Every CVE Search/ Get API key

CVE-2023-4039

GCC's-fstack-protector fails to guard dynamically-sized local variables on AArch64

4.8 MediumFix availableDisputed

DISPUTEDA failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables in your application without this being detected. This stack-protector failure only applies to C99-style dynamically-sized local variables or those created using alloca(). The stack-protector operates as intended for statically-sized local variables.

The default behavior when the stack-protector detects an overflow is to terminate your application, resulting in controlled loss of availability. An attacker who can exploit a buffer overflow without triggering the stack-protector might be able to change program flow control to cause an uncontrolled loss of availability or to go further and affect confidentiality or integrity. NOTE: The GCC project argues that this is a missed hardening bug and not a vulnerability by itself.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
None

Exploit likelihood

1.04%Up 1.0 points since Sep 13, 2023
90%50%10%1%

What each source reports

CVE List Score used 4.8

GCC's-fstack-protector fails to guard dynamically-sized local variables on AArch64

DISPUTEDA failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables in your application without this being detected. This stack-protector failure only applies to C99-style dynamically-sized local variables or those created using alloca(). The stack-protector operates as intended for statically-sized local variables.

The default behavior when the stack-protector detects an overflow is to terminate your application, resulting in controlled loss of availability. An attacker who can exploit a buffer overflow without triggering the stack-protector might be able to change program flow control to cause an uncontrolled loss of availability or to go further and affect confidentiality or integrity. NOTE: The GCC project argues that this is a missed hardening bug and not a vulnerability by itself.

Record
CVE-2023-4039
CVSS 3.1
4.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Weakness
CWE-693
Updated
2026-11-02
EUVDEUVD-2023-53931 4.8

DISPUTEDA failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables in your application without this being detected. This stack-protector failure only applies to C99-style dynamically-sized local variables or those created using alloca(). The stack-protector operates as intended for statically-sized local variables.

The default behavior when the stack-protector detects an overflow is to terminate your application, resulting in controlled loss of availability. An attacker who can exploit a buffer overflow without triggering the stack-protector might be able to change program flow control to cause an uncontrolled loss of availability or to go further and affect confidentiality or integrity. NOTE: The GCC project argues that this is a missed hardening bug and not a vulnerability by itself.

Record
EUVD-2023-53931
CVSS 3.1
4.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
NVD 4.8

DISPUTEDA failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables in your application without this being detected. This stack-protector failure only applies to C99-style dynamically-sized local variables or those created using alloca(). The stack-protector operates as intended for statically-sized local variables.

The default behavior when the stack-protector detects an overflow is to terminate your application, resulting in controlled loss of availability. An attacker who can exploit a buffer overflow without triggering the stack-protector might be able to change program flow control to cause an uncontrolled loss of availability or to go further and affect confidentiality or integrity. NOTE: The GCC project argues that this is a missed hardening bug and not a vulnerability by itself.

Record
CVE-2023-4039
CVSS 3.1
4.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Weakness
CWE-693
Updated
2026-11-02
OSVALPINE-CVE-2023-4039 4.8

DISPUTEDA failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables in your application without this being detected. This stack-protector failure only applies to C99-style dynamically-sized local variables or those created using alloca(). The stack-protector operates as intended for statically-sized local variables.

The default behavior when the stack-protector detects an overflow is to terminate your application, resulting in controlled loss of availability. An attacker who can exploit a buffer overflow without triggering the stack-protector might be able to change program flow control to cause an uncontrolled loss of availability or to go further and affect confidentiality or integrity. NOTE: The GCC project argues that this is a missed hardening bug and not a vulnerability by itself.

Record
ALPINE-CVE-2023-4039
CVSS 3.1
4.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVAZL-28769 4.8

CVE-2023-4039 affecting package gcc for versions less than 11.2.0-6

DISPUTEDA failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables in your application without this being detected. This stack-protector failure only applies to C99-style dynamically-sized local variables or those created using alloca(). The stack-protector operates as intended for statically-sized local variables.

The default behavior when the stack-protector detects an overflow is to terminate your application, resulting in controlled loss of availability. An attacker who can exploit a buffer overflow without triggering the stack-protector might be able to change program flow control to cause an uncontrolled loss of availability or to go further and affect confidentiality or integrity. NOTE: The GCC project argues that this is a missed hardening bug and not a vulnerability by itself.

Record
AZL-28769
CVSS 3.1
4.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVAZL-34695 4.8

CVE-2023-4039 affecting package gcc for versions less than 13.2.0-7

DISPUTEDA failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables in your application without this being detected. This stack-protector failure only applies to C99-style dynamically-sized local variables or those created using alloca(). The stack-protector operates as intended for statically-sized local variables.

The default behavior when the stack-protector detects an overflow is to terminate your application, resulting in controlled loss of availability. An attacker who can exploit a buffer overflow without triggering the stack-protector might be able to change program flow control to cause an uncontrolled loss of availability or to go further and affect confidentiality or integrity. NOTE: The GCC project argues that this is a missed hardening bug and not a vulnerability by itself.

Record
AZL-34695
CVSS 3.1
4.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-05
Show 17 moreShow less
OSV 4.8

DISPUTEDA failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables in your application without this being detected. This stack-protector failure only applies to C99-style dynamically-sized local variables or those created using alloca(). The stack-protector operates as intended for statically-sized local variables.

The default behavior when the stack-protector detects an overflow is to terminate your application, resulting in controlled loss of availability. An attacker who can exploit a buffer overflow without triggering the stack-protector might be able to change program flow control to cause an uncontrolled loss of availability or to go further and affect confidentiality or integrity. NOTE: The GCC project argues that this is a missed hardening bug and not a vulnerability by itself.

Record
CVE-2023-4039
CVSS 3.1
4.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2023-4039 4.8

DISPUTEDA failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables in your application without this being detected. This stack-protector failure only applies to C99-style dynamically-sized local variables or those created using alloca(). The stack-protector operates as intended for statically-sized local variables. The default behavior when the stack-protector detects an overflow is to terminate your application, resulting in controlled loss of availability. An attacker who can exploit a buffer overflow without triggering the stack-protector might be able to change program flow control to cause an uncontrolled loss of availability or to go further and affect confidentiality or integrity. NOTE: The GCC project argues that this is a missed hardening bug and not a vulnerability by itself.

Record
DEBIAN-CVE-2023-4039
CVSS 3.1
4.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVOESA-2023-1735 4.8

gcc security update

The gcc package contains the GNU Compiler Collection version 10. You'll need this package in order to compile C code.

Security Fix(es):

A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables in your application without this being detected. This stack-protector failure only applies to C99-style dynamically-sized local variables or those created using alloca(). The stack-protector operates as intended for statically-sized local variables.

The default behavior when the stack-protector detects an overflow is to terminate your application, resulting in controlled loss of availability. An attacker who can exploit a buffer overflow without triggering the stack-protector might be able to change program flow control to cause an uncontrolled loss of availability or to go further and affect confidentiality or integrity.

(CVE-2023-4039)

Record
OESA-2023-1735
CVSS 3.1
4.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVOESA-2025-1042 4.8

gcc security update

The gcc package contains the GNU Compiler Collection version 12. You'll need this package in order to compile C code.

Security Fix(es):

DISPUTEDA failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables in your application without this being detected. This stack-protector failure only applies to C99-style dynamically-sized local variables or those created using alloca(). The stack-protector operates as intended for statically-sized local variables.

The default behavior when the stack-protector detects an overflow is to terminate your application, resulting in controlled loss of availability. An attacker who can exploit a buffer overflow without triggering the stack-protector might be able to change program flow control to cause an uncontrolled loss of availability or to go further and affect confidentiality or integrity. NOTE: The GCC project argues that this is a missed hardening bug and not a vulnerability by itself.

(CVE-2023-4039)

Record
OESA-2025-1042
CVSS 3.1
4.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2023-4039 4.8

DISPUTEDA failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables in your application without this being detected. This stack-protector failure only applies to C99-style dynamically-sized local variables or those created using alloca(). The stack-protector operates as intended for statically-sized local variables. The default behavior when the stack-protector detects an overflow is to terminate your application, resulting in controlled loss of availability. An attacker who can exploit a buffer overflow without triggering the stack-protector might be able to change program flow control to cause an uncontrolled loss of availability or to go further and affect confidentiality or integrity. NOTE: The GCC project argues that this is a missed hardening bug and not a vulnerability by itself.

