CVE-2020-13844

This update for gcc10, nvptx-tools fixes the following issues:

This update provides the GCC10 compiler suite and runtime libraries.

The base SUSE Linux Enterprise libraries libgcc_s1, libstdc++6 are replaced by the gcc10 variants.

The new compiler variants are available with '-10' suffix, you can specify them via:

CC=gcc-10
CXX=g++-10

or similar commands.

For a detailed changelog check out https://gcc.gnu.org/gcc-10/changes.html

Changes in nvptx-tools:

• Enable build on aarch64

This update was imported from the SUSE:SLE-15:Update update project.

This update for gcc7 fixes the following issues:

• CVE-2020-13844: Added mitigation for aarch64 Straight Line Speculation issue (bsc#1172798)
• Enable fortran for the nvptx offload compiler.
• Update README.First-for.SuSE.packagers
• avoid assembler errors with AVX512 gather and scatter instructions when using -masm=intel.
• Backport the aarch64 -moutline-atomics feature and accumulated fixes but not its default enabling. [jsc#SLE-12209, bsc#1167939]
• Fixed 32bit libgnat.so link. [bsc#1178675]
• Fixed memcpy miscompilation on aarch64. [bsc#1178624, bsc#1178577]
• Fixed debug line info for try/catch. [bsc#1178614]
• Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is used to build gcc7 (ie when ada is enabled)
• Fixed corruption of pass private ->aux via DF. [gcc#94148]
• Fixed debug information issue with inlined functions and passed by reference arguments. [gcc#93888]
• Fixed binutils release date detection issue.
• Fixed register allocation issue with exception handling code on s390x. [bsc#1161913]
• Fixed miscompilation of some atomic code on aarch64. [bsc#1150164]

This update was imported from the SUSE:SLE-15:Update update project.

This update for gcc7 fixes the following issues:

• CVE-2020-13844: Added mitigation for aarch64 Straight Line Speculation issue (bsc#1172798)
• Enable fortran for the nvptx offload compiler.
• Update README.First-for.SuSE.packagers
• avoid assembler errors with AVX512 gather and scatter instructions when using -masm=intel.
• Backport the aarch64 -moutline-atomics feature and accumulated fixes but not its default enabling. [jsc#SLE-12209, bsc#1167939]
• Fixed 32bit libgnat.so link. [bsc#1178675]
• Fixed memcpy miscompilation on aarch64. [bsc#1178624, bsc#1178577]
• Fixed debug line info for try/catch. [bsc#1178614]
• Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is used to build gcc7 (ie when ada is enabled)
• Fixed corruption of pass private ->aux via DF. [gcc#94148]
• Fixed debug information issue with inlined functions and passed by reference arguments. [gcc#93888]
• Fixed binutils release date detection issue.
• Fixed register allocation issue with exception handling code on s390x. [bsc#1161913]
• Fixed miscompilation of some atomic code on aarch64. [bsc#1150164]

This update was imported from the SUSE:SLE-15:Update update project.

These are all security issues fixed in the cpp10-10.3.1+git1893-2.8 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the cpp7-7.5.0+r278197-10.1 package on the GA media of openSUSE Tumbleweed.

In exception handling functions of multiple files, there is a possible info leak due to side channel information disclosure. This could lead to local information disclosure from the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

This update for gcc10, nvptx-tools fixes the following issues:

This update provides the GCC10 compiler suite and runtime libraries.

The base SUSE Linux Enterprise libraries libgcc_s1, libstdc++6 are replaced by the gcc10 variants.

The new compiler variants are available with '-10' suffix, you can specify them via:

CC=gcc-10
CXX=g++-10

or similar commands.

For a detailed changelog check out https://gcc.gnu.org/gcc-10/changes.html

Changes in nvptx-tools:

• Enable build on aarch64

This update for gcc10 fixes the following issues: This update provides the GCC10 compiler suite and runtime libraries.

The base SUSE Linux Enterprise libraries libgcc_s1, libstdc++6 are replaced by the gcc10 variants.

The new compiler variants are available with '-10' suffix, you can specify them via:

    CC=gcc-10
    CXX=g++-10

or similar commands.

