Skip to content
OpenAdvisories
Low ELSA-2023-12788 2 CVEs

Low: gcc security update (Oracle Linux 8)

Published Sep 12, 2023 · Updated Sep 12, 2023

Summary

gcc [el8]
[8.5.0-18.0.5]
- CVE-2023-4039 GCC mitigation.
Orabug 35751743.
Includes removal of aarch64-preserve-args.patch.
- CVE-2022-40982 'Intel Downfall' mitigation.
Orabug 35751810.
Add two patches originally from GCC upstream releases/gcc-11 branch.
with major adjustment.
gcc11-downfall-disable-gather-in-vec.patch
gcc11-downfall-support-mno-gather.patch
Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>

gcc [el9]
[11.3.1-4.3.0.4]
- CVE-2023-4039 GCC mitigation.
Orabug 35751837.
- CVE-2022-40982 'Intel Downfall' mitigation.
Orabug 35751842.
Add two patches originally from GCC upstream releases/gcc-11 branch.
gcc11-downfall-disable-gather-in-vec.patch
gcc11-downfall-support-mno-gather.patch
Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>

gcc-toolset-11-gcc [el8]
[11.2.1-9.1.0.6]
- CVE-2023-4039 GCC mitigation.
Orabug 35751885.
- CVE-2022-40982 'Intel Downfall' mitigation.
Orabug 35751901.
Add two patches originally from GCC upstream releases/gcc-11 branch.
gcc11-downfall-disable-gather-in-vec.patch
gcc11-downfall-support-mno-gather.patch
Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>

gcc-toolset-12-gcc [el8/el9]
[12.2.1-7.4.0.2]
- CVE-2023-4039 GCC mitigation.
Orabug 35751931.
- CVE-2022-40982 'Intel Downfall' mitigation.
Orabug 35751938.
Add two patches originally from GCC upstream releases/gcc-11 branch.
gcc12-downfall-disable-gather-in-vec.patch
gcc12-downfall-support-mno-gather.patch
- Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.