Record
UBUNTU-CVE-2023-4039
CVSS 3.1
4.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVopenSUSE-SU-2024:13233-1 No score

cpp12-12.3.0+git1204-2.1 on GA media

These are all security issues fixed in the cpp12-12.3.0+git1204-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13233-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:13234-1 No score

cpp13-13.2.1+git7813-1.1 on GA media

These are all security issues fixed in the cpp13-13.2.1+git7813-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13234-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:13235-1 No score

cpp7-7.5.0+r278197-15.1 on GA media

These are all security issues fixed in the cpp7-7.5.0+r278197-15.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13235-1
Updated
2026-11-02
OSVSUSE-SU-2023:3640-1 No score

Security update for gcc12

This update for gcc12 fixes the following issues:

  • CVE-2023-4039: Fixed incorrect stack protector for C99 VLAs on Aarch64 (bsc#1214052).
Record
SUSE-SU-2023:3640-1
Updated
2026-11-02
OSVSUSE-SU-2023:3661-1 No score

Security update for gcc12

This update for gcc12 fixes the following issues:

  • CVE-2023-4039: Fixed incorrect stack protector for C99 VLAs on Aarch64 (bsc#1214052).
Record
SUSE-SU-2023:3661-1
Updated
2026-11-02
OSVSUSE-SU-2023:3662-1 No score

Security update for gcc7

This update for gcc7 fixes the following issues:

Security issues fixed:

  • CVE-2023-4039: Fixed incorrect stack protector for C99 VLAs on Aarch64 (bsc#1214052).
  • CVE-2019-15847: Fixed POWER9 DARN miscompilation. (bsc#1149145)
  • CVE-2019-14250: Includes fix for LTO linker plugin heap overflow. (bsc#1142649)

Update to GCC 7.5.0 release.

Other changes:

  • Fixed KASAN kernel compile. (bsc#1205145)
  • Fixed ICE with C++17 code. (bsc#1204505)
  • Fixed altivec.h redefining bool in C++ which makes bool unusable (bsc#1195517):
  • Adjust gnats idea of the target, fixing the build of gprbuild. [bsc#1196861]
  • Do not handle exceptions in std::thread (jsc#CAR-1182)
  • add -fpatchable-function-entry feature to gcc-7.
  • Fixed glibc namespace violation with getauxval. (bsc#1167939)
  • Backport aarch64 Straight Line Speculation mitigation [bsc#1172798, CVE-2020-13844]
  • Enable fortran for the nvptx offload compiler.
  • Update README.First-for.SuSE.packagers
  • Avoid assembler errors with AVX512 gather and scatter instructions when using -masm=intel.
  • Backport the aarch64 -moutline-atomics feature and accumulated fixes but not its default enabling. (jsc#SLE-12209, bsc#1167939)
  • Fixed memcpy miscompilation on aarch64. (bsc#1178624, bsc#1178577)
  • Fixed debug line info for try/catch. (bsc#1178614)
  • Fixed corruption of pass private ->aux via DF. (gcc#94148)
  • Fixed debug information issue with inlined functions and passed by reference arguments. [gcc#93888]
  • Fixed register allocation issue with exception handling code on s390x. (bsc#1161913)
  • Backport PR target/92692 to fix miscompilation of some atomic code on aarch64. (bsc#1150164)
  • Fixed miscompilation in vectorized code for s390x. (bsc#1160086) [gcc#92950]
  • Fixed miscompilation with thread-safe local static initialization. [gcc#85887]
  • Fixed debug info created for array definitions that complete an earlier declaration. [bsc#1146475]
  • Fixed vector shift miscompilation on s390. (bsc#1141897)
  • Add gcc7 -flive-patching patch. [bsc#1071995, fate#323487]
  • Strip -flto from $optflags.
  • Disables switch jump-tables when retpolines are used. (bsc#1131264, jsc#SLE-6738)
  • Fixed ICE compiling tensorflow on aarch64. (bsc#1129389)
  • Fixed for aarch64 FMA steering pass use-after-free. (bsc#1128794)
  • Fixed ICE compiling tensorflow. (bsc#1129389)
  • Fixed s390x FP load-and-test issue. (bsc#1124644)
  • Adjust gnat manual entries in the info directory. (bsc#1114592)
  • Fixed to no longer try linking -lieee with -mieee-fp. (bsc#1084842)
Record
SUSE-SU-2023:3662-1
Updated
2026-11-02
OSVSUSE-SU-2023:3686-1 No score

Security update for gcc7

This update for gcc7 fixes the following issues:

Security issue fixed:

  • CVE-2023-4039: Fixed incorrect stack protector for C99 VLAs on Aarch64 (bsc#1214052).

Other fixes:

  • Fixed KASAN kernel compile. [bsc#1205145]
  • Fixed ICE with C++17 code as reported in [bsc#1204505]
  • Fixed altivec.h redefining bool in C++ which makes bool unusable (bsc#1195517):
  • Adjust gnats idea of the target, fixing the build of gprbuild. [bsc#1196861]
Record
SUSE-SU-2023:3686-1
Updated
2026-11-02
OSVSUSE-SU-2023:4162-1 No score

Security update for gcc13

This update for gcc13 fixes the following issues:

This update ship the GCC 13.2 compiler suite and its base libraries.

The compiler base libraries are provided for all SUSE Linux Enterprise 15 versions and replace the same named GCC 12 ones.

The new compilers for C, C++, and Fortran are provided for SUSE Linux Enterprise 15 SP4 and SP5, and provided in the 'Development Tools' module.

The Go, D, Ada and Modula 2 language compiler parts are available unsupported via the PackageHub repositories.

To use gcc13 compilers use:

  • install 'gcc13' or 'gcc13-c++' or one of the other 'gcc13-COMPILER' frontend packages.
  • override your Makefile to use CC=gcc13, CXX=g++13 and similar overrides for the other languages.

For a full changelog with all new GCC13 features, check out

    https://gcc.gnu.org/gcc-13/changes.html

Detailed changes:

  • CVE-2023-4039: Fixed -fstack-protector issues on aarch64 with variable length stack allocations. (bsc#1214052)

  • Turn cross compiler to s390x to a glibc cross. [bsc#1214460]

  • Also handle -static-pie in the default-PIE specs

  • Fixed missed optimization in Skia resulting in Firefox crashes when building with LTO. [bsc#1212101]

  • Make libstdc++6-devel packages own their directories since they can be installed standalone. [bsc#1211427]

  • Add new x86-related intrinsics (amxcomplexintrin.h).

  • RISC-V: Add support for inlining subword atomic operations

  • Use --enable-link-serialization rather that --enable-link-mutex, the benefit of the former one is that the linker jobs are not holding tokens of the make's jobserver.

  • Add cross-bpf packages. See https://gcc.gnu.org/wiki/BPFBackEnd for the general state of BPF with GCC.

  • Add bootstrap conditional to allow --without=bootstrap to be specified to speed up local builds for testing.

  • Bump included newlib to version 4.3.0.

  • Also package libhwasan_preinit.o on aarch64.

  • Configure external timezone database provided by the timezone package. Make libstdc++6 recommend timezone to get a fully working std::chrono. Install timezone when running the testsuite.

  • Package libhwasan_preinit.o on x86_64.

  • Fixed unwinding on aarch64 with pointer signing. [bsc#1206684]

  • Enable PRU flavour for gcc13

  • update floatn fixinclude pickup to check each header separately (bsc#1206480)

  • Redo floatn fixinclude pick-up to simply keep what is there.

  • Bump libgo SONAME to libgo22.

  • Do not package libhwasan for biarch (32-bit architecture) as the extension depends on 64-bit pointers.

  • Adjust floatn fixincludes guard to work with SLE12 and earlier SLE15.

  • Depend on at least LLVM 13 for GCN cross compiler.

