Security update for gcc48 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2015:1833-1 Final 1 1 2015-10-07T02:16:47Z current 2015-10-07T02:16:47Z 2015-10-07T02:16:47Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for gcc48 This update for GCC 4.8 provides the following fixes: - Fix C++11 std::random_device short read issue that could lead to predictable randomness. (CVE-2015-5276, bsc#945842) - Fix linker segmentation fault when building SLOF on ppc64le. (bsc#949000) - Fix no_instrument_function attribute handling on PPC64 with -mprofile-kernel. (bsc#947791) - Fix internal compiler error with aarch64 target using PCH and builtin functions. (bsc#947772) - Fix libffi issues on aarch64. (bsc#948168) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-DESKTOP-12-2015-756,SUSE-SLE-SDK-12-2015-756,SUSE-SLE-SERVER-12-2015-756,SUSE-SLE-WE-12-2015-756 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2015/suse-su-20151833-1/ Link for SUSE-SU-2015:1833-1 https://lists.suse.com/pipermail/sle-security-updates/2015-October/001648.html E-Mail link for SUSE-SU-2015:1833-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/945842 SUSE Bug 945842 https://bugzilla.suse.com/947772 SUSE Bug 947772 https://bugzilla.suse.com/947791 SUSE Bug 947791 https://bugzilla.suse.com/948168 SUSE Bug 948168 https://bugzilla.suse.com/949000 SUSE Bug 949000 https://www.suse.com/security/cve/CVE-2015-5276/ SUSE CVE CVE-2015-5276 page SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Workstation Extension 12 cpp48-4.8.5-24.1 gcc48-4.8.5-24.1 gcc48-32bit-4.8.5-24.1 gcc48-c++-4.8.5-24.1 gcc48-gij-4.8.5-24.1 gcc48-gij-32bit-4.8.5-24.1 gcc48-info-4.8.5-24.1 libasan0-4.8.5-24.1 libasan0-32bit-4.8.5-24.1 libgcj48-4.8.5-24.1 libgcj48-32bit-4.8.5-24.1 libgcj48-jar-4.8.5-24.1 libgcj_bc1-4.8.5-24.1 libstdc++48-devel-4.8.5-24.1 libstdc++48-devel-32bit-4.8.5-24.1 gcc48-ada-4.8.5-24.1 gcc48-fortran-4.8.5-24.1 gcc48-java-4.8.5-24.1 gcc48-obj-c++-4.8.5-24.1 gcc48-objc-4.8.5-24.1 gcc48-objc-32bit-4.8.5-24.1 libada48-4.8.5-24.1 libffi48-devel-4.8.5-24.1 libgcj48-devel-4.8.5-24.1 libobjc4-4.8.5-24.1 libobjc4-32bit-4.8.5-24.1 gcc48-locale-4.8.5-24.1 cpp48-4.8.5-24.1 as a component of SUSE Linux Enterprise Desktop 12 gcc48-4.8.5-24.1 as a component of SUSE Linux Enterprise Desktop 12 gcc48-32bit-4.8.5-24.1 as a component of SUSE Linux Enterprise Desktop 12 gcc48-c++-4.8.5-24.1 as a component of SUSE Linux Enterprise Desktop 12 gcc48-gij-4.8.5-24.1 as a component of SUSE Linux Enterprise Desktop 12 gcc48-gij-32bit-4.8.5-24.1 as a component of SUSE Linux Enterprise Desktop 12 gcc48-info-4.8.5-24.1 as a component of SUSE Linux Enterprise Desktop 12 libasan0-4.8.5-24.1 as a component of SUSE Linux Enterprise Desktop 12 libasan0-32bit-4.8.5-24.1 as a component of SUSE Linux Enterprise Desktop 12 libgcj48-4.8.5-24.1 as a component of SUSE Linux Enterprise Desktop 12 libgcj48-32bit-4.8.5-24.1 as a component of SUSE Linux Enterprise Desktop 12 libgcj48-jar-4.8.5-24.1 as a component of SUSE Linux Enterprise Desktop 12 libgcj_bc1-4.8.5-24.1 as a component of SUSE Linux Enterprise Desktop 12 libstdc++48-devel-4.8.5-24.1 as a component of SUSE Linux Enterprise Desktop 12 libstdc++48-devel-32bit-4.8.5-24.1 as a component of SUSE Linux Enterprise Desktop 12 cpp48-4.8.5-24.1 as a component of SUSE Linux Enterprise Server 12 gcc48-4.8.5-24.1 as a component of SUSE Linux Enterprise Server 12 gcc48-32bit-4.8.5-24.1 as a component of SUSE Linux Enterprise Server 12 gcc48-c++-4.8.5-24.1 as a component of SUSE Linux Enterprise Server 12 gcc48-info-4.8.5-24.1 as a component