CVE and update status of the FreeBSD ports tree3,298 unaddressed CVEs in 671 portsAll times are CET
Port details

lang/gcc16-devel 16.2.1.s20261003

GNU Compiler Collection 16

Port info

Maintainer
salvadore@FreeBSD.org
Packages
latest: 16.2.1.s20261003
Upstream
up to date
Last update
to 16.2.1.s20261003 · 23544948cb
Quarterly
2026Q4: 16.2.1.s20260815
WWW
https://gcc.gnu.org
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install gcc16-devel
installs 16.2.1.s20261003 from latest; from quarterly (2026Q4) 16.2.1.s20260815
Port
# cd /usr/ports/lang/gcc16-devel && make install clean
# make -C /usr/ports/lang/gcc16-devel config  # change options first
Size
108 MiB download · 406 MiB installed
Depends on
devel/binutils 2.44,1, math/gmp 6.3.0, math/mpc 1.4.1, math/mpfr 4.2.2,1, print/indexinfo 0.3.1_1
License
GPLv3 and GPLv3RLE
Options
2 of 4 on in the package: MULTILIB STANDARD_BOOTSTRAP
Show the 2 options that are off
GRAPHITE LTO_BOOTSTRAP
pkg-message
Shown after installing
To ensure binaries built with this toolchain find appropriate versions
of the necessary run-time libraries, you may want to link using

  -Wl,-rpath=/usr/local/lib/gcc16

For ports leveraging USE_GCC, USES=compiler, or USES=fortran this happens
transparently.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 1616.2.1.s2026100316.2.1.s20261003–
FreeBSD 1516.2.1.s2026100316.2.1.s20261003–
FreeBSD 1416.2.1.s2026100316.2.1.s2026092616.2.1.s20261003

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 1516.2.1.s2026081516.2.1.s20260815–
FreeBSD 1416.2.1.s2026081516.2.1.s2026081516.2.1.s20260815

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 16.2.1.s20261003.

Not counted (1)

CVEs that match this port only loosely: inherited from the whole project, or with versions that cannot be compared. What does this mean?

1 with versions that cannot be compared
The CVE record gives dates or the port uses snapshot versions (or the other way round), so the version of this port cannot be placed in the affected range.
CVECVSSPublishedDescription
CVE-2023-40394.82023-09-13**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamic…

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (67)

Lorenzo Salvadore (salvadore) · 16.0.0.s20250810
lang/gcc16-devel: Update to 16.0.0.s20250810

Also removes patch files/patch-libgcc_enable-execute-stack-mprotect.c,
obsolete after upstream commit a107b01da42b2f2303ffe53df5ea4a796f40597d.
fc325a56b6
Lorenzo Salvadore (salvadore) · 16.0.0.s20250803
lang/gcc16-devel: Update to 16.0.0.s20250803
3389ab49ce
Lorenzo Salvadore (salvadore) · 16.0.0.s20250727
lang/gcc16-devel: Update to 16.0.0.s20250727
f03dd3069b
Lorenzo Salvadore (salvadore) · 16.0.0.s20250720
lang/gcc16-devel: Update to 16.0.0.s20250720
e2c0179351
Lorenzo Salvadore (salvadore) · 16.0.0.s20250713
lang/gcc16-devel: Update to 16.0.0.s20250713
fffe902049
Lorenzo Salvadore (salvadore) · 16.0.0.s20250706
lang/gcc16-devel: Update to 16.0.0.s20250706
e90245133b
Lorenzo Salvadore (salvadore) · 16.0.0.s20250629
lang/gcc16-devel: Update to 16.0.0.s20250629
79d435672b
Lorenzo Salvadore (salvadore) · 16.0.0.s20250622
lang/gcc16-devel: Update to 16.0.0.s20250622
786d21cad9
Lorenzo Salvadore (salvadore) · 16.0.0.s20250608
lang/gcc16-devel: Update to 16.0.0.s20250608
1ca9fc79a7
Lorenzo Salvadore (salvadore) · 16.0.0.s20250601
lang/gcc16-devel: Update to 16.0.0.s20250601
1ae1fd2cee
Lorenzo Salvadore (salvadore) · 16.0.0.s20250525
lang/gcc16-devel: Update to 16.0.0.s20250525
a292fb99a6
Lorenzo Salvadore (salvadore) · 16.0.0.s20250518
lang/gcc16-devel: Update to 16.0.0.s20250518
94bd7be35c
Lorenzo Salvadore (salvadore) · 16.0.0.s20250511_1
lang/gcc16-devel: Unbreak on aarch64

FreeBSD defines ElfW(x) to translate Linux's convention to FreeBSD's convention.
GCC defines ElfW to convert its convention to FreeBSD's convention. This patch
removes the conversion defined by GCC so that the FreeBSD conversion only is
applied.

Co-authored-by: Mark Millard <marklmi26-fbsd@yahoo.com>

PR:             282797
Reported by:    John F. Carr <jfc@mit.edu>
Email Thread:   https://lists.freebsd.org/archives/freebsd-toolchain/2025-May/002282.html
5926446a49
Lorenzo Salvadore (salvadore) · 16.0.0.s20250511
lang/gcc16-devel: Update to 16.0.0.s20250511
e0d976d380
Lorenzo Salvadore (salvadore) · 16.0.0.s20250504
lang/gcc16-devel: Update to 16.0.0.s20250504
0066578679
Lorenzo Salvadore (salvadore) · 16.0.0.s20250427
lang/gcc16-devel: Fix PORTVERSION

I had committed the new port with the wrong PORTVERSION value. Fix it.

Adding PORTEPOCH should not be needed because the wrong PORTVERSION
value causes package build to fail, so no package with that PORTVERSION
can exist.
dd4bfcad0b
Lorenzo Salvadore (salvadore) · 16.0.1.s20250427
lang/gcc16-devel: Add port

GCC, the GNU Compiler Collection, supports a number of languages.
This port installs the C, C++, and Fortran front ends as gcc16, g++16,
and gfortran16, respectively.

This is the first snapshot from trunk with the GCC 16 designation. It
largely is a copy of lang/gcc15-devel.

Note: files/patch-libgcc_unwind.inc will get obsolete once all supported
FreeBSD releases include commit
22e564c74eb20e14bd93fd9fdde20e38a29cfcf1. [1]

PR:             285711 [1]
3e400b40c3