  • Update embedded newlib to version 4.2.0

  • Allow cross-pru-gcc12-bootstrap for armv7l architecture. PRU architecture is used for real-time MCUs embedded into TI armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for armv7l in order to build both host applications and PRU firmware during the same build.

Record
SUSE-SU-2023:4162-1
Updated
2026-11-02
OSVSUSE-SU-2023:4458-1 No score

Security update for gcc13

This update for gcc13 fixes the following issues:

This update ship the GCC 13.2 compiler suite and its base libraries.

The compiler base libraries are provided for all SUSE Linux Enterprise 15 versions and replace the same named GCC 12 ones.

The new compilers for C, C++, and Fortran are provided for SUSE Linux Enterprise 15 SP4 and SP5, and provided in the 'Development Tools' module.

The Go, D, Ada and Modula 2 language compiler parts are available unsupported via the PackageHub repositories.

To use gcc13 compilers use:

  • install 'gcc13' or 'gcc13-c++' or one of the other 'gcc13-COMPILER' frontend packages.
  • override your Makefile to use CC=gcc-13, CXX=g++-13 and similar overrides for the other languages.

For a full changelog with all new GCC13 features, check out

    https://gcc.gnu.org/gcc-13/changes.html

Detailed changes:

  • CVE-2023-4039: Fixed -fstack-protector issues on aarch64 with variable length stack allocations. (bsc#1214052)

  • Work around third party app crash during C++ standard library initialization. [bsc#1216664]

  • Fixed that GCC13 fails to compile some packages with error: unrecognizable insn (bsc#1215427)

  • Bump included newlib to version 4.3.0.

  • Update to GCC trunk head (r13-5254-g05b9868b182bb9)

  • Redo floatn fixinclude pick-up to simply keep what is there.

  • Turn cross compiler to s390x to a glibc cross. [bsc#1214460]

  • Also handle -static-pie in the default-PIE specs

  • Fixed missed optimization in Skia resulting in Firefox crashes when building with LTO. [bsc#1212101]

  • Make libstdc++6-devel packages own their directories since they can be installed standalone. [bsc#1211427]

  • Add new x86-related intrinsics (amxcomplexintrin.h).

  • RISC-V: Add support for inlining subword atomic operations

  • Use --enable-link-serialization rather that --enable-link-mutex, the benefit of the former one is that the linker jobs are not holding tokens of the make's jobserver.

  • Add cross-bpf packages. See https://gcc.gnu.org/wiki/BPFBackEnd for the general state of BPF with GCC.

  • Add bootstrap conditional to allow --without=bootstrap to be specified to speed up local builds for testing.

  • Bump included newlib to version 4.3.0.

  • Also package libhwasan_preinit.o on aarch64.

  • Configure external timezone database provided by the timezone package. Make libstdc++6 recommend timezone to get a fully working std::chrono. Install timezone when running the testsuite.

  • Package libhwasan_preinit.o on x86_64.

  • Fixed unwinding on aarch64 with pointer signing. [bsc#1206684]

  • Enable PRU flavour for gcc13

  • update floatn fixinclude pickup to check each header separately (bsc#1206480)

  • Redo floatn fixinclude pick-up to simply keep what is there.

  • Bump libgo SONAME to libgo22.

  • Do not package libhwasan for biarch (32-bit architecture) as the extension depends on 64-bit pointers.

  • Adjust floatn fixincludes guard to work with SLE12 and earlier SLE15.

  • Depend on at least LLVM 13 for GCN cross compiler.

  • Update embedded newlib to version 4.2.0

  • Allow cross-pru-gcc12-bootstrap for armv7l architecture. PRU architecture is used for real-time MCUs embedded into TI armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for armv7l in order to build both host applications and PRU firmware during the same build.

Record
SUSE-SU-2023:4458-1
Updated
2026-11-02
OSVSUSE-SU-2023:4480-1 No score

Security update for gcc13

This update for gcc13 fixes the following issues:

This update ship the GCC 13.2 compiler suite and its base libraries.

The compiler base libraries are provided for all SUSE Linux Enterprise 15 versions and replace the same named GCC 12 ones.

The new compilers for C, C++, and Fortran are provided for SUSE Linux Enterprise 15 SP4 and SP5, and provided in the 'Development Tools' module.

The Go, D, Ada and Modula 2 language compiler parts are available unsupported via the PackageHub repositories.

To use gcc13 compilers use:

  • install 'gcc13' or 'gcc13-c++' or one of the other 'gcc13-COMPILER' frontend packages.
  • override your Makefile to use CC=gcc-13, CXX=g++-13 and similar overrides for the other languages.

For a full changelog with all new GCC13 features, check out

    https://gcc.gnu.org/gcc-13/changes.html

Detailed changes:

  • CVE-2023-4039: Fixed -fstack-protector issues on aarch64 with variable length stack allocations. (bsc#1214052)

  • Work around third party app crash during C++ standard library initialization. [bsc#1216664]

  • Fixed that GCC13 fails to compile some packages with error: unrecognizable insn (bsc#1215427)

  • Bump included newlib to version 4.3.0.

  • Update to GCC trunk head (r13-5254-g05b9868b182bb9)

  • Redo floatn fixinclude pick-up to simply keep what is there.

  • Turn cross compiler to s390x to a glibc cross. [bsc#1214460]

  • Also handle -static-pie in the default-PIE specs

  • Fixed missed optimization in Skia resulting in Firefox crashes when building with LTO. [bsc#1212101]

  • Make libstdc++6-devel packages own their directories since they can be installed standalone. [bsc#1211427]

  • Add new x86-related intrinsics (amxcomplexintrin.h).

  • RISC-V: Add support for inlining subword atomic operations

  • Use --enable-link-serialization rather that --enable-link-mutex, the benefit of the former one is that the linker jobs are not holding tokens of the make's jobserver.

  • Add cross-bpf packages. See https://gcc.gnu.org/wiki/BPFBackEnd for the general state of BPF with GCC.

  • Add bootstrap conditional to allow --without=bootstrap to be specified to speed up local builds for testing.

  • Bump included newlib to version 4.3.0.

  • Also package libhwasan_preinit.o on aarch64.

  • Configure external timezone database provided by the timezone package. Make libstdc++6 recommend timezone to get a fully working std::chrono. Install timezone when running the testsuite.

  • Package libhwasan_preinit.o on x86_64.

  • Fixed unwinding on aarch64 with pointer signing. [bsc#1206684]

  • Enable PRU flavour for gcc13

  • update floatn fixinclude pickup to check each header separately (bsc#1206480)

  • Redo floatn fixinclude pick-up to simply keep what is there.

  • Bump libgo SONAME to libgo22.

  • Do not package libhwasan for biarch (32-bit architecture) as the extension depends on 64-bit pointers.

  • Adjust floatn fixincludes guard to work with SLE12 and earlier SLE15.

  • Depend on at least LLVM 13 for GCN cross compiler.

  • Update embedded newlib to version 4.2.0

  • Allow cross-pru-gcc12-bootstrap for armv7l architecture. PRU architecture is used for real-time MCUs embedded into TI armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for armv7l in order to build both host applications and PRU firmware during the same build.

Record
SUSE-SU-2023:4480-1
Updated
2026-11-02
OSVSUSE-SU-2024:0045-1 No score

Security update for gcc13

This update for gcc13 fixes the following issues:

This update ship the GCC 13.2 compiler suite and its base libraries.

The compiler base libraries are provided for all SUSE Linux Enterprise 15 versions and replace the same named GCC 12 ones.

The new compilers for C, C++, and Fortran are provided for SUSE Linux Enterprise 15 SP4 and SP5, and provided in the 'Development Tools' module.

The Go, D, Ada and Modula 2 language compiler parts are available unsupported via the PackageHub repositories.

To use gcc13 compilers use:

  • install 'gcc13' or 'gcc13-c++' or one of the other 'gcc13-COMPILER' frontend packages.
  • override your Makefile to use CC=gcc-13, CXX=g++-13 and similar overrides for the other languages.

For a full changelog with all new GCC13 features, check out

    https://gcc.gnu.org/gcc-13/changes.html

Detailed changes:

  • CVE-2023-4039: Fixed -fstack-protector issues on aarch64 with variable length stack allocations. (bsc#1214052)

  • Work around third party app crash during C++ standard library initialization. [bsc#1216664]

  • Fixed that GCC13 fails to compile some packages with error: unrecognizable insn (bsc#1215427)

  • Bump included newlib to version 4.3.0.

