ELSA-2023-12788 -- Oracle gcc_cpp_libasan_libatomic_libgcc_libgfortran_libgomp_libitm_libquadmath_libstdc++_libtsan_libubsan_liblsanID: oval:org.secpod.oval:def:1507000 | Date: (C)2023-09-22 (M)2024-04-25 |
Class: PATCH | Family: unix |
gcc [8.5.0-18.0.5] - CVE-2023-4039 GCC mitigation. Orabug 35751743. Includes removal of aarch64-preserve-args.patch. - CVE-2022-40982 Intel Downfall mitigation. Orabug 35751810. Add two patches originally from GCC upstream releases/gcc-11 branch. with major adjustment. gcc11-downfall-disable-gather-in-vec.patch gcc11-downfall-support-mno-gather.patch Reviewed-by: Jose E. Marchesi lt; jose.marchesi at oracle.com gcc-toolset-11-gcc [11.2.1-9.1.0.6] - CVE-2023-4039 GCC mitigation. Orabug 35751885. - CVE-2022-40982 Intel Downfall mitigation. Orabug 35751901. Add two patches originally from GCC upstream releases/gcc-11 branch. gcc11-downfall-disable-gather-in-vec.patch gcc11-downfall-support-mno-gather.patch Reviewed-by: Jose E. Marchesi lt; jose.marchesi at oracle.com gcc-toolset-12-gcc [12.2.1-7.4.0.2] - CVE-2023-4039 GCC mitigation. Orabug 35751931. - CVE-2022-40982 Intel Downfall mitigation. Orabug 35751938. Add two patches originally from GCC upstream releases/gcc-11 branch. gcc12-downfall-disable-gather-in-vec.patch gcc12-downfall-support-mno-gather.patch - Introduce "oracle_release" into .spec file. Echo it to gcc/DEV-PHASE.
Product: |
gcc |
cpp |
libasan |
libatomic |
libgcc |
libgfortran |
libgomp |
libitm |
libquadmath |
libstdc++ |
libtsan |
libubsan |
liblsan |