SUSE-SU-2023:3661-1: Security update for gcc12
This update for gcc12 fixes the following issues: CVE-2023-4039: Fixed incorrect stack protector for C99 VLAs on Aarch64 (bsc#1214052).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/gcc12-debugsourceto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/gcc12-debuginfoto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/gcc12-objcto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/gcc12-go-debuginfoto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/gcc12-ada-debuginfoto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/gcc12-adato a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/cpp12to a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/gcc12-testresultsto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/libada12-debuginfoto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/liblsan0-debuginfoto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/libubsan1to a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/cpp12-debuginfoto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/libgo21-debuginfoto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/libobjc4-debuginfoto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/libtsan2-debuginfoto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/liblsan0to a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/gcc12-fortranto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/libasan8-debuginfoto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/gcc12-PIEto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/libasan8to a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/libobjc4to a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/libgomp1-debuginfoto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/gcc12-objc-debuginfoto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/gcc12to a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/libubsan1-debuginfoto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/libtsan2to a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/libatomic1-debuginfoto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/libatomic1to a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/gcc12-localeto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/libitm1to a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/gcc12-fortran-debuginfoto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/libada12to a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/libgo21to a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/libitm1-debuginfoto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/libgomp1to a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/libgfortran5to a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/libgfortran5-debuginfoto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/gcc12-goto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/libada12to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-12.3.0 - Upgrade
Upgrade
suse/cross-nvptx-newlib12-develto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/gcc12-goto a version that resolves this vulnerability.Fixed in 32bit-12.3.0 - Upgrade
Upgrade
suse/libasan8to a version that resolves this vulnerability.Fixed in 32bit-12.3.0 - Upgrade
Upgrade
suse/libgo21to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-12.3.0 - Upgrade
Upgrade
suse/libgphobos3to a version that resolves this vulnerability.Fixed in 32bit-12.3.0 - Upgrade
Upgrade
suse/libgphobos3to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-12.3.0 - Upgrade
Upgrade
suse/gcc12-adato a version that resolves this vulnerability.Fixed in 32bit-12.3.0 - Upgrade
Upgrade
suse/gcc12-dto a version that resolves this vulnerability.Fixed in 32bit-12.3.0 - Upgrade
Upgrade
suse/libgdruntime3to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-12.3.0 - Upgrade
Upgrade
suse/cross-nvptx-gcc12to a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/libasan8to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-12.3.0 - Upgrade
Upgrade
suse/libquadmath0to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-12.3.0 - Upgrade
Upgrade
suse/gcc12to a version that resolves this vulnerability.Fixed in 32bit-12.3.0 - Upgrade
Upgrade
suse/cross-nvptx-gcc12-debuginfoto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/libada12to a version that resolves this vulnerability.Fixed in 32bit-12.3.0 - Upgrade
Upgrade
suse/libgo21to a version that resolves this vulnerability.Fixed in 32bit-12.3.0 - Upgrade
Upgrade
suse/gcc12-fortranto a version that resolves this vulnerability.Fixed in 32bit-12.3.0 - Upgrade
Upgrade
suse/libquadmath0to a version that resolves this vulnerability.Fixed in 32bit-12.3.0 - Upgrade
Upgrade
suse/libgdruntime3to a version that resolves this vulnerability.Fixed in 32bit-12.3.0 - Upgrade
Upgrade
suse/cross-nvptx-gcc12-debugsourceto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/gcc12-objcto a version that resolves this vulnerability.Fixed in 32bit-12.3.0 - Upgrade
Upgrade
suse/libgdruntime3-debuginfoto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/libgdruntime3to a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/gcc12-d-debuginfoto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/libgphobos3to a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/libgphobos3-debuginfoto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/gcc12-dto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/gcc12-infoto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/libgomp1to a version that resolves this vulnerability.Fixed in 32bit-12.3.0 - Upgrade
Upgrade
suse/libgfortran5to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-12.3.0 - Upgrade
Upgrade
suse/libatomic1to a version that resolves this vulnerability.Fixed in 32bit-12.3.0 - Upgrade
Upgrade
suse/libobjc4to a version that resolves this vulnerability.Fixed in 32bit-12.3.0 - Upgrade
Upgrade
suse/libgomp1to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-12.3.0 - Upgrade
Upgrade
suse/libatomic1to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-12.3.0 - Upgrade
Upgrade
suse/libitm1to a version that resolves this vulnerability.Fixed in 32bit-12.3.0 - Upgrade
Upgrade
suse/libitm1to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-12.3.0 - Upgrade
Upgrade
suse/libubsan1to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-12.3.0 - Upgrade
Upgrade
suse/libubsan1to a version that resolves this vulnerability.Fixed in 32bit-12.3.0 - Upgrade
Upgrade
suse/libobjc4to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-12.3.0 - Upgrade
Upgrade
suse/libgfortran5to a version that resolves this vulnerability.Fixed in 32bit-12.3.0 - Upgrade
Upgrade
suse/libquadmath0-debuginfoto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/libquadmath0to a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/libhwasan0-debuginfoto a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade
suse/libhwasan0to a version that resolves this vulnerability.Fixed in 12.3.0 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-INSTALLER-15-SP1-2023-3661=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-INSTALLER-15-SP2-2023-3661=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-INSTALLER-15-SP3-2023-3661=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-INSTALLER-15-SP4-2023-3661=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.3-2023-3661=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.4-2023-3661=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Basesystem-15-SP4-2023-3661=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Basesystem-15-SP5-2023-3661=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-3661=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-3661=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Legacy-15-SP4-2023-3661=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-3661=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-3661=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-3661=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-3661=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-3661=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-3661=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-3661=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-3661=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-3661=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-3661=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-3661=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-3661=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-3661=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.2-2023-3661=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-3661=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SUSE-MicroOS-5.1-2023-3661=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SUSE-MicroOS-5.2-2023-3661=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-Storage-7-2023-3661=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-Leap-Micro-5.3-2023-3661=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-Leap-Micro-5.4-2023-3661=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.4-2023-3661=1