  • Update to GCC trunk head (r13-5254-g05b9868b182bb9)

  • Redo floatn fixinclude pick-up to simply keep what is there.

  • Turn cross compiler to s390x to a glibc cross. [bsc#1214460]

  • Also handle -static-pie in the default-PIE specs

  • Fixed missed optimization in Skia resulting in Firefox crashes when building with LTO. [bsc#1212101]

  • Make libstdc++6-devel packages own their directories since they can be installed standalone. [bsc#1211427]

  • Add new x86-related intrinsics (amxcomplexintrin.h).

  • RISC-V: Add support for inlining subword atomic operations

  • Use --enable-link-serialization rather that --enable-link-mutex, the benefit of the former one is that the linker jobs are not holding tokens of the make's jobserver.

  • Add cross-bpf packages. See https://gcc.gnu.org/wiki/BPFBackEnd for the general state of BPF with GCC.

  • Add bootstrap conditional to allow --without=bootstrap to be specified to speed up local builds for testing.

  • Bump included newlib to version 4.3.0.

  • Also package libhwasan_preinit.o on aarch64.

  • Configure external timezone database provided by the timezone package. Make libstdc++6 recommend timezone to get a fully working std::chrono. Install timezone when running the testsuite.

  • Package libhwasan_preinit.o on x86_64.

  • Fixed unwinding on aarch64 with pointer signing. [bsc#1206684]

  • Enable PRU flavour for gcc13

  • update floatn fixinclude pickup to check each header separately (bsc#1206480)

  • Redo floatn fixinclude pick-up to simply keep what is there.

  • Bump libgo SONAME to libgo22.

  • Do not package libhwasan for biarch (32-bit architecture) as the extension depends on 64-bit pointers.

  • Adjust floatn fixincludes guard to work with SLE12 and earlier SLE15.

  • Depend on at least LLVM 13 for GCN cross compiler.

  • Update embedded newlib to version 4.2.0

  • Allow cross-pru-gcc12-bootstrap for armv7l architecture. PRU architecture is used for real-time MCUs embedded into TI armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for armv7l in order to build both host applications and PRU firmware during the same build.

Record
SUSE-SU-2024:0045-1
Updated
2026-11-02
OSVUSN-7700-1 No score

gcc-10, gcc-11, gcc-12 vulnerability

It was discovered that the -fstack-protector hardening feature in GCC for AArch64 did not properly protect dynamically-sized local variables such as those created using C99 variable length arrays or alloca. As a result, an attacker who was able to trigger a buffer overflow in such cases could bypass the intended stack protection checks. (CVE-2023-4039)

