to 16.0.1.s20260425
92da021e9a
Lorenzo Salvadore (salvadore) · 16.0.1.s20260419
lang/gcc16-devel: Update to 16.0.1.s20260419
b13cf2c8e1
Lorenzo Salvadore (salvadore) · 16.0.1.s20260412
lang/gcc16-devel: Update to 16.0.1.s20260412
bdc1f380bd
Lorenzo Salvadore (salvadore) · 16.0.1.s20260405
lang/gcc16-devel: Update to 16.0.1.s20260405
663b00073f
Lorenzo Salvadore (salvadore) · 16.0.1.s20260329
lang/gcc16-devel: Update to 16.0.1.s20260329
da216a9fe9
Lorenzo Salvadore (salvadore) · 16.0.1.s20260322
lang/gcc16-devel: Update to 16.0.1.s20260322
afb2e0bf29
Lorenzo Salvadore (salvadore) · 16.0.1.s20260315
lang/gcc16-devel: Update to 16.0.1.s20260315
e5e62a8253
Lorenzo Salvadore (salvadore) · 16.0.1.s20260308
lang/gcc16-devel: Update to 16.0.1.s20260308
e06f655eef
Lorenzo Salvadore (salvadore) · 16.0.1.s20260301
lang/gcc16-devel: Update to 16.0.1.s20260301
66322c7422
Lorenzo Salvadore (salvadore) · 16.0.1.s20260222
lang/gcc16-devel: Update to 16.0.1.s20260222
b218a36fa7
Lorenzo Salvadore (salvadore) · 16.0.1.s20260215
lang/gcc16-devel: Update to 16.0.1.s20260215

Also revert a patch from commit
17551496e5f93f340b66b8a495e57e11baa488dd, upstreamed with upstream
commit
1ce1870fbe0b141d38e02b7ac6a41d8d36b73b30.

Upstream PR: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=123366
Upstream commit:
https://gcc.gnu.org/cgit/gcc/commit/?id=1ce1870fbe0b141d38e02b7ac6a41d8d36b73b30
65f3ac6a3e
Lorenzo Salvadore (salvadore) · 16.0.1.s20260208
lang/gcc16-devel: Update to 16.0.1.s20260208
1ee4c8137a
Lorenzo Salvadore (salvadore) · 16.0.1.s20260201
lang/gcc16-devel: Update to 16.0.1.s20260201

Also introduces a fix for upstream bug
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=123366, authored by
Mark Millard <marklmi@yahoo.com>.

Co-authored-by: Mark Millard <marklmi@yahoo.com>
17551496e5
Lorenzo Salvadore (salvadore) · 16.0.0.s20251123
lang/gcc16-devel: Update to 16.0.0.s20251123
50a6459b05
Lorenzo Salvadore (salvadore) · 16.0.0.s20251116
lang/gcc16-devel: Update to 16.0.0.s20251116
fe451464c6
Lorenzo Salvadore (salvadore) · 16.0.0.s20251109
lang/gcc16-devel: Update to 16.0.0.s20251109
d56654ff8f
Lorenzo Salvadore (salvadore) · 16.0.0.s20251102
lang/gcc16-devel: Update to 16.0.0.s20251102
b102b3d5e1
Lorenzo Salvadore (salvadore) · 16.0.0.s20251026
lang/gcc16-devel: Update to 16.0.0.s20251026
f909031746
Lorenzo Salvadore (salvadore) · 16.0.0.s20251019
lang/gcc16-devel: Update to 16.0.0.s20251019
9017cdd4e6
Lorenzo Salvadore (salvadore) · 16.0.0.s20251012
lang/gcc16-devel: Update to 16.0.0.s20251012
8152a30af6
Lorenzo Salvadore (salvadore) · 16.0.0.s20251005
lang/gcc16-devel: Update to 16.0.0.s20251005
9464e57a8b
Lorenzo Salvadore (salvadore) · 16.0.0.s20250928
lang/gcc16-devel: Update to 16.0.0.s20250928
17c8b37a72
Lorenzo Salvadore (salvadore) · 16.0.0.s20250921
lang/gcc16-devel: Update to 16.0.0.s20250921
919941ba1e
Robert Clausecker (fuz) · 16.0.0.s20250914
lang/gcc16-devel: fix build on armv7

Some type confusion issues.

Approved by:	portmgr (build fix blanket)
MFH:		2025Q3
a3f86bfa89
Lorenzo Salvadore (salvadore) · 16.0.0.s20250914
lang/gcc16-devel: Update to 16.0.0.s20250914
58f15d8c65
Lorenzo Salvadore (salvadore) · 16.0.0.s20250907
lang/gcc16-devel: Update to 16.0.0.s20250907
97ce6e2eee
Lorenzo Salvadore (salvadore) · 16.0.0.s20250831
lang/gcc16-devel: Update to 16.0.0.s20250831
b5349f8dd9
Lorenzo Salvadore (salvadore) · 16.0.0.s20250824_1
lang/gcc16-devel: Allow build without bootstrap

Enabling a boostrap option was experimentally enforced on some GCC
devel ports, as building GCC on FreeBSD with FreeBSD's default compiler
(clang) is not fully supported. Stop enforcing it: many users of
production ports actually disable both bootstrap options, so it makes
sense to attempt to keep allowing no-bootstrap builds.

However, since building jit without bootstrap does not work, we add jit
to the enabled languages only if a bootstrap option has been selected [1].

See commit 5ee63cc45413954077b2b0c0546b8342585b41ba and e-mail
https://lists.freebsd.org/archives/dev-commits-ports-main/2025-August/160223.html
for more details.

Reported by:	vishwin [1]
6eea282a6d
Lorenzo Salvadore (salvadore) · 16.0.0.s20250824
lang/gcc16-devel: Update to 16.0.0.s20250824
e3e80eda6b
Lorenzo Salvadore (salvadore) · 16.0.0.s20250817
lang/gcc16-devel: Update to 16.0.0.s20250817
4e537594bf
Piotr Kubaj (pkubaj) · 16.0.0.s20250810_1
lang/gcc1{5,6}{,-devel}: drop USE_GCC on powerpc64*

Builds fine.
5e3e3ce9d0
Lorenzo Salvadore (salvadore) · 16.0.0.s20250810
lang/gcc16-devel: Update to 16.0.0.s20250810

Also removes patch files/patch-libgcc_enable-execute-stack-mprotect.c,
obsolete after upstream commit a107b01da42b2f2303ffe53df5ea4a796f40597d.
fc325a56b6