Summary
gcc [el8]
[8.5.0-18.0.5]
- CVE-2023-4039 GCC mitigation.
Orabug 35751743.
Includes removal of aarch64-preserve-args.patch.
- CVE-2022-40982 'Intel Downfall' mitigation.
Orabug 35751810.
Add two patches originally from GCC upstream releases/gcc-11 branch.
with major adjustment.
gcc11-downfall-disable-gather-in-vec.patch
gcc11-downfall-support-mno-gather.patch
Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
gcc [el9]
[11.3.1-4.3.0.4]
- CVE-2023-4039 GCC mitigation.
Orabug 35751837.
- CVE-2022-40982 'Intel Downfall' mitigation.
Orabug 35751842.
Add two patches originally from GCC upstream releases/gcc-11 branch.
gcc11-downfall-disable-gather-in-vec.patch
gcc11-downfall-support-mno-gather.patch
Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
gcc-toolset-11-gcc [el8]
[11.2.1-9.1.0.6]
- CVE-2023-4039 GCC mitigation.
Orabug 35751885.
- CVE-2022-40982 'Intel Downfall' mitigation.
Orabug 35751901.
Add two patches originally from GCC upstream releases/gcc-11 branch.
gcc11-downfall-disable-gather-in-vec.patch
gcc11-downfall-support-mno-gather.patch
Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
gcc-toolset-12-gcc [el8/el9]
[12.2.1-7.4.0.2]
- CVE-2023-4039 GCC mitigation.
Orabug 35751931.
- CVE-2022-40982 'Intel Downfall' mitigation.
Orabug 35751938.
Add two patches originally from GCC upstream releases/gcc-11 branch.
gcc12-downfall-disable-gather-in-vec.patch
gcc12-downfall-support-mno-gather.patch
- Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.
Fixed packages 66
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | cpp | 0:11.3.1-4.3.0.4.el9 |
| Oracle Linux · 8 | gcc | 0:11.3.1-4.3.0.4.el9 |
| Oracle Linux · 8 | gcc-c++ | 0:11.3.1-4.3.0.4.el9 |
| Oracle Linux · 8 | gcc-gdb-plugin | 0:8.5.0-18.0.5.el8 |
| Oracle Linux · 8 | gcc-gfortran | 0:11.3.1-4.3.0.4.el9 |
| Oracle Linux · 8 | gcc-offload-nvptx | 0:11.3.1-4.3.0.4.el9 |
| Oracle Linux · 8 | gcc-plugin-annobin | 0:11.3.1-4.3.0.4.el9 |
| Oracle Linux · 8 | gcc-plugin-devel | 0:11.3.1-4.3.0.4.el9 |
| Oracle Linux · 8 | gcc-toolset-11-gcc | 0:11.2.1-9.1.0.6.el8 |
| Oracle Linux · 8 | gcc-toolset-11-gcc-c++ | 0:11.2.1-9.1.0.6.el8 |
| Oracle Linux · 8 | gcc-toolset-11-gcc-gdb-plugin | 0:11.2.1-9.1.0.6.el8 |
| Oracle Linux · 8 | gcc-toolset-11-gcc-gfortran | 0:11.2.1-9.1.0.6.el8 |
| Oracle Linux · 8 | gcc-toolset-11-gcc-plugin-devel | 0:11.2.1-9.1.0.6.el8 |
| Oracle Linux · 8 | gcc-toolset-11-libasan-devel | 0:11.2.1-9.1.0.6.el8 |
| Oracle Linux · 8 | gcc-toolset-11-libatomic-devel | 0:11.2.1-9.1.0.6.el8 |
| Oracle Linux · 8 | gcc-toolset-11-libgccjit | 0:11.2.1-9.1.0.6.el8 |
| Oracle Linux · 8 | gcc-toolset-11-libgccjit-devel | 0:11.2.1-9.1.0.6.el8 |
| Oracle Linux · 8 | gcc-toolset-11-libgccjit-docs | 0:11.2.1-9.1.0.6.el8 |
| Oracle Linux · 8 | gcc-toolset-11-libitm-devel | 0:11.2.1-9.1.0.6.el8 |
| Oracle Linux · 8 | gcc-toolset-11-liblsan-devel | 0:11.2.1-9.1.0.6.el8 |
| Oracle Linux · 8 | gcc-toolset-11-libquadmath-devel | 0:11.2.1-9.1.0.6.el8 |
| Oracle Linux · 8 | gcc-toolset-11-libstdc++-devel | 0:11.2.1-9.1.0.6.el8 |
| Oracle Linux · 8 | gcc-toolset-11-libstdc++-docs | 0:11.2.1-9.1.0.6.el8 |
