This update includes the GNU Compiler Collection 9.

This update ships the GCC 9.3 release.

A full changelog is provided by the GCC team on :

https://www.gnu.org/software/gcc/gcc-9/changes.html

The base system compiler libraries libgcc_s1, libstdc++6 and others are now built by the gcc 9 packages.

To use it, install 'gcc9' or 'gcc9-c++' or other compiler brands and use CC=gcc-9 / CXX=g++-9 during configuration for using it.

Security issues fixed :

  - CVE-2019-15847: Fixed a miscompilation in the POWER9     back end, that optimized multiple calls of the
    __builtin_darn intrinsic into a single call.
    (bsc#1149145)

  - CVE-2019-14250: Fixed a heap overflow in the LTO linker.
    (bsc#1142649)

Non-security issues fixed :

  - Split out libstdc++ pretty-printers into a separate     package supplementing gdb and the installed runtime.
    (bsc#1135254)

  - Fixed miscompilation for vector shift on s390.
    (bsc#1141897)

  - Includes a fix for Internal compiler error when building     HepMC (bsc#1167898)

  - Includes fix for binutils version parsing

  - Add libstdc++6-pp provides and conflicts to avoid file     conflicts with same minor version of libstdc++6-pp from     gcc10.

  - Add gcc9 autodetect -g at lto link (bsc#1149995)

  - Install go tool buildid for bootstrapping go

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4326-1 advisory.

    It was discovered that libiberty incorrectly handled parsing certain binaries. If a user or automated     system were tricked into processing a specially crafted binary, a remote attacker could use this issue to     cause libiberty to crash, resulting in a denial of service, or possibly execute arbitrary code

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the crash package has been released.

An update of the binutils package has been released.

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4336-1 advisory.

    It was discovered that GNU binutils contained a large number of security issues. If a user or automated     system were tricked into processing a specially-crafted file, a remote attacker could cause GNU binutils     to crash, resulting in a denial of service, or possibly execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
136959	openSUSE Security Update : gcc9 (openSUSE-2020-716)	Nessus	SuSE Local Security Checks	2020/5/29	2024/3/8	high
135398	Ubuntu 16.04 LTS / 18.04 LTS : libiberty vulnerabilities (USN-4326-1)	Nessus	Ubuntu Local Security Checks	2020/4/10	2024/8/29	high
203529	Photon OS 4.0: Crash PHSA-2023-4.0-0414	Nessus	PhotonOS Local Security Checks	2024/7/23	2025/8/20	critical
128734	Photon OS 2.0: Binutils PHSA-2019-2.0-0173	Nessus	PhotonOS Local Security Checks	2019/9/12	2024/7/23	high
135966	Ubuntu 18.04 LTS : GNU binutils vulnerabilities (USN-4336-1)	Nessus	Ubuntu Local Security Checks	2020/4/24	2024/8/27	critical

検出

プラグインの検索

high

high

critical

high

critical