of SUSE Linux Enterprise Server 12 gcc48-locale-4.8.5-24.1 as a component of SUSE Linux Enterprise Server 12 libasan0-4.8.5-24.1 as a component of SUSE Linux Enterprise Server 12 libasan0-32bit-4.8.5-24.1 as a component of SUSE Linux Enterprise Server 12 libstdc++48-devel-4.8.5-24.1 as a component of SUSE Linux Enterprise Server 12 libstdc++48-devel-32bit-4.8.5-24.1 as a component of SUSE Linux Enterprise Server 12 cpp48-4.8.5-24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 gcc48-4.8.5-24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 gcc48-32bit-4.8.5-24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 gcc48-c++-4.8.5-24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 gcc48-info-4.8.5-24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 gcc48-locale-4.8.5-24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 libasan0-4.8.5-24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 libasan0-32bit-4.8.5-24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 libstdc++48-devel-4.8.5-24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 libstdc++48-devel-32bit-4.8.5-24.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 gcc48-ada-4.8.5-24.1 as a component of SUSE Linux Enterprise Software Development Kit 12 gcc48-fortran-4.8.5-24.1 as a component of SUSE Linux Enterprise Software Development Kit 12 gcc48-gij-4.8.5-24.1 as a component of SUSE Linux Enterprise Software Development Kit 12 gcc48-java-4.8.5-24.1 as a component of SUSE Linux Enterprise Software Development Kit 12 gcc48-obj-c++-4.8.5-24.1 as a component of SUSE Linux Enterprise Software Development Kit 12 gcc48-objc-4.8.5-24.1 as a component of SUSE Linux Enterprise Software Development Kit 12 gcc48-objc-32bit-4.8.5-24.1 as a component of SUSE Linux Enterprise Software Development Kit 12 libada48-4.8.5-24.1 as a component of SUSE Linux Enterprise Software Development Kit 12 libffi48-devel-4.8.5-24.1 as a component of SUSE Linux Enterprise Software Development Kit 12 libgcj48-4.8.5-24.1 as a component of SUSE Linux Enterprise Software Development Kit 12 libgcj48-devel-4.8.5-24.1 as a component of SUSE Linux Enterprise Software Development Kit 12 libgcj48-jar-4.8.5-24.1 as a component of SUSE Linux Enterprise Software Development Kit 12 libgcj_bc1-4.8.5-24.1 as a component of SUSE Linux Enterprise Software Development Kit 12 libobjc4-4.8.5-24.1 as a component of SUSE Linux Enterprise Software Development Kit 12 libobjc4-32bit-4.8.5-24.1 as a component of SUSE Linux Enterprise Software Development Kit 12 gcc48-gij-4.8.5-24.1 as a component of SUSE Linux Enterprise Workstation Extension 12 gcc48-gij-32bit-4.8.5-24.1 as a component of SUSE Linux Enterprise Workstation Extension 12 libgcj48-4.8.5-24.1 as a component of SUSE Linux Enterprise Workstation Extension 12 libgcj48-32bit-4.8.5-24.1 as a component of SUSE Linux Enterprise Workstation Extension 12 libgcj48-jar-4.8.5-24.1 as a component of SUSE Linux Enterprise Workstation Extension 12 libgcj_bc1-4.8.5-24.1 as a component of SUSE Linux Enterprise Workstation Extension 12 The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not properly handle short reads from blocking sources, which makes it easier for context-dependent attackers to predict the random values via unspecified vectors. CVE-2015-5276 SUSE Linux Enterprise Desktop 12:cpp48-4.8.5-24.1 SUSE Linux Enterprise Desktop 12:gcc48-32bit-4.8.5-24.1 SUSE Linux Enterprise Desktop 12:gcc48-4.8.5-24.1 SUSE Linux Enterprise Desktop 12:gcc48-c++-4.8.5-24.1 SUSE Linux Enterprise Desktop 12:gcc48-gij-32bit-4.8.5-24.1 SUSE Linux