Record
USN-7700-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
gcc
Alpine:v3.19
 before 13.2.1_git20231014-r0
13.2.1_git20231014-r0
gcc
Alpine:v3.20
 before 13.2.1_git20231014-r0
13.2.1_git20231014-r0
gcc
Alpine:v3.21
 before 13.2.1_git20231014-r0
13.2.1_git20231014-r0
gcc
Alpine:v3.22
 before 13.2.1_git20231014-r0
13.2.1_git20231014-r0
gcc
Alpine:v3.23
 before 13.2.1_git20231014-r0
13.2.1_git20231014-r0
gcc
Alpine:v3.24
 before 13.2.1_git20231014-r0
13.2.1_git20231014-r0
gcc
Azure Linux:2
 before 11.2.0-6
11.2.0-6
gcc
Azure Linux:3
 before 13.2.0-7
13.2.0-7
gcc-11
Debian:12
 All versions, plus listed versions
11.3.0-1211.3.0-1311.3.0-1411.3.0-1511.4.0-1
Show 22 moreShow less
11.4.0-1011.4.0-211.4.0-311.4.0-411.4.0-511.4.0-611.4.0-711.4.0-811.4.0-911.5.0-111.5.0-1011.5.0-1111.5.0-1211.5.0-1311.5.0-211.5.0-311.5.0-411.5.0-511.5.0-611.5.0-711.5.0-811.5.0-9
 None known
gcc-12
Debian:12
 before 12.2.0-14+deb12u1, plus listed versions
12.2.0-14
12.2.0-14+deb12u1
Show 241 moreShow less
Affected packages
PackageAffectedFixed
gcc-12
Debian:13
 before 12.3.0-9
12.3.0-9
gcc-12
Debian:14
 before 12.3.0-9
12.3.0-9
gcc-13
Debian:13
 before 13.2.0-4
13.2.0-4
gcc-13
Debian:14
 before 13.2.0-4
13.2.0-4
gcc
openEuler:20.03-LTS-SP1
 before 7.3.0-2020033101.52.oe1
7.3.0-2020033101.52.oe1
gcc
openEuler:20.03-LTS-SP3
 before 7.3.0-2020033101.53.oe1
7.3.0-2020033101.53.oe1
gcc
openEuler:22.03-LTS
 before 10.3.1-38.oe2203sp2
10.3.1-38.oe2203sp2
gcc
openEuler:22.03-LTS-SP1
 before 10.3.1-25.oe2203sp1
10.3.1-25.oe2203sp1
gcc
openEuler:22.03-LTS-SP2
 before 10.3.1-38.oe2203sp2
10.3.1-38.oe2203sp2
gcc
openEuler:24.03-LTS
 before 12.3.1-38.oe2403
12.3.1-38.oe2403
cross-nvptx-gcc12
SUSE:Linux Enterprise Module for Toolchain 12
 before 12.3.0+git1204-1.13.1
12.3.0+git1204-1.13.1
gcc12
SUSE:Linux Enterprise Module for Toolchain 12
 before 12.3.0+git1204-1.13.1
12.3.0+git1204-1.13.1
gcc12
SUSE:Linux Enterprise Server 12 SP5
 before 12.3.0+git1204-1.13.1
12.3.0+git1204-1.13.1
gcc12
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 12.3.0+git1204-1.13.1
12.3.0+git1204-1.13.1
gcc12
SUSE:Linux Enterprise Installer Updates 15 SP1
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12
SUSE:Linux Enterprise Installer Updates 15 SP2
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12
SUSE:Linux Enterprise Installer Updates 15 SP3
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12
SUSE:Linux Enterprise Installer Updates 15 SP4
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12
SUSE:Linux Enterprise Micro 5.3
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12
SUSE:Linux Enterprise Micro 5.4
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12
SUSE:Linux Enterprise Module for Basesystem 15 SP5
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
cross-nvptx-gcc12
SUSE:Linux Enterprise Module for Development Tools 15 SP4
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12
SUSE:Linux Enterprise Module for Development Tools 15 SP4
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12-testresults
SUSE:Linux Enterprise Module for Development Tools 15 SP4
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
cross-nvptx-gcc12
SUSE:Linux Enterprise Module for Development Tools 15 SP5
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12
SUSE:Linux Enterprise Module for Development Tools 15 SP5
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12
SUSE:Linux Enterprise Module for Legacy 15 SP4
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12
SUSE:Linux Enterprise Module for Package Hub 15 SP4
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12
SUSE:Linux Enterprise Module for Package Hub 15 SP5
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
cross-nvptx-gcc12
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12-testresults
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
cross-nvptx-gcc12
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
cross-nvptx-gcc12
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
cross-nvptx-gcc12
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
cross-nvptx-gcc12
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
cross-nvptx-gcc12
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
cross-nvptx-gcc12
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
cross-nvptx-gcc12
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
cross-nvptx-gcc12
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
cross-nvptx-gcc12
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12
SUSE:Manager Proxy 4.2
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12
SUSE:Manager Server 4.2
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12
SUSE:Linux Enterprise Micro 5.1
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12
SUSE:Linux Enterprise Micro 5.2
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
cross-nvptx-gcc12
SUSE:Enterprise Storage 7
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12
SUSE:Enterprise Storage 7
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12
openSUSE:Leap Micro 5.3
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12
openSUSE:Leap Micro 5.4
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
cross-nvptx-gcc12
openSUSE:Leap 15.4
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12
openSUSE:Leap 15.4
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
gcc12-testresults
openSUSE:Leap 15.4
 before 12.3.0+git1204-150000.1.16.1
12.3.0+git1204-150000.1.16.1
cross-nvptx-gcc7
SUSE:Linux Enterprise Module for Toolchain 12
From an advisory covering 4 CVEs
 before 7.5.0+r278197-13.1
7.5.0+r278197-13.1
gcc7
SUSE:Linux Enterprise Module for Toolchain 12
From an advisory covering 4 CVEs
 before 7.5.0+r278197-13.1
7.5.0+r278197-13.1
gcc7
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 4 CVEs
 before 7.5.0+r278197-13.1
7.5.0+r278197-13.1
gcc7
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 4 CVEs
 before 7.5.0+r278197-13.1
7.5.0+r278197-13.1
gcc7
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 7.5.0+r278197-150000.4.35.1
7.5.0+r278197-150000.4.35.1
cross-nvptx-gcc7
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 7.5.0+r278197-150000.4.35.1
7.5.0+r278197-150000.4.35.1
gcc7
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 7.5.0+r278197-150000.4.35.1
7.5.0+r278197-150000.4.35.1
gcc13
SUSE:Linux Enterprise Installer Updates 15 SP2
 before 13.2.1+git7813-150000.1.3.3
13.2.1+git7813-150000.1.3.3
gcc13
SUSE:Linux Enterprise Installer Updates 15 SP3
 before 13.2.1+git7813-150000.1.3.3
13.2.1+git7813-150000.1.3.3
gcc13
SUSE:Linux Enterprise Installer Updates 15 SP4
 before 13.2.1+git7813-150000.1.3.3
13.2.1+git7813-150000.1.3.3
gcc13
SUSE:Linux Enterprise Installer Updates 15 SP5
 before 13.2.1+git7813-150000.1.3.3
13.2.1+git7813-150000.1.3.3
gcc13
SUSE:Linux Enterprise Micro 5.3
 before 13.2.1+git7813-150000.1.3.3
13.2.1+git7813-150000.1.3.3
gcc13
SUSE:Linux Enterprise Micro 5.4
 before 13.2.1+git7813-150000.1.3.3
13.2.1+git7813-150000.1.3.3
gcc13
SUSE:Linux Enterprise Micro 5.5
 before 13.2.1+git7813-150000.1.3.3
13.2.1+git7813-150000.1.3.3
gcc13
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 13.2.1+git7813-150000.1.3.3
13.2.1+git7813-150000.1.3.3
gcc13
SUSE:Linux Enterprise Module for Basesystem 15 SP5
 before 13.2.1+git7813-150000.1.3.3
13.2.1+git7813-150000.1.3.3
cross-nvptx-gcc13
