openSUSE Security Update: Security update for gcc5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1069-1 Rating: moderate References: #939460 #945842 #952151 #953831 #954002 #955382 #962765 #964468 #966220 #968771 Cross-References: CVE-2015-5276 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has 9 fixes is now available. Description: The GNU Compiler Collection was updated to version 5.3.1, which brings several fixes and enhancements. The following security issue has been fixed: - Fix C++11 std::random_device short read issue that could lead to predictable randomness. (CVE-2015-5276, bsc#945842) The following non-security issues have been fixed: - Enable frame pointer for TARGET_64BIT_MS_ABI when stack is misaligned. Fixes internal compiler error when building Wine. (bsc#966220) - Fix a PowerPC specific issue in gcc-go that broke compilation of newer versions of Docker. (bsc#964468) - Fix HTM built-ins on PowerPC. (bsc#955382) - Fix libgo certificate lookup. (bsc#953831) - Suppress deprecated-declarations warnings for inline definitions of deprecated virtual methods. (bsc#939460) - Build s390[x] with "--with-tune=z9-109 --with-arch=z900" on SLE11 again. (bsc#954002) - Revert accidental libffi ABI breakage on aarch64. (bsc#968771) - On x86_64, set default 32bit code generation to -march=x86-64 rather than -march=i586. - Add experimental File System TS library. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-472=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): cpp5-5.3.1+r233831-6.1 cpp5-debuginfo-5.3.1+r233831-6.1 gcc5-5.3.1+r233831-6.1 gcc5-ada-5.3.1+r233831-6.1 gcc5-ada-debuginfo-5.3.1+r233831-6.1 gcc5-c++-5.3.1+r233831-6.1 gcc5-c++-debuginfo-5.3.1+r233831-6.1 gcc5-debuginfo-5.3.1+r233831-6.1 gcc5-debugsource-5.3.1+r233831-6.1 gcc5-fortran-5.3.1+r233831-6.1 gcc5-fortran-debuginfo-5.3.1+r233831-6.1 gcc5-go-5.3.1+r233831-6.1 gcc5-go-debuginfo-5.3.1+r233831-6.1 gcc5-locale-5.3.1+r233831-6.1 gcc5-testresults-5.3.1+r233831-6.2 libada5-5.3.1+r233831-6.1 libada5-debuginfo-5.3.1+r233831-6.1 libasan2-5.3.1+r233831-6.1 libasan2-debuginfo-5.3.1+r233831-6.1 libatomic1-5.3.1+r233831-6.1 libatomic1-debuginfo-5.3.1+r233831-6.1 libcilkrts5-5.3.1+r233831-6.1 libcilkrts5-debuginfo-5.3.1+r233831-6.1 libffi-devel-gcc5-5.3.1+r233831-6.1 libffi-gcc5-debugsource-5.3.1+r233831-6.1 libffi4-5.3.1+r233831-6.1 libffi4-debuginfo-5.3.1+r233831-6.1 libgcc_s1-5.3.1+r233831-6.1 libgcc_s1-debuginfo-5.3.1+r233831-6.1 libgfortran3-5.3.1+r233831-6.1 libgfortran3-debuginfo-5.3.1+r233831-6.1 libgo7-5.3.1+r233831-6.1 libgo7-debuginfo-5.3.1+r233831-6.1 libgomp1-5.3.1+r233831-6.1 