Enterprise Desktop 12:gcc48-gij-4.8.5-24.1 SUSE Linux Enterprise Desktop 12:gcc48-info-4.8.5-24.1 SUSE Linux Enterprise Desktop 12:libasan0-32bit-4.8.5-24.1 SUSE Linux Enterprise Desktop 12:libasan0-4.8.5-24.1 SUSE Linux Enterprise Desktop 12:libgcj48-32bit-4.8.5-24.1 SUSE Linux Enterprise Desktop 12:libgcj48-4.8.5-24.1 SUSE Linux Enterprise Desktop 12:libgcj48-jar-4.8.5-24.1 SUSE Linux Enterprise Desktop 12:libgcj_bc1-4.8.5-24.1 SUSE Linux Enterprise Desktop 12:libstdc++48-devel-32bit-4.8.5-24.1 SUSE Linux Enterprise Desktop 12:libstdc++48-devel-4.8.5-24.1 SUSE Linux Enterprise Server 12:cpp48-4.8.5-24.1 SUSE Linux Enterprise Server 12:gcc48-32bit-4.8.5-24.1 SUSE Linux Enterprise Server 12:gcc48-4.8.5-24.1 SUSE Linux Enterprise Server 12:gcc48-c++-4.8.5-24.1 SUSE Linux Enterprise Server 12:gcc48-info-4.8.5-24.1 SUSE Linux Enterprise Server 12:gcc48-locale-4.8.5-24.1 SUSE Linux Enterprise Server 12:libasan0-32bit-4.8.5-24.1 SUSE Linux Enterprise Server 12:libasan0-4.8.5-24.1 SUSE Linux Enterprise Server 12:libstdc++48-devel-32bit-4.8.5-24.1 SUSE Linux Enterprise Server 12:libstdc++48-devel-4.8.5-24.1 SUSE Linux Enterprise Server for SAP Applications 12:cpp48-4.8.5-24.1 SUSE Linux Enterprise Server for SAP Applications 12:gcc48-32bit-4.8.5-24.1 SUSE Linux Enterprise Server for SAP Applications 12:gcc48-4.8.5-24.1 SUSE Linux Enterprise Server for SAP Applications 12:gcc48-c++-4.8.5-24.1 SUSE Linux Enterprise Server for SAP Applications 12:gcc48-info-4.8.5-24.1 SUSE Linux Enterprise Server for SAP Applications 12:gcc48-locale-4.8.5-24.1 SUSE Linux Enterprise Server for SAP Applications 12:libasan0-32bit-4.8.5-24.1 SUSE Linux Enterprise Server for SAP Applications 12:libasan0-4.8.5-24.1 SUSE Linux Enterprise Server for SAP Applications 12:libstdc++48-devel-32bit-4.8.5-24.1 SUSE Linux Enterprise Server for SAP Applications 12:libstdc++48-devel-4.8.5-24.1 SUSE Linux Enterprise Software Development Kit 12:gcc48-ada-4.8.5-24.1 SUSE Linux Enterprise Software Development Kit 12:gcc48-fortran-4.8.5-24.1 SUSE Linux Enterprise Software Development Kit 12:gcc48-gij-4.8.5-24.1 SUSE Linux Enterprise Software Development Kit 12:gcc48-java-4.8.5-24.1 SUSE Linux Enterprise Software Development Kit 12:gcc48-obj-c++-4.8.5-24.1 SUSE Linux Enterprise Software Development Kit 12:gcc48-objc-32bit-4.8.5-24.1 SUSE Linux Enterprise Software Development Kit 12:gcc48-objc-4.8.5-24.1 SUSE Linux Enterprise Software Development Kit 12:libada48-4.8.5-24.1 SUSE Linux Enterprise Software Development Kit 12:libffi48-devel-4.8.5-24.1 SUSE Linux Enterprise Software Development Kit 12:libgcj48-4.8.5-24.1 SUSE Linux Enterprise Software Development Kit 12:libgcj48-devel-4.8.5-24.1 SUSE Linux Enterprise Software Development Kit 12:libgcj48-jar-4.8.5-24.1 SUSE Linux Enterprise Software Development Kit 12:libgcj_bc1-4.8.5-24.1 SUSE Linux Enterprise Software Development Kit 12:libobjc4-32bit-4.8.5-24.1 SUSE Linux Enterprise Software Development Kit 12:libobjc4-4.8.5-24.1 SUSE Linux Enterprise Workstation Extension 12:gcc48-gij-32bit-4.8.5-24.1 SUSE Linux Enterprise Workstation Extension 12:gcc48-gij-4.8.5-24.1 SUSE Linux Enterprise Workstation Extension 12:libgcj48-32bit-4.8.5-24.1 SUSE Linux Enterprise Workstation Extension 12:libgcj48-4.8.5-24.1 SUSE Linux Enterprise Workstation Extension 12:libgcj48-jar-4.8.5-24.1 SUSE Linux Enterprise Workstation Extension 12:libgcj_bc1-4.8.5-24.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151833-1/ https://www.suse.com/security/cve/CVE-2015-5276.html CVE-2015-5276 https://bugzilla.suse.com/945842 SUSE Bug 945842