SUSE:Linux Enterprise Module for Development Tools 15 SP4
 before 13.2.1+git7813-150000.1.3.2
13.2.1+git7813-150000.1.3.2
gcc13
SUSE:Linux Enterprise Module for Development Tools 15 SP4
 before 13.2.1+git7813-150000.1.3.3
13.2.1+git7813-150000.1.3.3
cross-nvptx-gcc13
SUSE:Linux Enterprise Module for Development Tools 15 SP5
 before 13.2.1+git7813-150000.1.3.2
13.2.1+git7813-150000.1.3.2
gcc13
SUSE:Linux Enterprise Module for Development Tools 15 SP5
 before 13.2.1+git7813-150000.1.3.3
13.2.1+git7813-150000.1.3.3
gcc13
SUSE:Linux Enterprise Module for Package Hub 15 SP4
 before 13.2.1+git7813-150000.1.3.3
13.2.1+git7813-150000.1.3.3
gcc13
SUSE:Linux Enterprise Module for Package Hub 15 SP5
 before 13.2.1+git7813-150000.1.3.3
13.2.1+git7813-150000.1.3.3
gcc13
SUSE:Manager Proxy 4.2
 before 13.2.1+git7813-150000.1.3.3
13.2.1+git7813-150000.1.3.3
gcc13
SUSE:Manager Server 4.2
 before 13.2.1+git7813-150000.1.3.3
13.2.1+git7813-150000.1.3.3
gcc13
SUSE:Linux Enterprise Micro 5.1
 before 13.2.1+git7813-150000.1.3.3
13.2.1+git7813-150000.1.3.3
gcc13
SUSE:Linux Enterprise Micro 5.2
 before 13.2.1+git7813-150000.1.3.3
13.2.1+git7813-150000.1.3.3
gcc13
openSUSE:Leap Micro 5.3
 before 13.2.1+git7813-150000.1.3.3
13.2.1+git7813-150000.1.3.3
gcc13
openSUSE:Leap Micro 5.4
 before 13.2.1+git7813-150000.1.3.3
13.2.1+git7813-150000.1.3.3
cross-nvptx-gcc13
openSUSE:Leap 15.4
 before 13.2.1+git7813-150000.1.3.2
13.2.1+git7813-150000.1.3.2
gcc13
openSUSE:Leap 15.4
 before 13.2.1+git7813-150000.1.3.3
13.2.1+git7813-150000.1.3.3
cross-nvptx-gcc13
openSUSE:Leap 15.5
 before 13.2.1+git7813-150000.1.3.2
13.2.1+git7813-150000.1.3.2
gcc13
openSUSE:Leap 15.5
 before 13.2.1+git7813-150000.1.3.3
13.2.1+git7813-150000.1.3.3
gcc13
SUSE:Linux Enterprise Installer Updates 15 SP1
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
gcc13
SUSE:Linux Enterprise Installer Updates 15 SP2
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
gcc13
SUSE:Linux Enterprise Installer Updates 15 SP3
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
gcc13
SUSE:Linux Enterprise Installer Updates 15 SP4
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
gcc13
SUSE:Linux Enterprise Installer Updates 15 SP5
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
gcc13
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
gcc13
SUSE:Linux Enterprise Module for Basesystem 15 SP5
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
cross-nvptx-gcc13
SUSE:Linux Enterprise Module for Development Tools 15 SP4
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
gcc13
SUSE:Linux Enterprise Module for Development Tools 15 SP4
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
cross-nvptx-gcc13
SUSE:Linux Enterprise Module for Development Tools 15 SP5
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
gcc13
SUSE:Linux Enterprise Module for Development Tools 15 SP5
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
gcc13
SUSE:Linux Enterprise Module for Package Hub 15 SP4
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
gcc13
SUSE:Linux Enterprise Module for Package Hub 15 SP5
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
cross-nvptx-gcc13
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
gcc13
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
cross-nvptx-gcc13
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
gcc13
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
cross-nvptx-gcc13
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
gcc13
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
cross-nvptx-gcc13
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
gcc13
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
cross-nvptx-gcc13
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
gcc13
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
cross-nvptx-gcc13
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
gcc13
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
cross-nvptx-gcc13
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
gcc13
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
cross-nvptx-gcc13
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
gcc13
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
cross-nvptx-gcc13
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
gcc13
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
cross-nvptx-gcc13
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
gcc13
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
gcc13
SUSE:Linux Enterprise Micro 5.1
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
gcc13
SUSE:Linux Enterprise Micro 5.2
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
cross-nvptx-gcc13
SUSE:Enterprise Storage 7.1
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
gcc13
SUSE:Enterprise Storage 7.1
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
gcc13
openSUSE:Leap Micro 5.3
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
gcc13
openSUSE:Leap Micro 5.4
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
cross-nvptx-gcc13
openSUSE:Leap 15.4
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
gcc13
openSUSE:Leap 15.4
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
cross-nvptx-gcc13
openSUSE:Leap 15.5
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
gcc13
openSUSE:Leap 15.5
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
cross-nvptx-gcc13
SUSE:Linux Enterprise Module for Toolchain 12
 before 13.2.1+git7813-1.10.1
13.2.1+git7813-1.10.1
gcc13
SUSE:Linux Enterprise Module for Toolchain 12
 before 13.2.1+git7813-1.10.1
13.2.1+git7813-1.10.1
gcc13
SUSE:Linux Enterprise Server 12 SP5
 before 13.2.1+git7813-1.10.1
13.2.1+git7813-1.10.1
gcc13
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 13.2.1+git7813-1.10.1
13.2.1+git7813-1.10.1
gcc13
SUSE:Linux Enterprise Micro 5.3
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
gcc13
SUSE:Linux Enterprise Micro 5.4
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
gcc13
SUSE:Linux Enterprise Micro 5.5
 before 13.2.1+git7813-150000.1.6.1
13.2.1+git7813-150000.1.6.1
gcc-4.7
Ubuntu:14.04:LTS
 All versions, plus listed versions
4.7.3-7ubuntu34.7.3-8ubuntu14.7.3-9ubuntu14.7.3-9ubuntu24.7.3-10ubuntu14.7.3-11ubuntu14.7.3-12ubuntu1
 None known
gcc-4.8
Ubuntu:14.04:LTS
 All versions, plus listed versions
4.8.1-10ubuntu84.8.2-1ubuntu14.8.2-1ubuntu24.8.2-10ubuntu14.8.2-10ubuntu2
Show 18 moreShow less
4.8.2-12ubuntu24.8.2-13ubuntu14.8.2-14ubuntu14.8.2-14ubuntu24.8.2-14ubuntu44.8.2-15ubuntu34.8.2-16ubuntu14.8.2-16ubuntu34.8.2-16ubuntu44.8.2-16ubuntu54.8.2-16ubuntu64.8.2-17ubuntu14.8.2-17ubuntu24.8.2-19ubuntu14.8.4-2ubuntu1~14.044.8.4-2ubuntu1~14.04.14.8.4-2ubuntu1~14.04.34.8.4-2ubuntu1~14.04.4
 None known
gcc-mingw-w64
Ubuntu:14.04:LTS
 All versions, plus listed versions
891112
 None known
gccgo-4.9
Ubuntu:14.04:LTS
 All versions, plus listed versions
4.9-20140213-0ubuntu14.9-20140213-0ubuntu24.9-20140217-0ubuntu14.9-20140222-0ubuntu14.9-20140303-0ubuntu2
Show 6 moreShow less
4.9-20140303-0ubuntu34.9-20140321-0ubuntu14.9-20140330-0ubuntu14.9-20140406-0ubuntu14.9.1-0ubuntu14.9.3-0ubuntu4
 None known
gcc-5
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
5.2.1-22ubuntu25.2.1-22ubuntu55.2.1-23ubuntu15.2.1-26ubuntu15.2.1-27ubuntu1
Show 34 moreShow less
