{"id":"openSUSE-SU-2020:0716-1","summary":"Security update for gcc9","details":"\n\nThis update includes the GNU Compiler Collection 9.\n\nThis update ships the GCC 9.3 release.\n\nA full changelog is provided by the GCC team on:\n\n   https://www.gnu.org/software/gcc/gcc-9/changes.html\n\n\nThe base system compiler libraries libgcc_s1, libstdc++6 and others are\nnow built by the gcc 9 packages.\n\nTo use it, install 'gcc9' or 'gcc9-c++' or other compiler brands and use CC=gcc-9 /\nCXX=g++-9 during configuration for using it.\n\n\nSecurity issues fixed:\n\n- CVE-2019-15847: Fixed a miscompilation in the POWER9 back end, that optimized multiple calls of the __builtin_darn intrinsic into a single call. (bsc#1149145)\n- CVE-2019-14250: Fixed a heap overflow in the LTO linker. (bsc#1142649)\n\nNon-security issues fixed:\n\n- Split out libstdc++ pretty-printers into a separate package supplementing gdb and the installed runtime. (bsc#1135254)\n- Fixed miscompilation for vector shift on s390. (bsc#1141897)\n- Includes a fix for Internal compiler error when building HepMC (bsc#1167898)\n- Includes fix for binutils version parsing\n- Add libstdc++6-pp provides and conflicts to avoid file conflicts\n  with same minor version of libstdc++6-pp from gcc10.\n- Add gcc9 autodetect -g at lto link (bsc#1149995)\n- Install go tool buildid for bootstrapping go\n","modified":"2026-03-11T07:32:28.924310Z","published":"2020-05-26T05:35:19Z","related":["CVE-2019-14250","CVE-2019-15847"],"upstream":["CVE-2019-14250","CVE-2019-15847"],"references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JTCFGW443IEBOK3ANCBHXSSTATRWPNXY/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1114592"},{"type":"REPORT","url":"https://bugzilla.suse.com/1135254"},{"type":"REPORT","url":"https://bugzilla.suse.com/1141897"},{"type":"REPORT","url":"https://bugzilla.suse.com/1142649"},{"type":"REPORT","url":"https://bugzilla.suse.com/1142654"},{"type":"REPORT","url":"https://bugzilla.suse.com/1148517"},{"type":"REPORT","url":"https://bugzilla.suse.com/1149145"},{"type":"REPORT","url":"https://bugzilla.suse.com/1149995"},{"type":"REPORT","url":"https://bugzilla.suse.com/1152590"},{"type":"REPORT","url":"https://bugzilla.suse.com/1167898"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-14250"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-15847"}],"affected":[{"package":{"name":"cross-nvptx-gcc9","ecosystem":"openSUSE:Leap 15.1","purl":"pkg:rpm/opensuse/cross-nvptx-gcc9&distro=openSUSE%20Leap%2015.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.1+git1296-lp151.2.1"}]}],"ecosystem_specific":{"binaries":[{"gcc9-32bit":"9.3.1+git1296-lp151.2.2","gcc9-go-32bit":"9.3.1+git1296-lp151.2.2","gcc9-go":"9.3.1+git1296-lp151.2.2","libgcc_s1":"9.3.1+git1296-lp151.2.2","cross-nvptx-gcc9":"9.3.1+git1296-lp151.2.1","gcc9-fortran":"9.3.1+git1296-lp151.2.2","libgomp1-32bit":"9.3.1+git1296-lp151.2.2","libstdc++6-pp-gcc9":"9.3.1+git1296-lp151.2.2","libubsan1-32bit":"9.3.1+git1296-lp151.2.2","libubsan1":"9.3.1+git1296-lp151.2.2","libasan5":"9.3.1+git1296-lp151.2.2","libgcc_s1-32bit":"9.3.1+git1296-lp151.2.2","libitm1-32bit":"9.3.1+git1296-lp151.2.2","libstdc++6-devel-gcc9":"9.3.1+git1296-lp151.2.2","libstdc++6":"9.3.1+git1296-lp151.2.2","cpp9":"9.3.1+git1296-lp151.2.2","gcc9-fortran-32bit":"9.3.1+git1296-lp151.2.2","libatomic1":"9.3