{"schemaVersion":3,"id":"SUSE-SU-2023:3662-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for gcc7\n\nThis update for gcc7 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2023-4039: Fixed incorrect stack protector for C99 VLAs on Aarch64 (bsc#1214052).\n- CVE-2019-15847: Fixed POWER9 DARN miscompilation.  (bsc#1149145)\n- CVE-2019-14250: Includes fix for LTO linker plugin heap overflow.  (bsc#1142649)\n\nUpdate to GCC 7.5.0 release.\n\nOther changes:\n\n- Fixed KASAN kernel compile. (bsc#1205145)\n- Fixed ICE with C++17 code. (bsc#1204505)\n- Fixed altivec.h redefining bool in C++ which makes bool unusable (bsc#1195517):\n- Adjust gnats idea of the target, fixing the build of gprbuild.  [bsc#1196861]\n- Do not handle exceptions in std::thread (jsc#CAR-1182)\n- add -fpatchable-function-entry feature to gcc-7.\n- Fixed glibc namespace violation with getauxval. (bsc#1167939)\n- Backport aarch64 Straight Line Speculation mitigation [bsc#1172798, CVE-2020-13844]\n- Enable fortran for the nvptx offload compiler.\n- Update README.First-for.SuSE.packagers\n- Avoid assembler errors with AVX512 gather and scatter instructions when using -masm=intel.\n- Backport the aarch64 -moutline-atomics feature and accumulated fixes but not its\n  default enabling.  (jsc#SLE-12209, bsc#1167939)\n- Fixed memcpy miscompilation on aarch64.  (bsc#1178624, bsc#1178577)\n- Fixed debug line info for try/catch.  (bsc#1178614)\n- Fixed corruption of pass private ->aux via DF. (gcc#94148)\n- Fixed debug information issue with inlined functions and passed by reference arguments. [gcc#93888]\n- Fixed register allocation issue with exception handling code on s390x.  (bsc#1161913)\n- Backport PR target/92692 to fix miscompilation of some atomic code on aarch64. (bsc#1150164)\n- Fixed miscompilation in vectorized code for s390x.  (bsc#1160086) [gcc#92950]\n- Fixed miscompilation with thread-safe local static initialization.  [gcc#85887]\n- Fixed debug info created for array definitions that complete an earlier declaration.  [bsc#1146475]\n- Fixed vector shift miscompilation on s390.  (bsc#1141897)\n- Add gcc7 -flive-patching patch.  [bsc#1071995, fate#323487]\n- Strip -flto from $optflags.\n- Disables switch jump-tables when retpolines are used.  (bsc#1131264, jsc#SLE-6738)\n- Fixed ICE compiling tensorflow on aarch64.  (bsc#1129389)\n- Fixed for aarch64 FMA steering pass use-after-free.  (bsc#1128794)\n- Fixed ICE compiling tensorflow.  (bsc#1129389)\n- Fixed s390x FP load-and-test issue.  (bsc#1124644)\n- Adjust gnat manual entries in the info directory.  (bsc#1114592)\n- Fixed to no longer try linking -lieee with -mieee-fp.  (bsc#1084842)","dates":{"published":"2023-09-18T19:48:26.000Z","modified":"2026-02-04T03:00:32.338Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"cross-nvptx-gcc7&distro=SUSE Linux Enterprise Module for Toolchain 12","name":"cross-nvptx-gcc7","label":"cross-nvptx-gcc7&distro=SUSE Linux Enterprise Module for Toolchain 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cross-nvptx-gcc7&distro=SUSE Linux Enterprise Module for Toolchain 12","purlType":"rpm","versions":[{"text":"< 7.5.0+r278197-13.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.5.0+r278197-13.1","eol":null,"hubHref":null},{"vendor":"suse","product":"gcc7&distro=SUSE Linux Enterprise Module for Toolchain 12","name":"gcc7","label":"gcc7&distro=SUSE Linux Enterprise Module for Toolchain 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/gcc7&distro=SUSE Linux Enterprise Module for Toolchain 12","purlType":"rpm","versions":[{"text":"< 7.5.0+r278197-13.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.5.0+r278197-13.1","eol":null,"hubHref":null},{"vendor":"suse","product":"gcc7&distro=SUSE Linux Enterprise Server 12 SP5","name":"gcc7","label":"gcc7&distro=SUSE Linux Enterprise Server 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/gcc7&distro=SUSE Linux Enterprise Server 12 SP5","purlType":"rpm","versions":[{"text":"< 7.5.0+r278197-13.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.5.0+r278197-13.1","eol":null,"hubHref":null},{"vendor":"suse","product":"gcc7&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","name":"gcc7","label":"gcc7&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/gcc7&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","purlType":"rpm","versions":[{"text":"< 7.5.0+r278197-13.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.5.0+r278197-13.1","eol":null,"hubHref":null}],"affectedCount":4,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233662-1/","label":"www.suse.com/support/update/announcement/2023/suse-su-20233662-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1071995","label":"bugzilla.suse.com/1071995","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1084842","label":"bugzilla.suse.com/1084842","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1114592","label":"bugzilla.suse.com/1114592","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1124644","label":"bugzilla.suse.com/1124644","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1128794","label":"bugzilla.suse.com/1128794","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1129389","label":"bugzilla.suse.com/1129389","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1131264","label":"bugzilla.suse.com/1131264","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1141897","label":"bugzilla.suse.com/1141897","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1142649","label":"bugzilla.suse.com/1142649","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1146475","label":"bugzilla.suse.com/1146475","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1148517","label":"bugzilla.suse.com/1148517","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1149145","label":"bugzilla.suse.com/1149145","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1150164","label":"bugzilla.suse.com/1150164","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1160086","label":"bugzilla.suse.com/1160086","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1161913","label":"bugzilla.suse.com/1161913","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1167939","label":"bugzilla.suse.com/1167939","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1172798","label":"bugzilla.suse.com/1172798","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1178577","label":"bugzilla.suse.com/1178577","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1178614","label":"bugzilla.suse.com/1178614","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1178624","label":"bugzilla.suse.com/1178624","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1178675","label":"bugzilla.suse.com/1178675","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1181618","label":"bugzilla.suse.com/1181618","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1195517","label":"bugzilla.suse.com/1195517","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1196861","label":"bugzilla.suse.com/1196861","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1204505","label":"bugzilla.suse.com/1204505","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1205145","label":"bugzilla.suse.com/1205145","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1214052","label":"bugzilla.suse.com/1214052","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14250","label":"www.suse.com/security/cve/CVE-2019-14250","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15847","label":"www.suse.com/security/cve/CVE-2019-15847","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13844","label":"www.suse.com/security/cve/CVE-2020-13844","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4039","label":"www.suse.com/security/cve/CVE-2023-4039","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2019-14250","CVE-2019-15847","CVE-2020-13844","CVE-2023-4039"],"downstream":[],"duplicates":[],"related":["CVE-2019-14250","CVE-2019-15847","CVE-2020-13844","CVE-2023-4039"]},"timeline":[{"kind":"published","date":"2023-09-18T19:48:26.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T03:00:32.338Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T21:03:41.027Z","stale":false,"partial":false}}