5.3.1-2ubuntu25.3.1-3ubuntu15.3.1-3ubuntu35.3.1-4ubuntu15.3.1-5ubuntu15.3.1-5ubuntu25.3.1-5ubuntu35.3.1-6ubuntu15.3.1-6ubuntu25.3.1-7ubuntu15.3.1-8ubuntu25.3.1-8ubuntu35.3.1-9ubuntu35.3.1-10ubuntu25.3.1-11ubuntu15.3.1-12ubuntu15.3.1-12ubuntu25.3.1-12ubuntu45.3.1-13ubuntu15.3.1-13ubuntu35.3.1-13ubuntu45.3.1-13ubuntu65.3.1-14ubuntu25.3.1-14ubuntu2.15.4.0-6ubuntu1~16.04.15.4.0-6ubuntu1~16.04.25.4.0-6ubuntu1~16.04.45.4.0-6ubuntu1~16.04.55.4.0-6ubuntu1~16.04.65.4.0-6ubuntu1~16.04.95.4.0-6ubuntu1~16.04.105.4.0-6ubuntu1~16.04.115.4.0-6ubuntu1~16.04.125.4.0-6ubuntu1~16.04.12+esm2
 None known
gcc-5-cross
Ubuntu:16.04:LTS
 All versions, plus listed versions
12ubuntu115ubuntu118ubuntu120ubuntu320ubuntu5
Show 4 moreShow less
20ubuntu624ubuntu0.124ubuntu0.224ubuntu0.3
 None known
gccgo-6
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
6-20160210-0ubuntu26-20160217-0ubuntu16-20160220-0ubuntu16-20160225-0ubuntu16-20160225-0ubuntu2
Show 7 moreShow less
6-20160227-0ubuntu16-20160313-0ubuntu16-20160319-0ubuntu16-20160405-0ubuntu16-20160405-0ubuntu26.0.1-0ubuntu16.0.1-0ubuntu1+esm1
 None known
gcc-4.7
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.7.4-3ubuntu34.7.4-3ubuntu74.7.4-3ubuntu94.7.4-3ubuntu104.7.4-3ubuntu114.7.4-3ubuntu12
 None known
gcc-4.7-armel-cross
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.861.903
 None known
gcc-4.7-armhf-cross
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.861.873
 None known
gcc-4.8
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.5-1ubuntu14.8.5-2ubuntu14.8.5-3ubuntu14.8.5-3ubuntu24.8.5-3ubuntu34.8.5-4ubuntu14.8.5-4ubuntu2
 None known
gcc-4.8-arm64-cross
Ubuntu:16.04:LTS
 All versions, plus listed versions
0.170.182
 None known
gcc-4.8-armhf-cross
Ubuntu:16.04:LTS
 All versions, plus listed versions
0.160.172
 None known
gcc-4.8-powerpc-cross
Ubuntu:16.04:LTS
 All versions, plus listed versions
0.190.203
 None known
gcc-4.8-ppc64el-cross
Ubuntu:16.04:LTS
 All versions, plus listed versions
0.80.92
 None known
gcc-4.9
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.9.3-5ubuntu14.9.3-6ubuntu24.9.3-8ubuntu14.9.3-8ubuntu24.9.3-9ubuntu1
Show 4 moreShow less
4.9.3-11ubuntu14.9.3-11ubuntu24.9.3-12ubuntu14.9.3-13ubuntu2
 None known
gcc-4.9-cross
Ubuntu:16.04:LTS
 All versions, plus listed versions
0ubuntu100ubuntu110ubuntu130ubuntu1434
 None known
gcc-5-cross-ports
Ubuntu:16.04:LTS
 All versions, plus listed versions
2ubuntu15ubuntu27ubuntu37ubuntu47ubuntu510ubuntu0.110ubuntu0.2
 None known
gcc-arm-linux-androideabi
Ubuntu:16.04:LTS
 All versions, plus listed versions
0.20130705.1-0ubuntu80.20130705.1-0ubuntu9
 None known
gcc-arm-none-eabi
Ubuntu:16.04:LTS
 All versions, plus listed versions
15:4.9.3+svn227297-115:4.9.3+svn227297-1build115:4.9.3+svn231177-1
 None known
gcc-avr
Ubuntu:16.04:LTS
 All versions, plus listed versions
1:4.8.1+Atmel3.4.5-11:4.9.2+Atmel3.5.0-1
 None known
gcc-h8300-hms
Ubuntu:16.04:LTS
 All versions, plus listed versions
1:3.4.6+dfsg2-4ubuntu1
 None known
gcc-i686-linux-android
Ubuntu:16.04:LTS
 All versions, plus listed versions
79
 None known
gcc-m68hc1x
Ubuntu:16.04:LTS
 All versions, plus listed versions
1:3.3.6+3.1+dfsg-3ubuntu1
 None known
gcc-mingw-w64
Ubuntu:16.04:LTS
 All versions, plus listed versions
15.415.715.7build116build117
 None known
gcc-msp430
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.6.3~mspgcc-20120406-7ubuntu3
 None known
gcc-opt
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.20
 None known
gcc-snapshot
Ubuntu:16.04:LTS
 All versions, plus listed versions
20151011-0ubuntu120151030-1ubuntu220151104-0ubuntu120151122-1ubuntu120151209-0ubuntu1
Show 5 moreShow less
20151215-0ubuntu120160105-1ubuntu120160125-1ubuntu120160320-1ubuntu120160415-0ubuntu1
 None known
gcc-7
Ubuntu:18.04:LTS
 All versions, plus listed versions
7.2.0-8ubuntu37.2.0-12ubuntu17.2.0-13ubuntu17.2.0-16ubuntu17.2.0-17ubuntu1
Show 14 moreShow less
7.2.0-18ubuntu27.3.0-3ubuntu17.3.0-5ubuntu17.3.0-11ubuntu17.3.0-12ubuntu17.3.0-13ubuntu17.3.0-14ubuntu17.3.0-15ubuntu27.3.0-16ubuntu27.3.0-16ubuntu37.3.0-27ubuntu1~18.047.4.0-1ubuntu1~18.047.4.0-1ubuntu1~18.04.17.5.0-3ubuntu1~18.04
 None known
gcc-7-cross
Ubuntu:18.04:LTS
 All versions, plus listed versions
8ubuntu213ubuntu117ubuntu118ubuntu118ubuntu2
Show 8 moreShow less
20ubuntu120ubuntu220ubuntu320ubuntu421ubuntu0.121ubuntu0.221ubuntu0.321ubuntu0.4
 None known
gcc-8
Ubuntu:18.04:LTS
 All versions, plus listed versions
8-20180208-0ubuntu18-20180218-1ubuntu18-20180312-2ubuntu18-20180319-1ubuntu28-20180321-1ubuntu1
Show 11 moreShow less
8-20180331-1ubuntu18-20180402-1ubuntu18-20180406-0ubuntu18-20180408-0ubuntu18-20180414-1ubuntu18-20180414-1ubuntu28.2.0-1ubuntu2~18.048.3.0-6ubuntu1~18.048.3.0-6ubuntu1~18.04.18.3.0-26ubuntu1~18.048.4.0-1ubuntu1~18.04
 None known
gcc-8-cross
Ubuntu:18.04:LTS
 All versions, plus listed versions
5ubuntu26ubuntu17ubuntu19ubuntu19ubuntu2
Show 4 moreShow less
18ubuntu0.118ubuntu0.318ubuntu0.418ubuntu0.6
 None known
gcc-4.8
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.8.5-4ubuntu64.8.5-4ubuntu74.8.5-4ubuntu8
 None known
gcc-5
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.5.0-1ubuntu15.5.0-2ubuntu35.5.0-3ubuntu15.5.0-4ubuntu15.5.0-5ubuntu1
Show 4 moreShow less
5.5.0-8ubuntu15.5.0-10ubuntu15.5.0-11ubuntu15.5.0-12ubuntu1
 None known
gcc-5-cross
Ubuntu:18.04:LTS
 All versions, plus listed versions
26ubuntu127ubuntu127ubuntu232ubuntu133ubuntu2
 None known
gcc-5-cross-ports
Ubuntu:18.04:LTS
 All versions, plus listed versions
12ubuntu112ubuntu218ubuntu221ubuntu1
 None known
gcc-6
Ubuntu:18.04:LTS
 All versions, plus listed versions
6.4.0-8ubuntu16.4.0-9ubuntu16.4.0-10ubuntu16.4.0-11ubuntu16.4.0-12ubuntu1
Show 5 moreShow less
6.4.0-13ubuntu16.4.0-15ubuntu16.4.0-16ubuntu16.4.0-17ubuntu16.5.0-2ubuntu1~18.04
 None known
gcc-6-cross
Ubuntu:18.04:LTS
 All versions, plus listed versions
25ubuntu126ubuntu128ubuntu129ubuntu130ubuntu230ubuntu330ubuntu3.1
 None known
gcc-6-cross-ports
Ubuntu:18.04:LTS
 All versions, plus listed versions
23ubuntu124ubuntu125ubuntu127ubuntu128ubuntu228ubuntu328ubuntu3.1
 None known
gcc-7-cross-ports
Ubuntu:18.04:LTS
 All versions, plus listed versions
6ubuntu19ubuntu113ubuntu114ubuntu116ubuntu2
Show 6 moreShow less
16ubuntu316ubuntu417ubuntu0.117ubuntu0.217ubuntu0.317ubuntu0.4
 None known
gcc-8-cross-ports
Ubuntu:18.04:LTS
 All versions, plus listed versions
2ubuntu23ubuntu13ubuntu24ubuntu16ubuntu2
Show 5 moreShow less
6ubuntu39ubuntu0.19ubuntu0.39ubuntu0.49ubuntu0.5
 None known
gcc-opt
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.201.20build1
 None known
gcc-snapshot
Ubuntu:18.04:LTS
 All versions, plus listed versions
20171017-1ubuntu120171109-1ubuntu120180107-1ubuntu120180130-0ubuntu220180216-1ubuntu11:20180322-1ubuntu11:20180425-1ubuntu1
 None known
gcc-10
Ubuntu:Pro:20.04:LTS
 before 10.5.0-1ubuntu1~20.04.1+esm1, plus listed versions
10-20200202-1ubuntu110-20200204-1ubuntu310-20200204-1ubuntu410-20200204-1ubuntu510-20200211-1ubuntu1
Show 11 moreShow less
10-20200222-1ubuntu110-20200228-0ubuntu110-20200304-1ubuntu110-20200307-0ubuntu110-20200321-1ubuntu110-20200324-1ubuntu110-20200405-0ubuntu110-20200411-0ubuntu110.2.0-5ubuntu1~20.0410.3.0-1ubuntu1~20.0410.5.0-1ubuntu1~20.04
10.5.0-1ubuntu1~20.04.1+esm1
gcc-10-cross
Ubuntu:20.04:LTS
 All versions, plus listed versions
3ubuntu34ubuntu15ubuntu26ubuntu26ubuntu36ubuntu46ubuntu6
 None known
gcc-9
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
9.2.1-9ubuntu29.2.1-12ubuntu19.2.1-15ubuntu19.2.1-16ubuntu19.2.1-17ubuntu1
