[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250108

 
 

909

 
 

196064

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS2-2023-2244 --- gcc10

ID: oval:org.secpod.oval:def:1701604Date: (C)2023-09-19   (M)2024-02-26
Class: PATCHFamily: unix




An issue was found in a defense in depth feature of the GCC compiler on aarch64 platforms. The stack protector feature did not detect or defend against overflows of dynamically-sized local variables. This update to the GCC compiler remedies code generation for this defense in depth feature, ensuring it is working as intended.Customers building their own binaries with GCC are advised to update their compiler, and to ensure they are enabling the defense in depth options available to them, such as the stack protector

Platform:
Amazon Linux 2
Product:
gcc10
libstdc++10-devel
libstdc++10-docs
libgfortran10
libitm10-devel
libatomic10-devel
libasan10
cpp10
libquadmath10-devel
Reference:
ALAS2-2023-2244
CVE-2023-4039
CVE    1
CVE-2023-4039
CPE    2
cpe:/a:gcc:gcc10
cpe:/o:amazon:linux:2

© SecPod Technologies