Security update for gcc5 SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2016:1069-1 Final 1 1 2016-04-17T11:34:53Z current 2016-04-17T11:34:53Z 2016-04-17T11:34:53Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for gcc5 The GNU Compiler Collection was updated to version 5.3.1, which brings several fixes and enhancements. The following security issue has been fixed: - Fix C++11 std::random_device short read issue that could lead to predictable randomness. (CVE-2015-5276, bsc#945842) The following non-security issues have been fixed: - Enable frame pointer for TARGET_64BIT_MS_ABI when stack is misaligned. Fixes internal compiler error when building Wine. (bsc#966220) - Fix a PowerPC specific issue in gcc-go that broke compilation of newer versions of Docker. (bsc#964468) - Fix HTM built-ins on PowerPC. (bsc#955382) - Fix libgo certificate lookup. (bsc#953831) - Suppress deprecated-declarations warnings for inline definitions of deprecated virtual methods. (bsc#939460) - Build s390[x] with '--with-tune=z9-109 --with-arch=z900' on SLE11 again. (bsc#954002) - Revert accidental libffi ABI breakage on aarch64. (bsc#968771) - On x86_64, set default 32bit code generation to -march=x86-64 rather than -march=i586. - Add experimental File System TS library. This update was imported from the SUSE:SLE-12:Update update project. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/opensuse-updates/2016-04/msg00052.html E-Mail link for openSUSE-SU-2016:1069-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings openSUSE Leap 42.1 cpp5-5.3.1+r233831-6.1 gcc5-5.3.1+r233831-6.1 gcc5-32bit-5.3.1+r233831-6.1 gcc5-ada-5.3.1+r233831-6.1 gcc5-ada-32bit-5.3.1+r233831-6.1 gcc5-c++-5.3.1+r233831-6.1 gcc5-c++-32bit-5.3.1+r233831-6.1 gcc5-fortran-5.3.1+r233831-6.1 gcc5-fortran-32bit-5.3.1+r233831-6.1 gcc5-go-5.3.1+r233831-6.1 gcc5-go-32bit-5.3.1+r233831-6.1 gcc5-info-5.3.1+r233831-6.1 gcc5-locale-5.3.1+r233831-6.1 gcc5-testresults-5.3.1+r233831-6.2 libada5-5.3.1+r233831-6.1 libada5-32bit-5.3.1+r233831-6.1 libasan2-5.3.1+r233831-6.1 libasan2-32bit-5.3.1+r233831-6.1 libatomic1-5.3.1+r233831-6.1 libatomic1-32bit-5.3.1+r233831-6.1 libcilkrts5-5.3.1+r233831-6.1 libcilkrts5-32bit-5.3.1+r233831-6.1 libffi-devel-gcc5-5.3.1+r233831-6.1 libffi-devel-gcc5-32bit-5.3.1+r233831-6.1 libffi-gcc5-5.3.1+r233831-6.1 libffi4-5.3.1+r233831-6.1 libffi4-32bit-5.3.1+r233831-6.1 libgcc_s1-5.3.1+r233831-6.1 libgcc_s1-32bit-5.3.1+r233831-6.1 libgfortran3-5.3.1+r233831-6.1 libgfortran3-32bit-5.3.1+r233831-6.1 libgo7-5.3.1+r233831-6.1 libgo7-32bit-5.3.1+r233831-6.1 libgomp1-5.3.1+r233831-6.1 libgomp1-32bit-5.3.1+r233831-6.1 libitm1-5.3.1+r233831-6.1 libitm1-32bit-5.3.1+r233831-6.1 liblsan0-5.3.1+r233831-6.1 libmpx0-5.3.1+r233831-6.1 libmpx0-32bit-5.3.1+r233831-6.1 libmpxwrappers0-5.3.1+r233831-6.1 libmpxwrappers0-32bit-5.3.1+r233831-6.1 libquadmath0-5.3.1+r233831-6.1 libquadmath0-32bit-5.3.1+r233831-6.1 libstdc++6-5.3.1+r233831-6.1 libstdc++6-32bit-5.3.1+r233831-6.1 libstdc++6-devel-gcc5-5.3.1+r233831-6.1 libstdc++6-devel-gcc5-32bit-5.3.1+r233831-6.1 libstdc++6-locale-5.3.1+r233831-6.1 libtsan0-5.3.1+r233831-6.1 libubsan0-5.3.1+r233831-6.1 libubsan0-32bit-5.3.1+r233831-6.1 cpp5-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 gcc5-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 gcc5-32bit-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 gcc5-ada-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 gcc5-ada-32bit-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 gcc5-c++-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 gcc5-c++-32bit-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 gcc5-fortran-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 gcc5-fortran-32bit-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 gcc5-go-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 gcc5-go-32bit-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 gcc5-info-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 gcc5-locale-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 gcc5-testresults-5.3.1+r233831-6.2 as a component of openSUSE Leap 42.1 libada5-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libada5-32bit-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libasan2-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libasan2-32bit-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libatomic1-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libatomic1-32bit-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libcilkrts5-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libcilkrts5-32bit-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libffi-devel-gcc5-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libffi-devel-gcc5-32bit-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libffi-gcc5-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libffi4-