Security update for gcc10, nvptx-tools SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2020:1693-1 Final 1 1 2020-10-18T15:38:42Z current 2020-10-18T15:38:42Z 2020-10-18T15:38:42Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for gcc10, nvptx-tools This update for gcc10, nvptx-tools fixes the following issues: This update provides the GCC10 compiler suite and runtime libraries. The base SUSE Linux Enterprise libraries libgcc_s1, libstdc++6 are replaced by the gcc10 variants. The new compiler variants are available with '-10' suffix, you can specify them via: CC=gcc-10 CXX=g++-10 or similar commands. For a detailed changelog check out https://gcc.gnu.org/gcc-10/changes.html Changes in nvptx-tools: - Enable build on aarch64 This update was imported from the SUSE:SLE-15:Update update project. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-2020-1693 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VBPOTLDSYOVSFPHOQTKIX6LT32O5K234/ E-Mail link for openSUSE-SU-2020:1693-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1172798 SUSE Bug 1172798 https://bugzilla.suse.com/1172846 SUSE Bug 1172846 https://bugzilla.suse.com/1173972 SUSE Bug 1173972 https://bugzilla.suse.com/1174753 SUSE Bug 1174753 https://bugzilla.suse.com/1174817 SUSE Bug 1174817 https://bugzilla.suse.com/1175168 SUSE Bug 1175168 https://www.suse.com/security/cve/CVE-2020-13844/ SUSE CVE CVE-2020-13844 page openSUSE Leap 15.2 cpp10-10.2.1+git583-lp152.2.2 cross-nvptx-gcc10-10.2.1+git583-lp152.2.1 cross-nvptx-newlib10-devel-10.2.1+git583-lp152.2.1 gcc10-10.2.1+git583-lp152.2.2 gcc10-32bit-10.2.1+git583-lp152.2.2 gcc10-ada-10.2.1+git583-lp152.2.2 gcc10-ada-32bit-10.2.1+git583-lp152.2.2 gcc10-c++-10.2.1+git583-lp152.2.2 gcc10-c++-32bit-10.2.1+git583-lp152.2.2 gcc10-d-10.2.1+git583-lp152.2.2 gcc10-d-32bit-10.2.1+git583-lp152.2.2 gcc10-fortran-10.2.1+git583-lp152.2.2 gcc10-fortran-32bit-10.2.1+git583-lp152.2.2 gcc10-go-10.2.1+git583-lp152.2.2 gcc10-go-32bit-10.2.1+git583-lp152.2.2 gcc10-info-10.2.1+git583-lp152.2.2 gcc10-locale-10.2.1+git583-lp152.2.2 gcc10-obj-c++-10.2.1+git583-lp152.2.2 gcc10-obj-c++-32bit-10.2.1+git583-lp152.2.2 gcc10-objc-10.2.1+git583-lp152.2.2 gcc10-objc-32bit-10.2.1+git583-lp152.2.2 libada10-10.2.1+git583-lp152.2.2 libada10-32bit-10.2.1+git583-lp152.2.2 libasan6-10.2.1+git583-lp152.2.2 libasan6-32bit-10.2.1+git583-lp152.2.2 libatomic1-10.2.1+git583-lp152.2.2 libatomic1-32bit-10.2.1+git583-lp152.2.2 libgcc_s1-10.2.1+git583-lp152.2.2 libgcc_s1-32bit-10.2.1+git583-lp152.2.2 libgdruntime1-10.2.1+git583-lp152.2.2 libgdruntime1-32bit-10.2.1+git583-lp152.2.2 libgfortran5-10.2.1+git583-lp152.2.2 libgfortran5-32bit-10.2.1+git583-lp152.2.2 libgo16-10.2.1+git583-lp152.2.2 libgo16-32bit-10.2.1+git583-lp152.2.2 libgomp1-10.2.1+git583-lp152.2.2 libgomp1-32bit-10.2.1+git583-lp152.2.2 libgphobos1-10.2.1+git583-lp152.2.2 libgphobos1-32bit-10.2.1+git583-lp152.2.2 libitm1-10.2.1+git583-lp152.2.2 libitm1-32bit-10.2.1+git583-lp152.2.2 liblsan0-10.2.1+git583-lp152.2.2 libobjc4-10.2.1+git583-lp152.2.2 libobjc4-32bit-10.2.1+git583-lp152.2.2 libquadmath0-10.2.1+git583-lp152.2.2 libquadmath0-32bit-10.2.1+git583-lp152.2.2 libstdc++6-10.2.1+git583-lp152.2.2 libstdc++6-32bit-10.2.1+git583-lp152.2.2 libstdc++6-devel-gcc10-10.2.1+git583-lp152.2.2 libstdc++6-devel-gcc10-32bit-10.2.1+git583-lp152.2.2 libstdc++6-locale-10.2.1+git583-lp152.2.2 libstdc++6-pp-gcc10-10.2.1+git583-lp152.2.2 libstdc++6-pp-gcc10-32bit-10.2.1+git583-lp152.2.2 libtsan0-10.2.1+git583-lp152.2.2 libubsan1-10.2.1+git583-lp152.2.2 libubsan1-32bit-10.2.1+git583-lp152.2.2 nvptx-tools-1.0-lp152.4.3.2 cpp10-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 cross-nvptx-gcc10-10.2.1+git583-lp152.2.1 as a component of openSUSE Leap 15.2 cross-nvptx-newlib10-devel-10.2.1+git583-lp152.2.1 as a component of openSUSE Leap 15.2 gcc10-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 gcc10-32bit-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 gcc10-ada-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 gcc10-ada-32bit-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 gcc10-c++-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 gcc10-c++-32bit-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 gcc10-d-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 gcc10-d-32bit-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 gcc10-fortran-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 gcc10-fortran-32bit-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 gcc10-go-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 gcc10-go-32bit-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 gcc10-info-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 gcc10-locale-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 gcc10-obj-c++-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 gcc10-obj-c++-32bit-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 gcc10-objc-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 gcc10-objc-32bit-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libada10-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libada10-32bit-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libasan6-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libasan6-32bit-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libatomic1-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libatomic1-32bit-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libgcc_s1-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libgcc_s1-32bit-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libgdruntime1-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libgdruntime1-32bit-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libgfortran5-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libgfortran5-32bit-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libgo16-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libgo16-32bit-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libgomp1-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libgomp1-32bit-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libgphobos1-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libgphobos1-32bit-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libitm1-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libitm1-32bit-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 