.1+git1296-lp151.2.2","libitm1":"9.3.1+git1296-lp151.2.2","libstdc++6-32bit":"9.3.1+git1296-lp151.2.2","libstdc++6-devel-gcc9-32bit":"9.3.1+git1296-lp151.2.2","libstdc++6-pp-gcc9-32bit":"9.3.1+git1296-lp151.2.2","gcc9-c++-32bit":"9.3.1+git1296-lp151.2.2","gcc9-info":"9.3.1+git1296-lp151.2.2","libada9-32bit":"9.3.1+git1296-lp151.2.2","libatomic1-32bit":"9.3.1+git1296-lp151.2.2","gcc9-c++":"9.3.1+git1296-lp151.2.2","gcc9":"9.3.1+git1296-lp151.2.2","libasan5-32bit":"9.3.1+git1296-lp151.2.2","libgfortran5-32bit":"9.3.1+git1296-lp151.2.2","libgo14-32bit":"9.3.1+git1296-lp151.2.2","libquadmath0":"9.3.1+git1296-lp151.2.2","gcc9-ada":"9.3.1+git1296-lp151.2.2","gcc9-locale":"9.3.1+git1296-lp151.2.2","libgo14":"9.3.1+git1296-lp151.2.2","libgomp1":"9.3.1+git1296-lp151.2.2","libquadmath0-32bit":"9.3.1+git1296-lp151.2.2","libstdc++6-locale":"9.3.1+git1296-lp151.2.2","libtsan0":"9.3.1+git1296-lp151.2.2","gcc9-ada-32bit":"9.3.1+git1296-lp151.2.2","libada9":"9.3.1+git1296-lp151.2.2","libgfortran5":"9.3.1+git1296-lp151.2.2","liblsan0":"9.3.1+git1296-lp151.2.2","cross-nvptx-newlib9-devel":"9.3.1+git1296-lp151.2.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2020:0716-1.json"}},{"package":{"name":"gcc9","ecosystem":"openSUSE:Leap 15.1","purl":"pkg:rpm/opensuse/gcc9&distro=openSUSE%20Leap%2015.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.1+git1296-lp151.2.2"}]}],"ecosystem_specific":{"binaries":[{"libubsan1":"9.3.1+git1296-lp151.2.2","gcc9-fortran-32bit":"9.3.1+git1296-lp151.2.2","libgomp1-32bit":"9.3.1+git1296-lp151.2.2","libstdc++6-devel-gcc9-32bit":"9.3.1+git1296-lp151.2.2","gcc9-go-32bit":"9.3.1+git1296-lp151.2.2","libgfortran5":"9.3.1+git1296-lp151.2.2","libitm1-32bit":"9.3.1+git1296-lp151.2.2","libgcc_s1-32bit":"9.3.1+git1296-lp151.2.2","libgo14-32bit":"9.3.1+git1296-lp151.2.2","gcc9-locale":"9.3.1+git1296-lp151.2.2","cross-nvptx-newlib9-devel":"9.3.1+git1296-lp151.2.1","gcc9-32bit":"9.3.1+git1296-lp151.2.2","gcc9-fortran":"9.3.1+git1296-lp151.2.2","gcc9-go":"9.3.1+git1296-lp151.2.2","libasan5-32bit":"9.3.1+git1296-lp151.2.2","libasan5":"9.3.1+git1296-lp151.2.2","libquadmath0":"9.3.1+git1296-lp151.2.2","gcc9-c++":"9.3.1+git1296-lp151.2.2","libada9":"9.3.1+git1296-lp151.2.2","libatomic1-32bit":"9.3.1+git1296-lp151.2.2","libatomic1":"9.3.1+git1296-lp151.2.2","libgcc_s1":"9.3.1+git1296-lp151.2.2","libgomp1":"9.3.1+git1296-lp151.2.2","libitm1":"9.3.1+git1296-lp151.2.2","libstdc++6-devel-gcc9":"9.3.1+git1296-lp151.2.2","cross-nvptx-gcc9":"9.3.1+git1296-lp151.2.1","gcc9-ada":"9.3.1+git1296-lp151.2.2","gcc9":"9.3.1+git1296-lp151.2.2","libada9-32bit":"9.3.1+git1296-lp151.2.2","libgo14":"9.3.1+git1296-lp151.2.2","libstdc++6-32bit":"9.3.1+git1296-lp151.2.2","libstdc++6-locale":"9.3.1+git1296-lp151.2.2","libstdc++6-pp-gcc9":"9.3.1+git1296-lp151.2.2","cpp9":"9.3.1+git1296-lp151.2.2","gcc9-ada-32bit":"9.3.1+git1296-lp151.2.2","gcc9-info":"9.3.1+git1296-lp151.2.2","libstdc++6":"9.3.1+git1296-lp151.2.2","libtsan0":"9.3.1+git1296-lp151.2.2","libgfortran5-32bit":"9.3.1+git1296-lp151.2.2","gcc9-c++-32bit":"9.3.1+git1296-lp151.2.2","liblsan0":"9.3.1+git1296-lp151.2.2","libquadmath0-32bit":"9.3.1+git1296-lp151.2.2","libstdc++6-pp-gcc9-32bit":"9.3.1+git1296-lp151.2.2","libubsan1-32bit":"9.3.1+git1296-lp151.2.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2020:0716-1.json"}}],"schema_version":"1.7.5"}