libgomp1-debuginfo-5.3.1+r233831-6.1 libitm1-5.3.1+r233831-6.1 libitm1-debuginfo-5.3.1+r233831-6.1 libmpx0-5.3.1+r233831-6.1 libmpx0-debuginfo-5.3.1+r233831-6.1 libmpxwrappers0-5.3.1+r233831-6.1 libmpxwrappers0-debuginfo-5.3.1+r233831-6.1 libquadmath0-5.3.1+r233831-6.1 libquadmath0-debuginfo-5.3.1+r233831-6.1 libstdc++6-5.3.1+r233831-6.1 libstdc++6-debuginfo-5.3.1+r233831-6.1 libstdc++6-devel-gcc5-5.3.1+r233831-6.1 libstdc++6-locale-5.3.1+r233831-6.1 libubsan0-5.3.1+r233831-6.1 libubsan0-debuginfo-5.3.1+r233831-6.1 - openSUSE Leap 42.1 (noarch): gcc5-info-5.3.1+r233831-6.1 - openSUSE Leap 42.1 (x86_64): gcc5-32bit-5.3.1+r233831-6.1 gcc5-32bit-debuginfo-5.3.1+r233831-6.1 gcc5-ada-32bit-5.3.1+r233831-6.1 gcc5-c++-32bit-5.3.1+r233831-6.1 gcc5-fortran-32bit-5.3.1+r233831-6.1 gcc5-go-32bit-5.3.1+r233831-6.1 libada5-32bit-5.3.1+r233831-6.1 libada5-32bit-debuginfo-5.3.1+r233831-6.1 libasan2-32bit-5.3.1+r233831-6.1 libasan2-32bit-debuginfo-5.3.1+r233831-6.1 libatomic1-32bit-5.3.1+r233831-6.1 libatomic1-32bit-debuginfo-5.3.1+r233831-6.1 libcilkrts5-32bit-5.3.1+r233831-6.1 libcilkrts5-32bit-debuginfo-5.3.1+r233831-6.1 libffi-devel-gcc5-32bit-5.3.1+r233831-6.1 libffi4-32bit-5.3.1+r233831-6.1 libffi4-32bit-debuginfo-5.3.1+r233831-6.1 libgcc_s1-32bit-5.3.1+r233831-6.1 libgcc_s1-32bit-debuginfo-5.3.1+r233831-6.1 libgfortran3-32bit-5.3.1+r233831-6.1 libgfortran3-32bit-debuginfo-5.3.1+r233831-6.1 libgo7-32bit-5.3.1+r233831-6.1 libgo7-32bit-debuginfo-5.3.1+r233831-6.1 libgomp1-32bit-5.3.1+r233831-6.1 libgomp1-32bit-debuginfo-5.3.1+r233831-6.1 libitm1-32bit-5.3.1+r233831-6.1 libitm1-32bit-debuginfo-5.3.1+r233831-6.1 liblsan0-5.3.1+r233831-6.1 liblsan0-debuginfo-5.3.1+r233831-6.1 libmpx0-32bit-5.3.1+r233831-6.1 libmpx0-32bit-debuginfo-5.3.1+r233831-6.1 libmpxwrappers0-32bit-5.3.1+r233831-6.1 libmpxwrappers0-32bit-debuginfo-5.3.1+r233831-6.1 libquadmath0-32bit-5.3.1+r233831-6.1 libquadmath0-32bit-debuginfo-5.3.1+r233831-6.1 libstdc++6-32bit-5.3.1+r233831-6.1 libstdc++6-32bit-debuginfo-5.3.1+r233831-6.1 libstdc++6-devel-gcc5-32bit-5.3.1+r233831-6.1 libtsan0-5.3.1+r233831-6.1 libtsan0-debuginfo-5.3.1+r233831-6.1 libubsan0-32bit-5.3.1+r233831-6.1 libubsan0-32bit-debuginfo-5.3.1+r233831-6.1 References: https://www.suse.com/security/cve/CVE-2015-5276.html https://bugzilla.suse.com/939460 https://bugzilla.suse.com/945842 https://bugzilla.suse.com/952151 https://bugzilla.suse.com/953831 https://bugzilla.suse.com/954002 https://bugzilla.suse.com/955382 https://bugzilla.suse.com/962765 https://bugzilla.suse.com/964468 https://bugzilla.suse.com/966220 https://bugzilla.suse.com/968771