| Oracle Linux · 8 | gcc-toolset-11-libtsan-devel | 0:11.2.1-9.1.0.6.el8 |
| Oracle Linux · 8 | gcc-toolset-11-libubsan-devel | 0:11.2.1-9.1.0.6.el8 |
| Oracle Linux · 8 | gcc-toolset-12-gcc | 0:12.2.1-7.4.0.2.el9 |
| Oracle Linux · 8 | gcc-toolset-12-gcc-c++ | 0:12.2.1-7.4.0.2.el9 |
| Oracle Linux · 8 | gcc-toolset-12-gcc-gfortran | 0:12.2.1-7.4.0.2.el9 |
| Oracle Linux · 8 | gcc-toolset-12-gcc-plugin-annobin | 0:12.2.1-7.4.0.2.el9 |
| Oracle Linux · 8 | gcc-toolset-12-gcc-plugin-devel | 0:12.2.1-7.4.0.2.el9 |
| Oracle Linux · 8 | gcc-toolset-12-libasan-devel | 0:12.2.1-7.4.0.2.el9 |
| Oracle Linux · 8 | gcc-toolset-12-libatomic-devel | 0:12.2.1-7.4.0.2.el9 |
| Oracle Linux · 8 | gcc-toolset-12-libgccjit | 0:12.2.1-7.4.0.2.el9 |
| Oracle Linux · 8 | gcc-toolset-12-libgccjit-devel | 0:12.2.1-7.4.0.2.el9 |
| Oracle Linux · 8 | gcc-toolset-12-libgccjit-docs | 0:12.2.1-7.4.0.2.el9 |
| Oracle Linux · 8 | gcc-toolset-12-libitm-devel | 0:12.2.1-7.4.0.2.el9 |
| Oracle Linux · 8 | gcc-toolset-12-liblsan-devel | 0:12.2.1-7.4.0.2.el9 |
| Oracle Linux · 8 | gcc-toolset-12-libquadmath-devel | 0:12.2.1-7.4.0.2.el9 |
| Oracle Linux · 8 | gcc-toolset-12-libstdc++-devel | 0:12.2.1-7.4.0.2.el9 |
| Oracle Linux · 8 | gcc-toolset-12-libstdc++-docs | 0:12.2.1-7.4.0.2.el9 |
| Oracle Linux · 8 | gcc-toolset-12-libtsan-devel | 0:12.2.1-7.4.0.2.el9 |
| Oracle Linux · 8 | gcc-toolset-12-libubsan-devel | 0:12.2.1-7.4.0.2.el9 |
| Oracle Linux · 8 | gcc-toolset-12-offload-nvptx | 0:12.2.1-7.4.0.2.el9 |
| Oracle Linux · 8 | libasan | 0:11.3.1-4.3.0.4.el9 |
| Oracle Linux · 8 | libasan6 | 0:11.2.1-9.1.0.6.el8 |
| Oracle Linux · 8 | libasan8 | 0:12.2.1-7.4.0.2.el9 |
| Oracle Linux · 8 | libatomic | 0:11.3.1-4.3.0.4.el9 |
| Oracle Linux · 8 | libatomic-static | 0:8.5.0-18.0.5.el8 |
| Oracle Linux · 8 | libgcc | 0:11.3.1-4.3.0.4.el9 |
| Oracle Linux · 8 | libgccjit | 0:11.3.1-4.3.0.4.el9 |
| Oracle Linux · 8 | libgccjit-devel | 0:11.3.1-4.3.0.4.el9 |
| Oracle Linux · 8 | libgfortran | 0:11.3.1-4.3.0.4.el9 |
| Oracle Linux · 8 | libgomp | 0:11.3.1-4.3.0.4.el9 |
| Oracle Linux · 8 | libgomp-offload-nvptx | 0:11.3.1-4.3.0.4.el9 |
| Oracle Linux · 8 | libitm | 0:11.3.1-4.3.0.4.el9 |
| Oracle Linux · 8 | libitm-devel | 0:11.3.1-4.3.0.4.el9 |
| Oracle Linux · 8 | liblsan | 0:11.3.1-4.3.0.4.el9 |
| Oracle Linux · 8 | libquadmath | 0:11.3.1-4.3.0.4.el9 |
| Oracle Linux · 8 | libquadmath-devel | 0:11.3.1-4.3.0.4.el9 |
| Oracle Linux · 8 | libstdc++ | 0:11.3.1-4.3.0.4.el9 |
| Oracle Linux · 8 | libstdc++-devel | 0:11.3.1-4.3.0.4.el9 |
| Oracle Linux · 8 | libstdc++-docs | 0:11.3.1-4.3.0.4.el9 |
| Oracle Linux · 8 | libstdc++-static | 0:11.3.1-4.3.0.4.el9 |
| Oracle Linux · 8 | libtsan | 0:11.3.1-4.3.0.4.el9 |
| Oracle Linux · 8 | libtsan2 | 0:12.2.1-7.4.0.2.el9 |
| Oracle Linux · 8 | libubsan | 0:11.3.1-4.3.0.4.el9 |
Vulnerabilities 2
-
Medium 6.5
Information exposure through microarchitectural state after transient execution in certain vector execution units for s…
-
Medium 4.8
GCC's-fstack-protector fails to guard dynamically-sized local variables on AArch64
**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables in your application without this being detected. This stack-prote…