openSUSE Security Update: Security update for gcc48 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1946-1 Rating: moderate References: #945842 #947772 #947791 #948168 #949000 Cross-References: CVE-2015-5276 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has four fixes is now available. Description: This update for GCC 4.8 provides the following fixes: - Fix C++11 std::random_device short read issue that could lead to predictable randomness. (CVE-2015-5276, bsc#945842) - Fix linker segmentation fault when building SLOF on ppc64le. (bsc#949000) - Fix no_instrument_function attribute handling on PPC64 with -mprofile-kernel. (bsc#947791) - Fix internal compiler error with aarch64 target using PCH and builtin functions. (bsc#947772) - Fix libffi issues on aarch64. (bsc#948168) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-723=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): cpp48-4.8.5-18.1 cpp48-debuginfo-4.8.5-18.1 gcc48-4.8.5-18.1 gcc48-ada-4.8.5-18.1 gcc48-ada-debuginfo-4.8.5-18.1 gcc48-c++-4.8.5-18.1 gcc48-c++-debuginfo-4.8.5-18.1 gcc48-debuginfo-4.8.5-18.1 gcc48-debugsource-4.8.5-18.1 gcc48-fortran-4.8.5-18.1 gcc48-fortran-debuginfo-4.8.5-18.1 gcc48-gij-4.8.5-18.1 gcc48-gij-debuginfo-4.8.5-18.1 gcc48-java-4.8.5-18.1 gcc48-java-debuginfo-4.8.5-18.1 gcc48-locale-4.8.5-18.1 gcc48-obj-c++-4.8.5-18.1 gcc48-obj-c++-debuginfo-4.8.5-18.1 gcc48-objc-4.8.5-18.1 gcc48-objc-debuginfo-4.8.5-18.1 gcc48-testresults-4.8.5-18.3 gdb-7.9.1-7.1 gdb-debuginfo-7.9.1-7.1 gdb-debugsource-7.9.1-7.1 gdb-testresults-7.9.1-7.1 gdbserver-7.9.1-7.1 gdbserver-debuginfo-7.9.1-7.1 libada48-4.8.5-18.1 libada48-debuginfo-4.8.5-18.1 libasan0-4.8.5-18.1 libasan0-debuginfo-4.8.5-18.1 libatomic1-gcc48-4.8.5-18.1 libatomic1-gcc48-debuginfo-4.8.5-18.1 libffi4-gcc48-4.8.5-18.1 libffi4-gcc48-debuginfo-4.8.5-18.1 libffi48-debugsource-4.8.5-18.1 libffi48-devel-4.8.5-18.1 libgcc_s1-gcc48-4.8.5-18.1 libgcc_s1-gcc48-debuginfo-4.8.5-18.1 libgcj48-4.8.5-18.1 libgcj48-debuginfo-4.8.5-18.1 libgcj48-debugsource-4.8.5-18.1 libgcj48-devel-4.8.5-18.1 libgcj48-devel-debuginfo-4.8.5-18.1 libgcj48-jar-4.8.5-18.1 libgcj_bc1-gcc48-4.8.5-18.1 libgfortran3-gcc48-4.8.5-18.1 libgfortran3-gcc48-debuginfo-4.8.5-18.1 libgomp1-gcc48-4.8.5-18.1 libgomp1-gcc48-debuginfo-4.8.5-18.1 libitm1-gcc48-4.8.5-18.1 libitm1-gcc48-debuginfo-4.8.5-18.1 libobjc4-4.8.5-18.1 libobjc4-debuginfo-4.8.5-18.1 libquadmath0-gcc48-4.8.5-18.1 libquadmath0-gcc48-debuginfo-4.8.5-18.1 libstdc++48-devel-4.8.5-18.1 libstdc++6-gcc48-4.8.5-18.1 libstdc++6-gcc48-debuginfo-4.8.5-18.1 libstdc++6-gcc48-locale-4.8.5-18.1 - openSUSE Leap 42.1 (x86_64): cross-aarch64-gcc48-icecream-backend-4.8.5-18.2 cross-armv6hl-gcc48-icecream-backend-4.8.5-18.2 cross-armv7hl-gcc48-icecream-backend-4.8.5-18.2 cross-hppa-gcc48-icecream-backend-4.8.5-18.2 cross-i386-gcc48-icecream-backend-4.8.5-18.2 cross-ia64-gcc48-icecream-backend-4.8.5-18.2 cross-ppc-gcc48-icecream-backend-4.8.5-18.2 cross-ppc64-gcc48-icecream-backend-4.8.5-18.2 cross-ppc64le-gcc48-icecream-backend-4.8.5-18.2 cross-s390-gcc48-icecream-backend-4.8.5-18.2 cross-s390x-gcc48-icecream-backend-4.8.5-18.2 gcc48-32bit-4.8.5-18.1 gcc48-ada-32bit-4.8.5-18.1 gcc48-fortran-32bit-4.8.5-18.1 gcc48-gij-32bit-4.8.5-18.1 gcc48-gij-debuginfo-32bit-4.8.5-18.1 gcc48-objc-32bit-4.8.5-18.1 libada48-32bit-4.8.5-18.1 libada48-32bit-debuginfo-4.8.5-18.1 libasan0-32bit-4.8.5-18.1 libasan0-32bit-debuginfo-4.8.5-18.1 libatomic1-gcc48-32bit-4.8.5-18.1 libatomic1-gcc48-32bit-debuginfo-4.8.5-18.1 libffi4-gcc48-32bit-4.8.5-18.1 libffi4-gcc48-32bit-debuginfo-4.8.5-18.1 libffi48-devel-32bit-4.8.5-18.1 libgcc_s1-gcc48-32bit-4.8.5-18.1 libgcc_s1-gcc48-32bit-debuginfo-4.8.5-18.1 libgcj48-32bit-4.8.5-18.1 libgcj48-debuginfo-32bit-4.8.5-18.1 libgcj48-devel-32bit-4.8.5-18.1 libgcj48-devel-debuginfo-32bit-4.8.5-18.1 libgfortran3-gcc48-32bit-4.8.5-18.1 libgfortran3-gcc48-32bit-debuginfo-4.8.5-18.1 libgomp1-gcc48-32bit-4.8.5-18.1 libgomp1-gcc48-32bit-debuginfo-4.8.5-18.1 libitm1-gcc48-32bit-4.8.5-18.1 libitm1-gcc48-32bit-debuginfo-4.8.5-18.1 libobjc4-32bit-4.8.5-18.1 libobjc4-32bit-debuginfo-4.8.5-18.1 libquadmath0-gcc48-32bit-4.8.5-18.1 libquadmath0-gcc48-32bit-debuginfo-4.8.5-18.1 libstdc++48-devel-32bit-4.8.5-18.1 libstdc++6-gcc48-32bit-4.8.5-18.1 libstdc++6-gcc48-32bit-debuginfo-4.8.5-18.1 libtsan0-gcc48-4.8.5-18.1 libtsan0-gcc48-debuginfo-4.8.5-18.1 - openSUSE Leap 42.1 (noarch): gcc48-info-4.8.5-18.1 libstdc++48-doc-4.8.5-18.1 References: https://www.suse.com/security/cve/CVE-2015-5276.html https://bugzilla.suse.com/945842 https://bugzilla.suse.com/947772 https://bugzilla.suse.com/947791 https://bugzilla.suse.com/948168 https://bugzilla.suse.com/949000