Security update for gcc48 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:2015-1 Final 1 1 2022-06-08T09:23:12Z current 2022-06-08T09:23:12Z 2022-06-08T09:23:12Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for gcc48 This update for gcc48 fixes the following issues: - CVE-2019-14250: Fixed an integer overflow that could lead to an invalid memory access (bsc#1142649). Non-security fixes: - Fixed an issue with manual page builds (bsc#1185395). - Fixed an issue with static initializers (bsc#1177947). - Fixed an issue with exception handling on s390x (bsc#1161913). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES12-SP4-SAP-Azure-LI-BYOS-Production-2022-2015,Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production-2022-2015,Image SLES12-SP5-Azure-SAP-BYOS-2022-2015,Image SLES12-SP5-Azure-SAP-On-Demand-2022-2015,Image SLES12-SP5-EC2-SAP-BYOS-2022-2015,Image SLES12-SP5-EC2-SAP-On-Demand-2022-2015,Image SLES12-SP5-GCE-SAP-BYOS-2022-2015,Image SLES12-SP5-GCE-SAP-On-Demand-2022-2015,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2022-2015,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2022-2015,SUSE-2022-2015,SUSE-SLE-SDK-12-SP5-2022-2015,SUSE-SLE-SERVER-12-SP5-2022-2015,SUSE-SLE-WE-12-SP5-2022-2015 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20222015-1/ Link for SUSE-SU-2022:2015-1 https://lists.suse.com/pipermail/sle-security-updates/2022-June/011253.html E-Mail link for SUSE-SU-2022:2015-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1142649 SUSE Bug 1142649 https://bugzilla.suse.com/1161913 SUSE Bug 1161913 https://bugzilla.suse.com/1177947 SUSE Bug 1177947 https://bugzilla.suse.com/1178675 SUSE Bug 1178675 https://bugzilla.suse.com/1185395 SUSE Bug 1185395 https://www.suse.com/security/cve/CVE-2019-14250/ SUSE CVE CVE-2019-14250 page Image SLES12-SP4-SAP-Azure-LI-BYOS-Production Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 cpp48-4.8.5-31.26.1 cross-aarch64-gcc48-icecream-backend-4.8.5-31.26.1 cross-armv6hl-gcc48-icecream-backend-4.8.5-31.26.1 cross-armv7hl-gcc48-icecream-backend-4.8.5-31.26.1 cross-i386-gcc48-icecream-backend-4.8.5-31.26.1 cross-ia64-gcc48-icecream-backend-4.8.5-31.26.1 cross-ppc-gcc48-icecream-backend-4.8.5-31.26.1 cross-ppc64-gcc48-icecream-backend-4.8.5-31.26.1 cross-s390-gcc48-icecream-backend-4.8.5-31.26.1 cross-s390x-gcc48-icecream-backend-4.8.5-31.26.1 cross-x86_64-gcc48-icecream-backend-4.8.5-31.26.1 gcc48-4.8.5-31.26.1 gcc48-32bit-4.8.5-31.26.1 gcc48-ada-4.8.5-31.26.1 gcc48-ada-32bit-4.8.5-31.26.1 gcc48-c++-4.8.5-31.26.1 gcc48-fortran-4.8.5-31.26.1 gcc48-fortran-32bit-4.8.5-31.26.1 gcc48-gij-4.8.5-31.26.1 gcc48-gij-32bit-4.8.5-31.26.1 gcc48-gij-64bit-4.8.5-31.26.1 gcc48-info-4.8.5-31.26.1 gcc48-java-4.8.5-31.26.1 gcc48-locale-4.8.5-31.26.1 gcc48-obj-c++-4.8.5-31.26.1 gcc48-objc-4.8.5-31.26.1 gcc48-objc-32bit-4.8.5-31.26.1 gcc48-testresults-4.8.5-31.26.1 libada48-4.8.5-31.26.1 libada48-32bit-4.8.5-31.26.1 libasan0-4.8.5-31.26.1 libasan0-32bit-4.8.5-31.26.1 libatomic1-gcc48-4.8.5-31.26.1 libatomic1-gcc48-32bit-4.8.5-31.26.1 libffi4-gcc48-4.8.5-31.26.1 libffi4-gcc48-32bit-4.8.5-31.26.1 libffi48-devel-4.8.5-31.26.1 libffi48-devel-32bit-4.8.5-31.26.1 libgcc_s1-gcc48-4.8.5-31.26.1 libgcc_s1-gcc48-32bit-4.8.5-31.26.1 libgcj48-4.8.5-31.26.1 libgcj48-32bit-4.8.5-31.26.1 libgcj48-64bit-4.8.5-31.26.1 libgcj48-devel-4.8.5-31.26.1 libgcj48-devel-32bit-4.8.5-31.26.1 libgcj48-devel-64bit-4.8.5-31.26.1 libgcj48-jar-4.8.5-31.26.1 libgcj_bc1-4.8.5-31.26.1 libgfortran3-gcc48-4.8.5-31.26.1 libgfortran3-gcc48-32bit-4.8.5-31.26.1 libgomp1-gcc48-4.8.5-31.26.1 libgomp1-gcc48-32bit-4.8.5-31.26.1 libitm1-gcc48-4.8.5-31.26.1 libitm1-gcc48-32bit-4.8.5-31.26.1 libobjc4-gcc48-4.8.5-31.26.1 libobjc4-gcc48-32bit-4.8.5-31.26.1 libquadmath0-gcc48-4.8.5-31.26.1 libquadmath0-gcc48-32bit-4.8.5-31.26.1 libstdc++48-devel-4.8.5-31.26.1 libstdc++48-devel-32bit-4.8.5-31.26.1 libstdc++48-doc-4.8.5-31.26.1 libstdc++6-gcc48-4.8.5-31.26.1 libstdc++6-gcc48-32bit-4.8.5-31.26.1 libstdc++6-gcc48-locale-4.8.5-31.26.1 libtsan0-gcc48-4.8.5-31.26.1 cpp48-4.8.5-31.26.