Todd Eisenberger discovered that certain versions of GNU Compiler Collection (GCC) could be made to clobber the status flag of RDRAND and RDSEED with specially crafted input. This could potentially lead to less randomness in random number generation.
{
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "cpp-5",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "fixincludes",
"binary_version": "1:5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "g++-5",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "g++-5-multilib",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "gcc-5",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "gcc-5-base",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "gcc-5-hppa64-linux-gnu",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "gcc-5-locales",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "gcc-5-multilib",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "gcc-5-plugin-dev",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "gcc-5-source",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "gcc-5-test-results",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "gccgo-5",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "gccgo-5-multilib",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "gcj-5",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "gcj-5-jdk",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "gcj-5-jre",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "gcj-5-jre-headless",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "gcj-5-jre-lib",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "gcj-5-source",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "gdc-5",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "gdc-5-multilib",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "gfortran-5",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "gfortran-5-multilib",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "gnat-5",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "gnat-5-sjlj",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "gobjc++-5",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "gobjc++-5-multilib",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "gobjc-5",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "gobjc-5-multilib",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib32asan2",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib32atomic1",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib32cilkrts5",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib32gcc-5-dev",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib32gfortran-5-dev",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib32gfortran3",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib32go7",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib32gomp1",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib32itm1",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib32lsan0",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib32mpx0",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib32objc-5-dev",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib32objc4",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib32phobos-5-dev",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib32quadmath0",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib32stdc++-5-dev",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib32stdc++6",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib32ubsan0",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib64asan2",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib64atomic1",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib64cilkrts5",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib64gcc-5-dev",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib64gfortran-5-dev",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib64gfortran3",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib64go7",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib64gomp1",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib64itm1",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib64mpx0",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib64objc-5-dev",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib64objc4",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib64phobos-5-dev",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib64quadmath0",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib64stdc++-5-dev",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib64stdc++6",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "lib64ubsan0",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libasan2",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libatomic1",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libcc1-0",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libcilkrts5",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libgcc-5-dev",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libgccjit-5-dev",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libgccjit0",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libgcj16",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libgcj16-awt",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libgcj16-dev",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libgfortran-5-dev",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libgfortran3",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libgnat-5",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libgnatprj5",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libgnatprj5-dev",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libgnatvsn5",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libgnatvsn5-dev",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libgo7",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libgomp1",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libitm1",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "liblsan0",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libmpx0",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libobjc-5-dev",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libobjc4",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libphobos-5-dev",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libquadmath0",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libsfasan2",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libsfatomic1",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libsfgcc-5-dev",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libsfgfortran-5-dev",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libsfgfortran3",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libsfgomp1",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libsfobjc-5-dev",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libsfobjc4",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libsfphobos-5-dev",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libsfstdc++-5-dev",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libsfstdc++6",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libsfubsan0",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libstdc++-5-dev",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libstdc++-5-pic",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libstdc++6",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libtsan0",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libubsan0",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libx32asan2",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libx32atomic1",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libx32cilkrts5",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libx32gcc-5-dev",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libx32gfortran-5-dev",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libx32gfortran3",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libx32go7",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libx32gomp1",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libx32itm1",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libx32lsan0",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libx32objc-5-dev",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libx32objc4",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libx32phobos-5-dev",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libx32quadmath0",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libx32stdc++-5-dev",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libx32stdc++6",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
},
{
"binary_name": "libx32ubsan0",
"binary_version": "5.4.0-6ubuntu1~16.04.12+esm2"
}
]
}
{
"cves": [
{
"id": "CVE-2017-11671",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
},
{
"type": "Ubuntu",
"score": "low"
}
]
}
],
"ecosystem": "Ubuntu:Pro:16.04:LTS"
}
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5770-1.json"
{
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "gcc-6-base",
"binary_version": "6.0.1-0ubuntu1+esm1"
},
{
"binary_name": "gccgo-6",
"binary_version": "6.0.1-0ubuntu1+esm1"
},
{
"binary_name": "gccgo-6-multilib",
"binary_version": "6.0.1-0ubuntu1+esm1"
},
{
"binary_name": "lib32gcc1",
"binary_version": "1:6.0.1-0ubuntu1+esm1"
},
{
"binary_name": "lib32go9",
"binary_version": "6.0.1-0ubuntu1+esm1"
},
{
"binary_name": "lib64gcc1",
"binary_version": "1:6.0.1-0ubuntu1+esm1"
},
{
"binary_name": "lib64go9",
"binary_version": "6.0.1-0ubuntu1+esm1"
},
{
"binary_name": "libgcc1",
"binary_version": "1:6.0.1-0ubuntu1+esm1"
},
{
"binary_name": "libgo9",
"binary_version": "6.0.1-0ubuntu1+esm1"
},
{
"binary_name": "libsfgcc1",
"binary_version": "1:6.0.1-0ubuntu1+esm1"
},
{
"binary_name": "libx32gcc1",
"binary_version": "1:6.0.1-0ubuntu1+esm1"
},
{
"binary_name": "libx32go9",
"binary_version": "6.0.1-0ubuntu1+esm1"
}
]
}
{
"cves": [
{
"id": "CVE-2017-11671",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
},
{
"type": "Ubuntu",
"score": "low"
}
]
}
],
"ecosystem": "Ubuntu:Pro:16.04:LTS"
}
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5770-1.json"