openSUSE-SU-2020:0716-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2020:0716-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2020:0716-1
Related
Published
2020-05-26T05:35:19Z
Modified
2020-05-26T05:35:19Z
Summary
Security update for gcc9
Details

This update includes the GNU Compiler Collection 9.

This update ships the GCC 9.3 release.

A full changelog is provided by the GCC team on:

https://www.gnu.org/software/gcc/gcc-9/changes.html

The base system compiler libraries libgcc_s1, libstdc++6 and others are now built by the gcc 9 packages.

To use it, install 'gcc9' or 'gcc9-c++' or other compiler brands and use CC=gcc-9 / CXX=g++-9 during configuration for using it.

Security issues fixed:

  • CVE-2019-15847: Fixed a miscompilation in the POWER9 back end, that optimized multiple calls of the _builtindarn intrinsic into a single call. (bsc#1149145)
  • CVE-2019-14250: Fixed a heap overflow in the LTO linker. (bsc#1142649)

Non-security issues fixed:

  • Split out libstdc++ pretty-printers into a separate package supplementing gdb and the installed runtime. (bsc#1135254)
  • Fixed miscompilation for vector shift on s390. (bsc#1141897)
  • Includes a fix for Internal compiler error when building HepMC (bsc#1167898)
  • Includes fix for binutils version parsing
  • Add libstdc++6-pp provides and conflicts to avoid file conflicts with same minor version of libstdc++6-pp from gcc10.
  • Add gcc9 autodetect -g at lto link (bsc#1149995)
  • Install go tool buildid for bootstrapping go
References

Affected packages

openSUSE:Leap 15.1 / cross-nvptx-gcc9

Package

Name
cross-nvptx-gcc9
Purl
purl:rpm/suse/cross-nvptx-gcc9&distro=openSUSE%20Leap%2015.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.3.1+git1296-lp151.2.1

Ecosystem specific 

{
    "binaries": [
        {
            "libgo14-32bit": "9.3.1+git1296-lp151.2.2",
            "cross-nvptx-newlib9-devel": "9.3.1+git1296-lp151.2.1",
            "libgo14": "9.3.1+git1296-lp151.2.2",
            "libgomp1": "9.3.1+git1296-lp151.2.2",
            "gcc9-ada-32bit": "9.3.1+git1296-lp151.2.2",
            "libasan5-32bit": "9.3.1+git1296-lp151.2.2",
            "gcc9-locale": "9.3.1+git1296-lp151.2.2",
            "libubsan1": "9.3.1+git1296-lp151.2.2",
            "libstdc++6-32bit": "9.3.1+git1296-lp151.2.2",
            "gcc9-info": "9.3.1+git1296-lp151.2.2",
            "gcc9-ada": "9.3.1+git1296-lp151.2.2",
            "libstdc++6-locale": "9.3.1+git1296-lp151.2.2",
            "gcc9-fortran": "9.3.1+git1296-lp151.2.2",
            "libada9-32bit": "9.3.1+git1296-lp151.2.2",
            "libquadmath0": "9.3.1+git1296-lp151.2.2",
            "gcc9": "9.3.1+git1296-lp151.2.2",
            "libtsan0": "9.3.1+git1296-lp151.2.2",
            "libgcc_s1": "9.3.1+git1296-lp151.2.2",
            "libada9": "9.3.1+git1296-lp151.2.2",
            "libgfortran5": "9.3.1+git1296-lp151.2.2",
            "gcc9-go": "9.3.1+git1296-lp151.2.2",
            "gcc9-fortran-32bit": "9.3.1+git1296-lp151.2.2",
            "libstdc++6": "9.3.1+git1296-lp151.2.2",
            "gcc9-c++": "9.3.1+git1296-lp151.2.2",
            "libgcc_s1-32bit": "9.3.1+git1296-lp151.2.2",
            "libgomp1-32bit": "9.3.1+git1296-lp151.2.2",
            "libstdc++6-devel-gcc9": "9.3.1+git1296-lp151.2.2",
            "cpp9": "9.3.1+git1296-lp151.2.2",
            "libatomic1": "9.3.1+git1296-lp151.2.2",
            "libgfortran5-32bit": "9.3.1+git1296-lp151.2.2",
            "libitm1-32bit": "9.3.1+git1296-lp151.2.2",
            "libitm1": "9.3.1+git1296-lp151.2.2",
            "gcc9-32bit": "9.3.1+git1296-lp151.2.2",
            "libstdc++6-pp-gcc9": "9.3.1+git1296-lp151.2.2",
            "libatomic1-32bit": "9.3.1+git1296-lp151.2.2",
            "gcc9-go-32bit": "9.3.1+git1296-lp151.2.2",
            "libstdc++6-pp-gcc9-32bit": "9.3.1+git1296-lp151.2.2",
            "libstdc++6-devel-gcc9-32bit": "9.3.1+git1296-lp151.2.2",
            "cross-nvptx-gcc9": "9.3.1+git1296-lp151.2.1",
            "gcc9-c++-32bit": "9.3.1+git1296-lp151.2.2",
            "libquadmath0-32bit": "9.3.1+git1296-lp151.2.2",
            "libasan5": "9.3.1+git1296-lp151.2.2",
            "liblsan0": "9.3.1+git1296-lp151.2.2",
            "libubsan1-32bit": "9.3.1+git1296-lp151.2.2"
        }
    ]
}