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production cpp48-4.8.5-31.26.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production cpp48-4.8.5-31.26.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS cpp48-4.8.5-31.26.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand cpp48-4.8.5-31.26.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS cpp48-4.8.5-31.26.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand cpp48-4.8.5-31.26.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS cpp48-4.8.5-31.26.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand cpp48-4.8.5-31.26.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production cpp48-4.8.5-31.26.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production cpp48-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Server 12 SP5 gcc48-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Server 12 SP5 gcc48-32bit-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Server 12 SP5 gcc48-c++-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Server 12 SP5 gcc48-info-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Server 12 SP5 gcc48-locale-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Server 12 SP5 libasan0-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Server 12 SP5 libasan0-32bit-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Server 12 SP5 libstdc++48-devel-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Server 12 SP5 libstdc++48-devel-32bit-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Server 12 SP5 cpp48-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 gcc48-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 gcc48-32bit-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 gcc48-c++-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 gcc48-info-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 gcc48-locale-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libasan0-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libasan0-32bit-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libstdc++48-devel-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libstdc++48-devel-32bit-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 gcc48-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 gcc48-ada-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 gcc48-c++-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 gcc48-fortran-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 gcc48-gij-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 gcc48-info-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 gcc48-java-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 gcc48-locale-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 gcc48-obj-c++-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 gcc48-objc-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 gcc48-objc-32bit-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libada48-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libffi48-devel-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libgcj48-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libgcj48-devel-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libgcj48-jar-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libgcj_bc1-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libstdc++48-devel-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 gcc48-gij-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 gcc48-gij-32bit-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 libgcj48-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 libgcj48-32bit-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 libgcj48-jar-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 libgcj_bc1-4.8.5-31.26.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value, leading to an integer overflow and resultant heap-based buffer overflow. CVE-2019-14250 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cpp48-4.8.5-31.26.