SUSE-SU-2020:0394-1: gcc9&distro=HPE Helion OpenStack 8 SUSE Linux Enterprise

CVSS: UnknownPublished
Published 14-04-2020Last modified 04-02-2026
Open JSON

Vulnerability summary

SUSE-SU-2020:0394-1 is a vulnerability in gcc9&distro=HPE Helion OpenStack 8 SUSE Linux Enterprise with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 2 · Downstream 0 · Related 2
CVE-2019-14250CVE-2019-15847

Timeline

  1. 14-04-2020
    PublishedVulnerability first disclosed.
  2. 04-02-2026
    Last modifiedVulnerability information updated.

Description

Security update for gcc9 This update for gcc9 fixes the following issues: The GNU Compiler Collection is shipped in version 9. A detailed changelog on what changed in GCC 9 is available at https://gcc.gnu.org/gcc-9/changes.html The compilers have been added to the SUSE Linux Enterprise Toolchain Module. To use these compilers, install e.g. gcc9, gcc9-c++ and build with CC=gcc-9 CXX=g++-9 set. For SUSE Linux Enterprise base products, the libstdc++6, libgcc_s1 and other compiler libraries have been switched from their gcc8 variants to their gcc9 variants. Security issues fixed: - CVE-2019-15847: Fixed a miscompilation in the POWER9 back end, that optimized multiple calls of the __builtin_darn intrinsic into a single call. (bsc#1149145) - CVE-2019-14250: Fixed a heap overflow in the LTO linker. (bsc#1142649) Non-security issues fixed: - Split out libstdc++ pretty-printers into a separate package supplementing gdb and the installed runtime. (bsc#1135254) - Fixed miscompilation for vector shift on s390. (bsc#1141897)

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse18 products
  • gcc9&distro=HPE Helion OpenStack 8< 9.2.1+r275327-1.3.9
  • gcc9&distro=SUSE Enterprise Storage 5< 9.2.1+r275327-1.3.9
  • gcc9&distro=SUSE Linux Enterprise Module for Toolchain 12< 9.2.1+r275327-1.3.9
  • gcc9&distro=SUSE Linux Enterprise Server 12 SP1-LTSS< 9.2.1+r275327-1.3.9
  • gcc9&distro=SUSE Linux Enterprise Server 12 SP2-BCL< 9.2.1+r275327-1.3.9

1 vendor · 18 products

References

10 links