ALAS2023-2023-145 — Low: gcc security update (Amazon Linux 2023)

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-27943: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.

Fixed packages 55

Release	Package	Fixed in
Amazon Linux · 2023	cpp	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	cpp-debuginfo	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	gcc	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	gcc-c++	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	gcc-c++-debuginfo	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	gcc-debuginfo	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	gcc-debugsource	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	gcc-gdb-plugin	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	gcc-gdb-plugin-debuginfo	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	gcc-gfortran	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	gcc-gfortran-debuginfo	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	gcc-offload-nvptx	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	gcc-offload-nvptx-debuginfo	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	gcc-plugin-devel	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	gcc-plugin-devel-debuginfo	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libasan	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libasan-debuginfo	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libasan-static	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libatomic	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libatomic-debuginfo	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libatomic-static	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libgcc	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libgcc-debuginfo	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libgccjit	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libgccjit-debuginfo	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libgccjit-devel	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libgfortran	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libgfortran-debuginfo	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libgfortran-static	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libgomp	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libgomp-debuginfo	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libgomp-offload-nvptx	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libgomp-offload-nvptx-debuginfo	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libitm	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libitm-debuginfo	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libitm-devel	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libitm-static	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	liblsan	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	liblsan-debuginfo	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	liblsan-static	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libquadmath	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libquadmath-debuginfo	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libquadmath-devel	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libquadmath-static	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libstdc++	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libstdc++-debuginfo	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libstdc++-devel	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libstdc++-docs	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libstdc++-static	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libtsan	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libtsan-debuginfo	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libtsan-static	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libubsan	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libubsan-debuginfo	0:11.3.1-4.amzn2023.0.3
Amazon Linux · 2023	libubsan-static	0:11.3.1-4.amzn2023.0.3

Vulnerabilities 1

Medium 5.5

CVE-2022-27943

libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.

binutils libiberty gdb gcc-arm-none-eabi Debian Ubuntu

Mar 26, 2022

References

web
https://alas.aws.amazon.com/cve/html/CVE-2022-27943.html