Security update for gcc7
This update for gcc7 to r275405 fixes the following issues:
Security issues fixed:
- CVE-2019-14250: Fixed an integer overflow in binutils (bsc#1142649).
- CVE-2019-15847: Fixed an optimization in the POWER9 backend of gcc that could reduce the entropy of the random number generator (bsc#1149145).
Non-security issue fixed:
- Move Live Patching technology stack from kGraft to upstream klp (bsc#1071995, fate#323487).
This update was imported from the SUSE:SLE-15:Update update project.
-
Submitted by
Richard Biener (rguenther)
Fixed bugs
bnc#1071995
[TRACKERBUG] SLE15 livepatch backports
bnc#1148517
devel:gcc/cross-mips-gcc9: /usr/include/c++/9/cstdlib:41:10: fatal error: bits/c++config.h: No such file or directory
bnc#1149145
VUL-0: CVE-2019-15847: gcc7, gcc8: The POWER9 backend in gcc optimizes multiple calls of the __builtin_darn intrinsic into a single call reducing the entropy of the random number generator
bnc#1142649
VUL-1: CVE-2019-14250: binutils: simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value, leading to an integer overflow
bnc#1141897
SLES 15 SP1 - GCC Miscompilation of vector shift
Selected Binaries
cpp7
cpp7-debuginfo
gcc7
gcc7-32bit
gcc7-ada
gcc7-ada-32bit
gcc7-ada-debuginfo
gcc7-c++
gcc7-c++-32bit
gcc7-c++-debuginfo
gcc7-debuginfo
gcc7-debugsource
gcc7-fortran
gcc7-fortran-32bit
gcc7-fortran-debuginfo
gcc7-go
gcc7-go-32bit
gcc7-go-debuginfo
gcc7-info
gcc7-locale
gcc7-objc
gcc7-obj-c++
gcc7-obj-c++-32bit
gcc7-objc-32bit
gcc7-obj-c++-debuginfo
gcc7-objc-debuginfo
libada7
libada7-32bit
libada7-32bit-debuginfo
libada7-debuginfo
libasan4
libasan4-32bit
libasan4-32bit-debuginfo
libasan4-debuginfo
libcilkrts5
libcilkrts5-32bit
libcilkrts5-32bit-debuginfo
libcilkrts5-debuginfo
libgfortran4
libgfortran4-32bit
libgfortran4-32bit-debuginfo
libgfortran4-debuginfo
libgo11
libgo11-32bit
libgo11-32bit-debuginfo
libgo11-debuginfo
libobjc4
libobjc4-32bit
libobjc4-32bit-debuginfo
libobjc4-debuginfo
libubsan0
libubsan0-32bit
libubsan0-32bit-debuginfo
libubsan0-debuginfo
libstdc++6-devel-gcc7
libstdc++6-devel-gcc7-32bit