For a detailed changelog check out https://gcc.gnu.org/gcc-10/changes.html

This update for gcc7 fixes the following issues:

• CVE-2020-13844: Added mitigation for aarch64 Straight Line Speculation issue (bsc#1172798)
• Enable fortran for the nvptx offload compiler.
• Update README.First-for.SuSE.packagers
• avoid assembler errors with AVX512 gather and scatter instructions when using -masm=intel.
• Backport the aarch64 -moutline-atomics feature and accumulated fixes but not its default enabling. [jsc#SLE-12209, bsc#1167939]
• Fixed 32bit libgnat.so link. [bsc#1178675]
• Fixed memcpy miscompilation on aarch64. [bsc#1178624, bsc#1178577]
• Fixed debug line info for try/catch. [bsc#1178614]
• Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is used to build gcc7 (ie when ada is enabled)
• Fixed corruption of pass private ->aux via DF. [gcc#94148]
• Fixed debug information issue with inlined functions and passed by reference arguments. [gcc#93888]
• Fixed binutils release date detection issue.
• Fixed register allocation issue with exception handling code on s390x. [bsc#1161913]
• Fixed miscompilation of some atomic code on aarch64. [bsc#1150164]

This update for gcc7 fixes the following issues:

Security issues fixed:

• CVE-2023-4039: Fixed incorrect stack protector for C99 VLAs on Aarch64 (bsc#1214052).
• CVE-2019-15847: Fixed POWER9 DARN miscompilation. (bsc#1149145)
• CVE-2019-14250: Includes fix for LTO linker plugin heap overflow. (bsc#1142649)

Update to GCC 7.5.0 release.

Other changes:

• Fixed KASAN kernel compile. (bsc#1205145)
• Fixed ICE with C++17 code. (bsc#1204505)
• Fixed altivec.h redefining bool in C++ which makes bool unusable (bsc#1195517):
• Adjust gnats idea of the target, fixing the build of gprbuild. [bsc#1196861]
• Do not handle exceptions in std::thread (jsc#CAR-1182)
• add -fpatchable-function-entry feature to gcc-7.
• Fixed glibc namespace violation with getauxval. (bsc#1167939)
• Backport aarch64 Straight Line Speculation mitigation [bsc#1172798, CVE-2020-13844]
• Enable fortran for the nvptx offload compiler.
• Update README.First-for.SuSE.packagers
• Avoid assembler errors with AVX512 gather and scatter instructions when using -masm=intel.
• Backport the aarch64 -moutline-atomics feature and accumulated fixes but not its default enabling. (jsc#SLE-12209, bsc#1167939)
• Fixed memcpy miscompilation on aarch64. (bsc#1178624, bsc#1178577)
• Fixed debug line info for try/catch. (bsc#1178614)
• Fixed corruption of pass private ->aux via DF. (gcc#94148)
• Fixed debug information issue with inlined functions and passed by reference arguments. [gcc#93888]
• Fixed register allocation issue with exception handling code on s390x. (bsc#1161913)
• Backport PR target/92692 to fix miscompilation of some atomic code on aarch64. (bsc#1150164)
• Fixed miscompilation in vectorized code for s390x. (bsc#1160086) [gcc#92950]
• Fixed miscompilation with thread-safe local static initialization. [gcc#85887]
• Fixed debug info created for array definitions that complete an earlier declaration. [bsc#1146475]
• Fixed vector shift miscompilation on s390. (bsc#1141897)
• Add gcc7 -flive-patching patch. [bsc#1071995, fate#323487]
• Strip -flto from $optflags.
• Disables switch jump-tables when retpolines are used. (bsc#1131264, jsc#SLE-6738)
• Fixed ICE compiling tensorflow on aarch64. (bsc#1129389)
• Fixed for aarch64 FMA steering pass use-after-free. (bsc#1128794)
• Fixed ICE compiling tensorflow. (bsc#1129389)
• Fixed s390x FP load-and-test issue. (bsc#1124644)
• Adjust gnat manual entries in the info directory. (bsc#1114592)
• Fixed to no longer try linking -lieee with -mieee-fp. (bsc#1084842)