openSUSE:Leap 15.1 / gcc9

Package

Name
gcc9
Purl
purl:rpm/suse/gcc9&distro=openSUSE%20Leap%2015.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.3.1+git1296-lp151.2.2

Ecosystem specific 

{
    "binaries": [
        {
            "libgo14-32bit": "9.3.1+git1296-lp151.2.2",
            "cross-nvptx-newlib9-devel": "9.3.1+git1296-lp151.2.1",
            "libgo14": "9.3.1+git1296-lp151.2.2",
            "libgomp1": "9.3.1+git1296-lp151.2.2",
            "gcc9-ada-32bit": "9.3.1+git1296-lp151.2.2",
            "libasan5-32bit": "9.3.1+git1296-lp151.2.2",
            "gcc9-locale": "9.3.1+git1296-lp151.2.2",
            "libubsan1": "9.3.1+git1296-lp151.2.2",
            "libstdc++6-32bit": "9.3.1+git1296-lp151.2.2",
            "gcc9-info": "9.3.1+git1296-lp151.2.2",
            "gcc9-ada": "9.3.1+git1296-lp151.2.2",
            "libstdc++6-locale": "9.3.1+git1296-lp151.2.2",
            "gcc9-fortran": "9.3.1+git1296-lp151.2.2",
            "libada9-32bit": "9.3.1+git1296-lp151.2.2",
            "libquadmath0": "9.3.1+git1296-lp151.2.2",
            "gcc9": "9.3.1+git1296-lp151.2.2",
            "libtsan0": "9.3.1+git1296-lp151.2.2",
            "libgcc_s1": "9.3.1+git1296-lp151.2.2",
            "libada9": "9.3.1+git1296-lp151.2.2",
            "libgfortran5": "9.3.1+git1296-lp151.2.2",
            "gcc9-go": "9.3.1+git1296-lp151.2.2",
            "gcc9-fortran-32bit": "9.3.1+git1296-lp151.2.2",
            "libstdc++6": "9.3.1+git1296-lp151.2.2",
            "gcc9-c++": "9.3.1+git1296-lp151.2.2",
            "libgcc_s1-32bit": "9.3.1+git1296-lp151.2.2",
            "libgomp1-32bit": "9.3.1+git1296-lp151.2.2",
            "libstdc++6-devel-gcc9": "9.3.1+git1296-lp151.2.2",
            "cpp9": "9.3.1+git1296-lp151.2.2",
            "libatomic1": "9.3.1+git1296-lp151.2.2",
            "libgfortran5-32bit": "9.3.1+git1296-lp151.2.2",
            "libitm1-32bit": "9.3.1+git1296-lp151.2.2",
            "libitm1": "9.3.1+git1296-lp151.2.2",
            "gcc9-32bit": "9.3.1+git1296-lp151.2.2",
            "libstdc++6-pp-gcc9": "9.3.1+git1296-lp151.2.2",
            "libatomic1-32bit": "9.3.1+git1296-lp151.2.2",
            "gcc9-go-32bit": "9.3.1+git1296-lp151.2.2",
            "libstdc++6-pp-gcc9-32bit": "9.3.1+git1296-lp151.2.2",
            "libstdc++6-devel-gcc9-32bit": "9.3.1+git1296-lp151.2.2",
            "cross-nvptx-gcc9": "9.3.1+git1296-lp151.2.1",
            "gcc9-c++-32bit": "9.3.1+git1296-lp151.2.2",
            "libquadmath0-32bit": "9.3.1+git1296-lp151.2.2",
            "libasan5": "9.3.1+git1296-lp151.2.2",
            "liblsan0": "9.3.1+git1296-lp151.2.2",
            "libubsan1-32bit": "9.3.1+git1296-lp151.2.2"
        }
    ]
}