SUSE-RU-2024:0303-1: Recommended update for gcc7
This update for gcc7 fixes the following issues: Avoid crash when hitting a broken pattern in the s390 backend. Avoid creating recursive DIE references through DWATabstractorigin when using LTO. [bsc#1216488]
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/libgfortran4to a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/libada7to a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/cpp7to a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/gcc7to a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/gcc7-ada-debuginfoto a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/gcc7-debugsourceto a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/gcc7-adato a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/libubsan0to a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/cpp7-debuginfoto a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/libubsan0-debuginfoto a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/gcc7-objcto a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/gcc7-fortran-debuginfoto a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/libasan4to a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/libasan4-debuginfoto a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/libgfortran4-debuginfoto a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/gcc7-localeto a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/gcc7-fortranto a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/libada7-debuginfoto a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/gcc7-debuginfoto a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/gcc7-objc-debuginfoto a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/gcc7-infoto a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/cross-nvptx-gcc7to a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/libcilkrts5-debuginfoto a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/libcilkrts5to a version that resolves this vulnerability.Fixed in 32bit-7.5.0 - Upgrade
Upgrade
suse/libcilkrts5to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-7.5.0 - Upgrade
Upgrade
suse/libgfortran4to a version that resolves this vulnerability.Fixed in 32bit-7.5.0 - Upgrade
Upgrade
suse/libasan4to a version that resolves this vulnerability.Fixed in 32bit-7.5.0 - Upgrade
Upgrade
suse/libcilkrts5to a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/libasan4to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-7.5.0 - Upgrade
Upgrade
suse/libubsan0to a version that resolves this vulnerability.Fixed in 32bit-7.5.0 - Upgrade
Upgrade
suse/cross-nvptx-newlib7-develto a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/libgfortran4to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-7.5.0 - Upgrade
Upgrade
suse/libubsan0to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-7.5.0 - Upgrade
Upgrade
suse/gcc7-fortranto a version that resolves this vulnerability.Fixed in 32bit-7.5.0 - Upgrade
Upgrade
suse/gcc7to a version that resolves this vulnerability.Fixed in 32bit-7.5.0 - Upgrade
Upgrade
suse/cross-rx-gcc7-bootstrap-debugsourceto a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/cross-sparc-gcc7-debugsourceto a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/cross-ppc64-gcc7-icecream-backendto a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/libobjc4-gcc7to a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/cross-sparc64-gcc7-debugsourceto a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/libgomp1-gcc7to a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/cross-mips-gcc7-icecream-backendto a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/cross-epiphany-gcc7-bootstrap-debuginfoto a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/cross-i386-gcc7-icecream-backendto a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/cross-arm-none-gcc7-bootstrap-debuginfoto a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/cross-epiphany-gcc7-bootstrapto a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/libatomic1-gcc7-debuginfoto a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade
suse/cross-hppa-gcc7-icecream-backendto a version that resolves this vulnerability.Fixed in 7.5.0 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Basesystem-15-SP5-2024-303=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-303=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-303=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-303=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-303=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-303=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-303=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-303=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-303=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-303=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-303=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-303=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-303=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-303=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.3-2024-303=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-303=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-Storage-7.1-2024-303=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.5-2024-303=1
Event History
Frequently Asked Questions
What conditions are required to trigger the reported failures?
The update addresses a crash caused by a broken pattern in the s390 backend and recursive DW_AT_abstract_origin DIE references when Link Time Optimization (LTO) is used. The provided data does not identify any affected default runtime configuration.
Which installed components should be reviewed when applying this update?
The advisory lists gcc7 and cpp7, along with gcc7-fortran and the libgfortran4, libubsan0, libasan4, and libcilkrts5 runtime packages. Matching debuginfo packages may also be present.
How can I determine whether this update is relevant to my environment?
Review whether the listed SUSE gcc7-related packages are installed and whether your build workflows target s390 or use LTO. The advisory does not provide affected or fixed package version numbers.