Fixed packages 66

ReleasePackageFixed in
Oracle Linux · 8 cpp 0:11.3.1-4.3.0.4.el9
Oracle Linux · 8 gcc 0:11.3.1-4.3.0.4.el9
Oracle Linux · 8 gcc-c++ 0:11.3.1-4.3.0.4.el9
Oracle Linux · 8 gcc-gdb-plugin 0:8.5.0-18.0.5.el8
Oracle Linux · 8 gcc-gfortran 0:11.3.1-4.3.0.4.el9
Oracle Linux · 8 gcc-offload-nvptx 0:11.3.1-4.3.0.4.el9
Oracle Linux · 8 gcc-plugin-annobin 0:11.3.1-4.3.0.4.el9
Oracle Linux · 8 gcc-plugin-devel 0:11.3.1-4.3.0.4.el9
Oracle Linux · 8 gcc-toolset-11-gcc 0:11.2.1-9.1.0.6.el8
Oracle Linux · 8 gcc-toolset-11-gcc-c++ 0:11.2.1-9.1.0.6.el8
Oracle Linux · 8 gcc-toolset-11-gcc-gdb-plugin 0:11.2.1-9.1.0.6.el8
Oracle Linux · 8 gcc-toolset-11-gcc-gfortran 0:11.2.1-9.1.0.6.el8
Oracle Linux · 8 gcc-toolset-11-gcc-plugin-devel 0:11.2.1-9.1.0.6.el8
Oracle Linux · 8 gcc-toolset-11-libasan-devel 0:11.2.1-9.1.0.6.el8
Oracle Linux · 8 gcc-toolset-11-libatomic-devel 0:11.2.1-9.1.0.6.el8
Oracle Linux · 8 gcc-toolset-11-libgccjit 0:11.2.1-9.1.0.6.el8
Oracle Linux · 8 gcc-toolset-11-libgccjit-devel 0:11.2.1-9.1.0.6.el8
Oracle Linux · 8 gcc-toolset-11-libgccjit-docs 0:11.2.1-9.1.0.6.el8
Oracle Linux · 8 gcc-toolset-11-libitm-devel 0:11.2.1-9.1.0.6.el8
Oracle Linux · 8 gcc-toolset-11-liblsan-devel 0:11.2.1-9.1.0.6.el8
Oracle Linux · 8 gcc-toolset-11-libquadmath-devel 0:11.2.1-9.1.0.6.el8
Oracle Linux · 8 gcc-toolset-11-libstdc++-devel 0:11.2.1-9.1.0.6.el8
Oracle Linux · 8 gcc-toolset-11-libstdc++-docs 0:11.2.1-9.1.0.6.el8
Oracle Linux · 8 gcc-toolset-11-libtsan-devel 0:11.2.1-9.1.0.6.el8
Oracle Linux · 8 gcc-toolset-11-libubsan-devel 0:11.2.1-9.1.0.6.el8
Oracle Linux · 8 gcc-toolset-12-gcc 0:12.2.1-7.4.0.2.el9
Oracle Linux · 8 gcc-toolset-12-gcc-c++ 0:12.2.1-7.4.0.2.el9
Oracle Linux · 8 gcc-toolset-12-gcc-gfortran 0:12.2.1-7.4.0.2.el9
Oracle Linux · 8 gcc-toolset-12-gcc-plugin-annobin 0:12.2.1-7.4.0.2.el9
Oracle Linux · 8 gcc-toolset-12-gcc-plugin-devel 0:12.2.1-7.4.0.2.el9
Oracle Linux · 8 gcc-toolset-12-libasan-devel 0:12.2.1-7.4.0.2.el9
Oracle Linux · 8 gcc-toolset-12-libatomic-devel 0:12.2.1-7.4.0.2.el9
Oracle Linux · 8 gcc-toolset-12-libgccjit 0:12.2.1-7.4.0.2.el9
Oracle Linux · 8 gcc-toolset-12-libgccjit-devel 0:12.2.1-7.4.0.2.el9
Oracle Linux · 8 gcc-toolset-12-libgccjit-docs 0:12.2.1-7.4.0.2.el9
Oracle Linux · 8 gcc-toolset-12-libitm-devel 0:12.2.1-7.4.0.2.el9
Oracle Linux · 8 gcc-toolset-12-liblsan-devel 0:12.2.1-7.4.0.2.el9
Oracle Linux · 8 gcc-toolset-12-libquadmath-devel 0:12.2.1-7.4.0.2.el9
Oracle Linux · 8 gcc-toolset-12-libstdc++-devel 0:12.2.1-7.4.0.2.el9
Oracle Linux · 8 gcc-toolset-12-libstdc++-docs 0:12.2.1-7.4.0.2.el9
Oracle Linux · 8 gcc-toolset-12-libtsan-devel 0:12.2.1-7.4.0.2.el9
Oracle Linux · 8 gcc-toolset-12-libubsan-devel 0:12.2.1-7.4.0.2.el9
Oracle Linux · 8 gcc-toolset-12-offload-nvptx 0:12.2.1-7.4.0.2.el9
Oracle Linux · 8 libasan 0:11.3.1-4.3.0.4.el9
Oracle Linux · 8 libasan6 0:11.2.1-9.1.0.6.el8
Oracle Linux · 8 libasan8 0:12.2.1-7.4.0.2.el9
Oracle Linux · 8 libatomic 0:11.3.1-4.3.0.4.el9
Oracle Linux · 8 libatomic-static 0:8.5.0-18.0.5.el8
Oracle Linux · 8 libgcc 0:11.3.1-4.3.0.4.el9
Oracle Linux · 8 libgccjit 0:11.3.1-4.3.0.4.el9
Oracle Linux · 8 libgccjit-devel 0:11.3.1-4.3.0.4.el9
Oracle Linux · 8 libgfortran 0:11.3.1-4.3.0.4.el9
Oracle Linux · 8 libgomp 0:11.3.1-4.3.0.4.el9
Oracle Linux · 8 libgomp-offload-nvptx 0:11.3.1-4.3.0.4.el9
Oracle Linux · 8 libitm 0:11.3.1-4.3.0.4.el9
Oracle Linux · 8 libitm-devel 0:11.3.1-4.3.0.4.el9
Oracle Linux · 8 liblsan 0:11.3.1-4.3.0.4.el9
Oracle Linux · 8 libquadmath 0:11.3.1-4.3.0.4.el9
Oracle Linux · 8 libquadmath-devel 0:11.3.1-4.3.0.4.el9
Oracle Linux · 8 libstdc++ 0:11.3.1-4.3.0.4.el9
Oracle Linux · 8 libstdc++-devel 0:11.3.1-4.3.0.4.el9
Oracle Linux · 8 libstdc++-docs 0:11.3.1-4.3.0.4.el9
Oracle Linux · 8 libstdc++-static 0:11.3.1-4.3.0.4.el9
Oracle Linux · 8 libtsan 0:11.3.1-4.3.0.4.el9
Oracle Linux · 8 libtsan2 0:12.2.1-7.4.0.2.el9
Oracle Linux · 8 libubsan 0:11.3.1-4.3.0.4.el9

Vulnerabilities 2