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libffi4-32bit-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libgcc_s1-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libgcc_s1-32bit-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libgfortran3-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libgfortran3-32bit-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libgo7-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libgo7-32bit-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libgomp1-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libgomp1-32bit-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libitm1-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libitm1-32bit-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 liblsan0-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libmpx0-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libmpx0-32bit-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libmpxwrappers0-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libmpxwrappers0-32bit-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libquadmath0-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libquadmath0-32bit-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libstdc++6-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libstdc++6-32bit-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libstdc++6-devel-gcc5-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libstdc++6-devel-gcc5-32bit-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libstdc++6-locale-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libtsan0-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libubsan0-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 libubsan0-32bit-5.3.1+r233831-6.1 as a component of openSUSE Leap 42.1 The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not properly handle short reads from blocking sources, which makes it easier for context-dependent attackers to predict the random values via unspecified vectors. CVE-2015-5276 openSUSE Leap 42.1:cpp5-5.3.1+r233831-6.1 openSUSE Leap 42.1:gcc5-32bit-5.3.1+r233831-6.1 openSUSE Leap 42.1:gcc5-5.3.1+r233831-6.1 openSUSE Leap 42.1:gcc5-ada-32bit-5.3.1+r233831-6.1 openSUSE Leap 42.1:gcc5-ada-5.3.1+r233831-6.1 openSUSE Leap 42.1:gcc5-c++-32bit-5.3.1+r233831-6.1 openSUSE Leap 42.1:gcc5-c++-5.3.1+r233831-6.1 openSUSE Leap 42.1:gcc5-fortran-32bit-5.3.1+r233831-6.1 openSUSE Leap 42.1:gcc5-fortran-5.3.1+r233831-6.1 openSUSE Leap 42.1:gcc5-go-32bit-5.3.1+r233831-6.1 openSUSE Leap 42.1:gcc5-go-5.3.1+r233831-6.1 openSUSE Leap 42.1:gcc5-info-5.3.1+r233831-6.1 openSUSE Leap 42.1:gcc5-locale-5.3.1+r233831-6.1 openSUSE Leap 42.1:gcc5-testresults-5.3.1+r233831-6.2 openSUSE Leap 42.1:libada5-32bit-5.3.1+r233831-6.1 openSUSE Leap 42.1:libada5-5.3.1+r233831-6.1 openSUSE Leap 42.1:libasan2-32bit-5.3.1+r233831-6.1 openSUSE Leap 42.1:libasan2-5.3.1+r233831-6.1 openSUSE Leap 42.1:libatomic1-32bit-5.3.1+r233831-6.1 openSUSE Leap 42.1:libatomic1-5.3.1+r233831-6.1 openSUSE Leap 42.1:libcilkrts5-32bit-5.3.1+r233831-6.1 openSUSE Leap 42.1:libcilkrts5-5.3.1+r233831-6.1 openSUSE Leap 42.1:libffi-devel-gcc5-32bit-5.3.1+r233831-6.1 openSUSE Leap 42.1:libffi-devel-gcc5-5.3.1+r233831-6.1 openSUSE Leap 42.1:libffi-gcc5-5.3.1+r233831-6.1 openSUSE Leap 42.1:libffi4-32bit-5.3.1+r233831-6.1 openSUSE Leap 42.1:libffi4-5.3.1+r233831-6.1 openSUSE Leap 42.1:libgcc_s1-32bit-5.3.1+r233831-6.1 openSUSE Leap 42.1:libgcc_s1-5.3.1+r233831-6.1 openSUSE Leap 42.1:libgfortran3-32bit-5.3.1+r233831-6.1 openSUSE Leap 42.1:libgfortran3-5.3.1+r233831-6.1 openSUSE Leap 42.1:libgo7-32bit-5.3.1+r233831-6.1 openSUSE Leap 42.1:libgo7-5.3.1+r233831-6.1 openSUSE Leap 42.1:libgomp1-32bit-5.3.1+r233831-6.1 openSUSE Leap 42.1:libgomp1-5.3.1+r233831-6.1 openSUSE Leap 42.1:libitm1-32bit-5.3.1+r233831-6.1 openSUSE Leap 42.1:libitm1-5.3.1+r233831-6.1 openSUSE Leap 42.1:liblsan0-5.3.1+r233831-6.1 openSUSE Leap 42.1:libmpx0-32bit-5.3.1+r233831-6.1 openSUSE Leap 42.1:libmpx0-5.3.1+r233831-6.1 openSUSE Leap 42.1:libmpxwrappers0-32bit-5.3.1+r233831-6.1 openSUSE Leap 42.1:libmpxwrappers0-5.3.1+r233831-6.1 openSUSE Leap 42.1:libquadmath0-32bit-5.3.1+r233831-6.1 openSUSE Leap 42.1:libquadmath0-5.3.1+r233831-6.1 openSUSE Leap 42.1:libstdc++6-32bit-5.3.1+r233831-6.1 openSUSE Leap 42.1:libstdc++6-5.3.1+r233831-6.1 openSUSE Leap 42.1:libstdc++6-devel-gcc5-32bit-5.3.1+r233831-6.1 openSUSE Leap 42.1:libstdc++6-devel-gcc5-5.3.1+r233831-6.1 openSUSE Leap 42.1:libstdc++6-locale-5.3.1+r233831-6.1 openSUSE Leap 42.1:libtsan0-5.3.1+r233831-6.1 openSUSE Leap 42.1:libubsan0-32bit-5.3.1+r233831-6.1 openSUSE Leap 42.1:libubsan0-5.3.1+r233831-6.1 low Please Install the update. https://lists.opensuse.org/opensuse-updates/2016-04/msg00052.html https://www.suse.com/security/cve/CVE-2015-5276.html CVE-2015-5276 https://bugzilla.suse.com/945842 SUSE Bug 945842