liblsan0-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libobjc4-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libobjc4-32bit-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libquadmath0-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libquadmath0-32bit-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libstdc++6-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libstdc++6-32bit-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libstdc++6-devel-gcc10-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libstdc++6-devel-gcc10-32bit-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libstdc++6-locale-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libstdc++6-pp-gcc10-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libstdc++6-pp-gcc10-32bit-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libtsan0-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libubsan1-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 libubsan1-32bit-10.2.1+git583-lp152.2.2 as a component of openSUSE Leap 15.2 nvptx-tools-1.0-lp152.4.3.2 as a component of openSUSE Leap 15.2 Arm Armv8-A core implementations utilizing speculative execution past unconditional changes in control flow may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka "straight-line speculation." CVE-2020-13844 openSUSE Leap 15.2:cpp10-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:cross-nvptx-gcc10-10.2.1+git583-lp152.2.1 openSUSE Leap 15.2:cross-nvptx-newlib10-devel-10.2.1+git583-lp152.2.1 openSUSE Leap 15.2:gcc10-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:gcc10-32bit-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:gcc10-ada-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:gcc10-ada-32bit-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:gcc10-c++-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:gcc10-c++-32bit-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:gcc10-d-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:gcc10-d-32bit-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:gcc10-fortran-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:gcc10-fortran-32bit-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:gcc10-go-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:gcc10-go-32bit-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:gcc10-info-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:gcc10-locale-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:gcc10-obj-c++-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:gcc10-obj-c++-32bit-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:gcc10-objc-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:gcc10-objc-32bit-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libada10-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libada10-32bit-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libasan6-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libasan6-32bit-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libatomic1-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libatomic1-32bit-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libgcc_s1-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libgcc_s1-32bit-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libgdruntime1-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libgdruntime1-32bit-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libgfortran5-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libgfortran5-32bit-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libgo16-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libgo16-32bit-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libgomp1-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libgomp1-32bit-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libgphobos1-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libgphobos1-32bit-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libitm1-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libitm1-32bit-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:liblsan0-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libobjc4-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libobjc4-32bit-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libquadmath0-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libquadmath0-32bit-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libstdc++6-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libstdc++6-32bit-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libstdc++6-devel-gcc10-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libstdc++6-devel-gcc10-32bit-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libstdc++6-locale-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libstdc++6-pp-gcc10-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libstdc++6-pp-gcc10-32bit-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libtsan0-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libubsan1-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:libubsan1-32bit-10.2.1+git583-lp152.2.2 openSUSE Leap 15.2:nvptx-tools-1.0-lp152.4.3.2 moderate 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VBPOTLDSYOVSFPHOQTKIX6LT32O5K234/ https://www.suse.com/security/cve/CVE-2020-13844.html CVE-2020-13844 https://bugzilla.suse.com/1172798 SUSE Bug 1172798