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cpp48-4.8.5-31.26.1 Image SLES12-SP5-Azure-SAP-BYOS:cpp48-4.8.5-31.26.1 Image SLES12-SP5-Azure-SAP-On-Demand:cpp48-4.8.5-31.26.1 Image SLES12-SP5-EC2-SAP-BYOS:cpp48-4.8.5-31.26.1 Image SLES12-SP5-EC2-SAP-On-Demand:cpp48-4.8.5-31.26.1 Image SLES12-SP5-GCE-SAP-BYOS:cpp48-4.8.5-31.26.1 Image SLES12-SP5-GCE-SAP-On-Demand:cpp48-4.8.5-31.26.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:cpp48-4.8.5-31.26.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:cpp48-4.8.5-31.26.1 SUSE Linux Enterprise Server 12 SP5:cpp48-4.8.5-31.26.1 SUSE Linux Enterprise Server 12 SP5:gcc48-32bit-4.8.5-31.26.1 SUSE Linux Enterprise Server 12 SP5:gcc48-4.8.5-31.26.1 SUSE Linux Enterprise Server 12 SP5:gcc48-c++-4.8.5-31.26.1 SUSE Linux Enterprise Server 12 SP5:gcc48-info-4.8.5-31.26.1 SUSE Linux Enterprise Server 12 SP5:gcc48-locale-4.8.5-31.26.1 SUSE Linux Enterprise Server 12 SP5:libasan0-32bit-4.8.5-31.26.1 SUSE Linux Enterprise Server 12 SP5:libasan0-4.8.5-31.26.1 SUSE Linux Enterprise Server 12 SP5:libstdc++48-devel-32bit-4.8.5-31.26.1 SUSE Linux Enterprise Server 12 SP5:libstdc++48-devel-4.8.5-31.26.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:cpp48-4.8.5-31.26.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:gcc48-32bit-4.8.5-31.26.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:gcc48-4.8.5-31.26.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:gcc48-c++-4.8.5-31.26.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:gcc48-info-4.8.5-31.26.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:gcc48-locale-4.8.5-31.26.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libasan0-32bit-4.8.5-31.26.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libasan0-4.8.5-31.26.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libstdc++48-devel-32bit-4.8.5-31.26.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libstdc++48-devel-4.8.5-31.26.1 SUSE Linux Enterprise Software Development Kit 12 SP5:gcc48-4.8.5-31.26.1 SUSE Linux Enterprise Software Development Kit 12 SP5:gcc48-ada-4.8.5-31.26.1 SUSE Linux Enterprise Software Development Kit 12 SP5:gcc48-c++-4.8.5-31.26.1 SUSE Linux Enterprise Software Development Kit 12 SP5:gcc48-fortran-4.8.5-31.26.1 SUSE Linux Enterprise Software Development Kit 12 SP5:gcc48-gij-4.8.5-31.26.1 SUSE Linux Enterprise Software Development Kit 12 SP5:gcc48-info-4.8.5-31.26.1 SUSE Linux Enterprise Software Development Kit 12 SP5:gcc48-java-4.8.5-31.26.1 SUSE Linux Enterprise Software Development Kit 12 SP5:gcc48-locale-4.8.5-31.26.1 SUSE Linux Enterprise Software Development Kit 12 SP5:gcc48-obj-c++-4.8.5-31.26.1 SUSE Linux Enterprise Software Development Kit 12 SP5:gcc48-objc-32bit-4.8.5-31.26.1 SUSE Linux Enterprise Software Development Kit 12 SP5:gcc48-objc-4.8.5-31.26.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libada48-4.8.5-31.26.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libffi48-devel-4.8.5-31.26.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libgcj48-4.8.5-31.26.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libgcj48-devel-4.8.5-31.26.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libgcj48-jar-4.8.5-31.26.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libgcj_bc1-4.8.5-31.26.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libstdc++48-devel-4.8.5-31.26.1 SUSE Linux Enterprise Workstation Extension 12 SP5:gcc48-gij-32bit-4.8.5-31.26.1 SUSE Linux Enterprise Workstation Extension 12 SP5:gcc48-gij-4.8.5-31.26.1 SUSE Linux Enterprise Workstation Extension 12 SP5:libgcj48-32bit-4.8.5-31.26.1 SUSE Linux Enterprise Workstation Extension 12 SP5:libgcj48-4.8.5-31.26.1 SUSE Linux Enterprise Workstation Extension 12 SP5:libgcj48-jar-4.8.5-31.26.1 SUSE Linux Enterprise Workstation Extension 12 SP5:libgcj_bc1-4.8.5-31.26.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222015-1/ https://www.suse.com/security/cve/CVE-2019-14250.html CVE-2019-14250 https://bugzilla.suse.com/1142649 SUSE Bug 1142649