Show 20 moreShow less
9.2.1-19ubuntu19.2.1-20ubuntu39.2.1-21ubuntu19.2.1-25ubuntu19.2.1-28ubuntu19.2.1-29ubuntu19.2.1-30ubuntu19.2.1-30ubuntu29.2.1-31ubuntu19.3.0-3ubuntu19.3.0-5ubuntu19.3.0-7ubuntu19.3.0-8ubuntu19.3.0-10ubuntu19.3.0-10ubuntu29.3.0-17ubuntu1~20.049.4.0-1ubuntu1~20.049.4.0-1ubuntu1~20.04.19.4.0-1ubuntu1~20.04.29.4.0-1ubuntu1~20.04.3
 None known
gcc-9-cross
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
12ubuntu214ubuntu117ubuntu118ubuntu218ubuntu3
Show 8 moreShow less
20ubuntu121ubuntu121ubuntu321ubuntu421ubuntu521ubuntu621ubuntu721ubuntu7.1
 None known
gcc-10-cross-ports
Ubuntu:20.04:LTS
 All versions, plus listed versions
2ubuntu23ubuntu14ubuntu15ubuntu15ubuntu25ubuntu35ubuntu6
 None known
gcc-7
Ubuntu:20.04:LTS
 All versions, plus listed versions
7.4.0-14ubuntu27.4.0-15ubuntu17.5.0-1ubuntu17.5.0-2ubuntu17.5.0-3ubuntu17.5.0-4ubuntu17.5.0-4ubuntu47.5.0-6ubuntu2
 None known
gcc-8
Ubuntu:20.04:LTS
 All versions, plus listed versions
8.3.0-23ubuntu28.3.0-24ubuntu18.3.0-25ubuntu38.3.0-26ubuntu18.3.0-27ubuntu1
Show 6 moreShow less
8.3.0-29ubuntu18.3.0-29ubuntu28.4.0-1ubuntu18.4.0-1ubuntu38.4.0-3ubuntu18.4.0-3ubuntu2
 None known
gcc-8-cross
Ubuntu:20.04:LTS
 All versions, plus listed versions
31ubuntu232ubuntu133ubuntu133ubuntu2
 None known
gcc-8-cross-ports
Ubuntu:20.04:LTS
 All versions, plus listed versions
24ubuntu226ubuntu127ubuntu127ubuntu2
 None known
gcc-9-cross-ports
Ubuntu:20.04:LTS
 All versions, plus listed versions
10ubuntu211ubuntu114ubuntu115ubuntu115ubuntu2
Show 5 moreShow less
17ubuntu118ubuntu118ubuntu318ubuntu418ubuntu5
 None known
gcc-opt
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.20build1
 None known
gcc-snapshot
Ubuntu:20.04:LTS
 All versions, plus listed versions
1:20191008-1ubuntu11:20191201-0ubuntu11:20200124-1ubuntu11:20200402-0ubuntu11:20200418-1ubuntu1
 None known
gcc-10
Ubuntu:22.04:LTS
 before 10.5.0-1ubuntu1~22.04.2, plus listed versions
10.3.0-11ubuntu110.3.0-12ubuntu110.3.0-13ubuntu110.3.0-14ubuntu110.3.0-15ubuntu110.4.0-4ubuntu1~22.0410.5.0-1ubuntu1~22.04
10.5.0-1ubuntu1~22.04.2
gcc-10-cross
Ubuntu:22.04:LTS
 All versions, plus listed versions
18ubuntu118ubuntu1.118ubuntu1.218ubuntu1.3
 None known
gcc-10-cross-ports
Ubuntu:22.04:LTS
 All versions, plus listed versions
19ubuntu119ubuntu1.119ubuntu1.2
 None known
gcc-11
Ubuntu:22.04:LTS
 before 11.4.0-1ubuntu1~22.04.2, plus listed versions
11.2.0-7ubuntu211.2.0-10ubuntu111.2.0-12ubuntu111.2.0-13ubuntu111.2.0-14ubuntu1
Show 6 moreShow less
11.2.0-16ubuntu111.2.0-18ubuntu111.2.0-19ubuntu111.3.0-1ubuntu1~22.0411.3.0-1ubuntu1~22.04.111.4.0-1ubuntu1~22.04
11.4.0-1ubuntu1~22.04.2
gcc-11-cross
Ubuntu:22.04:LTS
 All versions, plus listed versions
6ubuntu210ubuntu111ubuntu111ubuntu1.111ubuntu1.211ubuntu1.311ubuntu1.4
 None known
gcc-11-cross-ports
Ubuntu:22.04:LTS
 All versions, plus listed versions
4ubuntu28ubuntu18ubuntu1.18ubuntu1.28ubuntu1.3
 None known
gcc-12
Ubuntu:22.04:LTS
 before 12.3.0-1ubuntu1~22.04.2, plus listed versions
12-20220222-1ubuntu112-20220302-1ubuntu112-20220313-1ubuntu112-20220319-1ubuntu112.1.0-2ubuntu1~22.0412.3.0-1ubuntu1~22.04
12.3.0-1ubuntu1~22.04.2
gcc-12-cross
Ubuntu:22.04:LTS
 All versions, plus listed versions
5ubuntu25ubuntu2.25ubuntu2.45ubuntu2.5
 None known
gcc-12-cross-ports
Ubuntu:22.04:LTS
 All versions, plus listed versions
1ubuntu11ubuntu1.11ubuntu1.3
 None known
gcc-9
Ubuntu:22.04:LTS
 All versions, plus listed versions
9.4.0-3ubuntu19.4.0-4ubuntu19.4.0-5ubuntu19.5.0-1ubuntu1~22.049.5.0-1ubuntu1~22.04.1
 None known
gcc-9-cross
Ubuntu:22.04:LTS
 All versions, plus listed versions
26ubuntu226ubuntu326ubuntu3.126ubuntu3.2
 None known
gcc-9-cross-ports
Ubuntu:22.04:LTS
 All versions, plus listed versions
24ubuntu124ubuntu1.1
 None known
gcc-opt
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.20build1
 None known
gcc-snapshot
Ubuntu:22.04:LTS
 All versions, plus listed versions
1:20210827-1ubuntu11:20220117-1ubuntu1
 None known
gcc-10
Ubuntu:24.04:LTS
 before 10.5.0-4ubuntu2, plus listed versions
10.5.0-1ubuntu110.5.0-4ubuntu1
10.5.0-4ubuntu2
gcc-10-cross
Ubuntu:24.04:LTS
 before 23ubuntu2, plus listed versions
23ubuntu1
23ubuntu2
gcc-10-cross-ports
Ubuntu:24.04:LTS
 All versions, plus listed versions
24ubuntu124ubuntu2
 None known
gcc-11
Ubuntu:24.04:LTS
 before 11.4.0-4ubuntu1
11.4.0-4ubuntu1
gcc-11-cross
Ubuntu:24.04:LTS
 before 21ubuntu2, plus listed versions
20ubuntu121ubuntu1
21ubuntu2
gcc-11-cross-ports
Ubuntu:24.04:LTS
 All versions, plus listed versions
17ubuntu118ubuntu118ubuntu218ubuntu2.1
 None known
gcc-12-cross
Ubuntu:24.04:LTS
 before 19ubuntu2, plus listed versions
18ubuntu219ubuntu1
19ubuntu2
gcc-12-cross-ports
Ubuntu:24.04:LTS
 All versions, plus listed versions
16ubuntu217ubuntu117ubuntu217ubuntu2.1
 None known
gcc-9
Ubuntu:24.04:LTS
 before 9.5.0-6ubuntu2, plus listed versions
9.5.0-4ubuntu29.5.0-5ubuntu1
9.5.0-6ubuntu2
gcc-9-cross
Ubuntu:24.04:LTS
 before 29ubuntu2, plus listed versions
28ubuntu129ubuntu1
29ubuntu2
gcc-9-cross-ports
Ubuntu:24.04:LTS
 All versions, plus listed versions
26ubuntu127ubuntu127ubuntu2
 None known
gcc-opt
Ubuntu:24.04:LTS
 All versions, plus listed versions
1.20build1
 None known
gcc-snapshot
Ubuntu:24.04:LTS
 All versions, plus listed versions
1:20230928-1ubuntu11:20231130-1ubuntu11:20240117-1ubuntu1
 None known
gcc-11-cross-ports
Ubuntu:25.10
 All versions, plus listed versions
19ubuntu120ubuntu2
 None known
gcc-12-cross-ports
Ubuntu:25.10
 All versions, plus listed versions
19ubuntu120ubuntu121ubuntu1
 None known
gcc-opt
Ubuntu:25.10
 All versions, plus listed versions
1.20build1
 None known
gcc-snapshot
Ubuntu:25.10
 All versions, plus listed versions
1:20250322-1ubuntu11:20250502-1ubuntu11:20250601-1ubuntu11:20250617-1ubuntu11:20250804-1ubuntu11:20250828-1ubuntu11:20250921-1ubuntu1
 None known
gcc-11-cross-ports
Ubuntu:26.10
 All versions, plus listed versions
21ubuntu1
 None known
gcc-12-cross-ports
Ubuntu:26.10
 All versions, plus listed versions
23ubuntu1
 None known
gcc-opt
Ubuntu:26.10
 All versions, plus listed versions
1.20build2
 None known
gcc-snapshot
Ubuntu:26.10
 All versions, plus listed versions
1:20260306-1ubuntu11:20260902-1ubuntu11:20260920-0ubuntu1
 None known
gcc-11-cross-ports
Ubuntu:26.04:LTS
 All versions, plus listed versions
20ubuntu220ubuntu320ubuntu421ubuntu1
 None known
gcc-12-cross-ports
Ubuntu:26.04:LTS
 All versions, plus listed versions
21ubuntu121ubuntu222ubuntu123ubuntu1
 None known
gcc-opt
Ubuntu:26.04:LTS
 All versions, plus listed versions
1.20build11.20build2
 None known
gcc-snapshot
Ubuntu:26.04:LTS
 All versions, plus listed versions
1:20250921-1ubuntu11:20251023-1ubuntu11:20260121-1ubuntu11:20260203-0ubuntu31:20260216-1ubuntu11:20260306-1ubuntu1
 None known
gcc12
openSUSE:Tumbleweed
 before 12.3.0+git1204-2.1
12.3.0+git1204-2.1
gcc13
openSUSE:Tumbleweed
 before 13.2.1+git7813-1.1
13.2.1+git7813-1.1
gcc7
openSUSE:Tumbleweed
 before 7.5.0+r278197-15.1
7.5.0+r278197-15.1

History

History
RecordedChangedSources
affected
factsOSV
first indexedCVE List, EUVD, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-4039 is a medium vulnerability (CVSS 4.8) in Gnu Gcc, published September 12, 2023. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 1.04%, the 64th percentile. Fixed in gcc 13.2.1_git20231014-r0.

References

Show 55 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open