CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

lang/gcc17-devel 17.0.0.s20261004

GNU Compiler Collection 17

Port info

Maintainer
salvadore@FreeBSD.org
Packages
latest: 17.0.0.s20261004
Upstream
up to date
Last update
to 17.0.0.s20261004 · 23544948cb
Quarterly
2026Q4: 17.0.0.s20260802
WWW
https://gcc.gnu.org
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install gcc17-devel
installs 17.0.0.s20261004 from latest; from quarterly (2026Q4) 17.0.0.s20260802
Port
# cd /usr/ports/lang/gcc17-devel && make install clean
# make -C /usr/ports/lang/gcc17-devel config  # change options first
Size
135 MiB download · 490 MiB installed
Depends on
devel/binutils 2.44,1, math/gmp 6.3.0, math/mpc 1.4.1, math/mpfr 4.2.2,1, print/indexinfo 0.3.1_1
License
GPLv3 and GPLv3RLE
Options
2 of 4 on in the package: MULTILIB STANDARD_BOOTSTRAP
Show the 2 options that are off
GRAPHITE LTO_BOOTSTRAP
pkg-message
Shown after installing
To ensure binaries built with this toolchain find appropriate versions
of the necessary run-time libraries, you may want to link using

  -Wl,-rpath=/usr/local/lib/gcc17

For ports leveraging USE_GCC, USES=compiler, or USES=fortran this happens
transparently.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 1617.0.0.s2026100417.0.0.s20261004–
FreeBSD 1517.0.0.s2026100417.0.0.s20261004–
FreeBSD 1417.0.0.s2026100417.0.0.s2026092717.0.0.s20261004

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 1517.0.0.s2026080217.0.0.s20260802–
FreeBSD 1417.0.0.s2026080217.0.0.s2026080217.0.0.s20260802

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 17.0.0.s20261004.

Not counted (1)

CVEs that match this port only loosely: inherited from the whole project, or with versions that cannot be compared. What does this mean?

1 with versions that cannot be compared
The CVE record gives dates or the port uses snapshot versions (or the other way round), so the version of this port cannot be placed in the affected range.
CVECVSSPublishedDescription
CVE-2023-40394.82023-09-13**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamic…

Fixed (0)

No VuXML entries for this package.

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
299150lang/gcc17-devel: Allow build of Modula2 (m2) frontend.New2026-10-05

Commits (20)

Tijl Coosemans (tijl) · 17.0.0.s20261004
*/*: Cleanup use of CONFIGURE_TARGET

Since 4d1f8f16c1c9 replacing amd64 with x86_64 is not necessary.
23544948cb
Lorenzo Salvadore (salvadore) · 17.0.0.s20261004
lang/gcc17-devel: Update to 17.0.0.s20261004
47f5c85b16
Lorenzo Salvadore (salvadore) · 17.0.0.s20260927
lang/gcc17-devel: Update to 17.0.0.s20260927
d572ab7258
Dimitry Andric (dim) · 17.0.0.s20260802 MFH 2026Q3 ✓
lang/gcc17-devel: fix build after base d08296c7ab0d

After base d08296c7ab0d7bb259bf7b8cdf9ffb819c1929ab ("libc: Implement
qualifier-preserving standard library functions"), lang/gcc17-devel
fails to build with an error like:

  In file included from /wrkdirs/usr/ports/lang/gcc17-devel/work/.build/gcc/include-fixed/stdio.h:52,
                   from cp-demangle.c:109:
  /wrkdirs/usr/ports/lang/gcc17-devel/work/gcc-17-20260727/libstdc++-v3/../include/libiberty.h:225:14: error: expected identifier or '(' before '_Generic'
    225 | extern void *memrchr(const void *, int, size_t);
        |              ^~~~~~~

This is because memrchr is now a macro, similar to the other functions
in <string.h>, and libiberty.h attempts to incorrectly redeclare it.

In turn, cp-demangle.c includes libiberty.h, but does not include the
config.h generated for libiberty.h, instead using the config.h generated
for libstdc++.

The problem is really with the way upstream creates its config.h
headers: they should either make libiberty.h automatically include its
own config.h file, or rename that one to libiberty-config.h, so it can
be included at the same time as the libstdc++ config.h header.

The easiest way to fix it is to add a '!defined(__FreeBSD__)'
conditional to the #if statement that attempts to declare the
incompatible memrchr.

PR:		297629
Approved by:	salvadore (maintainer)
MFH:		2026Q3
096369a791
Lorenzo Salvadore (salvadore) · 17.0.0.s20260802
lang/gcc17-devel: Update to 17.0.0.s20260802
558ff160e0
Lorenzo Salvadore (salvadore) · 17.0.0.s20260727
lang/gcc17-devel: Update to 17.0.0.s20260727
108a5ac627
Lorenzo Salvadore (salvadore) · 17.0.0.s20260719
lang/gcc17-devel: Update to 17.0.0.s20260719
44d9923119
Lorenzo Salvadore (salvadore) · 17.0.0.s20260712
lang/gcc17-devel: Update to 17.0.0.s20260712
93fdfcb097
Lorenzo Salvadore (salvadore) · 17.0.0.s20260705
lang/gcc17-devel: Update to 17.0.0.s20260705
9f4c0449e1
Lorenzo Salvadore (salvadore) · 17.0.0.s20260628
lang/gcc17-devel: Update to 17.0.0.s20260628
4ed7c022fd
Lorenzo Salvadore (salvadore) · 17.0.0.s20260621
lang/gcc17-devel: Update to 17.0.0.s20260621
0a5c97df5e
Lorenzo Salvadore (salvadore) · 17.0.0.s20260614
lang/gcc17-devel: Update to 17.0.0.s20260614
1f63956621
Lorenzo Salvadore (salvadore) · 17.0.0.s20260607
lang/gcc17-devel: Fix build on arm64

GCC upstream has removed conditional definitions for some constants,
defining them directly with the same values used on Linux. However,
FreeBSD values for the same constants are different. Then revert
upstream commit.

Co-authored-by: Mark Millard <marklmi26-fbsd@yahoo.com>
PR:		294062
Reported by:	Luke Yasuda <jing@jing.rocks>
6931d2c016
Lorenzo Salvadore (salvadore) · 17.0.0.s20260607
lang/gcc17-devel: Update to 17.0.0.s20260607
0d7ea7abf4
Lorenzo Salvadore (salvadore) · 17.0.0.s20260531
lang/gcc17-devel: Update to 17.0.0.s20260531
9630635021
Lorenzo Salvadore (salvadore) · 17.0.0.s20260524
lang/gcc17-devel: Update to 17.0.0.s20260524
822a7062cd
Lorenzo Salvadore (salvadore) · 17.0.0.s20260517
lang/gcc17-devel: Update to 17.0.0.s20260517
7fa68736aa
Lorenzo Salvadore (salvadore) · 17.0.0.s20260510
lang/gcc17-devel: Update to 17.0.0.s20260510
f256e1123b
Lorenzo Salvadore (salvadore) · 17.0.0.s20260503
lang/gcc17-devel: Update to 17.0.0.s20260503
55e1a9e99c
Lorenzo Salvadore (salvadore) · 17.0.0.s20260426
lang/gcc17-devel: Add port

GCC, the GNU Compiler Collection, supports a number of languages.
This port installs the C, C++, and Fortran front ends as gcc17, g++17,
and gfortran17, respectively.

This is the first snapshot from trunk with the GCC 17 designation.
It largely is a copy of lang/gcc16-devel.
619a15f867