Summary
[12.1.1-2.0.4]
- CVE-2023-4039 mitigation.
Orabug 35752028.
- Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
Fixed packages 59
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | cross-gcc-common | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-aarch64-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-alpha-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-arc-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-arm-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-avr32-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-bfin-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-bpf-unknown-none | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-c++-aarch64-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-c++-alpha-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-c++-arc-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-c++-arm-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-c++-avr32-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-c++-bfin-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-c++-bpf-unknown-none | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-c++-c6x-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-c++-frv-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-c++-h8300-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-c++-hppa-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-c++-hppa64-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-c++-ia64-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-c++-m68k-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-c++-microblaze-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-c++-mips64-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-c++-mn10300-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-c++-nios2-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-c++-openrisc-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-c++-powerpc64-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-c++-powerpc64le-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-c++-ppc64-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-c++-ppc64le-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-c++-riscv64-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-c++-s390x-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-c++-sparc64-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-c++-tile-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-c++-x86_64-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-c++-xtensa-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-c6x-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-frv-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-h8300-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-hppa-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-hppa64-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-ia64-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-m68k-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-microblaze-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-mips64-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-mn10300-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-nios2-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-openrisc-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-powerpc64-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-powerpc64le-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-ppc64-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-ppc64le-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-riscv64-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-s390x-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-sparc64-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-tile-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-x86_64-linux-gnu | 0:12.1.1-2.0.4.el9 |
| Oracle Linux · 8 | gcc-xtensa-linux-gnu | 0:12.1.1-2.0.4.el9 |
Vulnerabilities 1
-
Medium 4.8
GCC's-fstack-protector fails to guard dynamically-sized local variables on AArch64
**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables in your application without this being detected. This stack-prote…