cpp12-12.3.0+git1204-2.1 on GA media SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2024:13233-1 Final 1 1 2024-06-15T00:00:00Z current 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z cpp12-12.3.0+git1204-2.1 on GA media These are all security issues fixed in the cpp12-12.3.0+git1204-2.1 package on the GA media of openSUSE Tumbleweed. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-Tumbleweed-2024-13233 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/security/rating/ SUSE Security Ratings https://www.suse.com/security/cve/CVE-2023-4039/ SUSE CVE CVE-2023-4039 page openSUSE Tumbleweed cpp12-12.3.0+git1204-2.1 gcc12-12.3.0+git1204-2.1 gcc12-32bit-12.3.0+git1204-2.1 gcc12-PIE-12.3.0+git1204-2.1 gcc12-ada-12.3.0+git1204-2.1 gcc12-ada-32bit-12.3.0+git1204-2.1 gcc12-c++-12.3.0+git1204-2.1 gcc12-c++-32bit-12.3.0+git1204-2.1 gcc12-d-12.3.0+git1204-2.1 gcc12-d-32bit-12.3.0+git1204-2.1 gcc12-devel-12.3.0+git1204-2.1 gcc12-fortran-12.3.0+git1204-2.1 gcc12-fortran-32bit-12.3.0+git1204-2.1 gcc12-go-12.3.0+git1204-2.1 gcc12-go-32bit-12.3.0+git1204-2.1 gcc12-info-12.3.0+git1204-2.1 gcc12-locale-12.3.0+git1204-2.1 gcc12-obj-c++-12.3.0+git1204-2.1 gcc12-obj-c++-32bit-12.3.0+git1204-2.1 gcc12-objc-12.3.0+git1204-2.1 gcc12-objc-32bit-12.3.0+git1204-2.1 libada12-12.3.0+git1204-2.1 libada12-32bit-12.3.0+git1204-2.1 libasan8-gcc12-12.3.0+git1204-2.1 libasan8-gcc12-32bit-12.3.0+git1204-2.1 libatomic1-gcc12-12.3.0+git1204-2.1 libatomic1-gcc12-32bit-12.3.0+git1204-2.1 libgcc_s1-gcc12-12.3.0+git1204-2.1 libgcc_s1-gcc12-32bit-12.3.0+git1204-2.1 libgccjit0-devel-gcc12-12.3.0+git1204-2.1 libgccjit0-gcc12-12.3.0+git1204-2.1 libgdruntime3-12.3.0+git1204-2.1 libgdruntime3-32bit-12.3.0+git1204-2.1 libgfortran5-gcc12-12.3.0+git1204-2.1 libgfortran5-gcc12-32bit-12.3.0+git1204-2.1 libgo21-12.3.0+git1204-2.1 libgo21-32bit-12.3.0+git1204-2.1 libgomp1-gcc12-12.3.0+git1204-2.1 libgomp1-gcc12-32bit-12.3.0+git1204-2.1 libgphobos3-12.3.0+git1204-2.1 libgphobos3-32bit-12.3.0+git1204-2.1 libitm1-gcc12-12.3.0+git1204-2.1 libitm1-gcc12-32bit-12.3.0+git1204-2.1 liblsan0-gcc12-12.3.0+git1204-2.1 libobjc4-gcc12-12.3.0+git1204-2.1 libobjc4-gcc12-32bit-12.3.0+git1204-2.1 libquadmath0-gcc12-12.3.0+git1204-2.1 libquadmath0-gcc12-32bit-12.3.0+git1204-2.1 libstdc++6-devel-gcc12-12.3.0+git1204-2.1 libstdc++6-devel-gcc12-32bit-12.3.0+git1204-2.1 libstdc++6-gcc12-12.3.0+git1204-2.1 libstdc++6-gcc12-32bit-12.3.0+git1204-2.1 libstdc++6-gcc12-locale-12.3.0+git1204-2.1 libstdc++6-pp-gcc12-12.3.0+git1204-2.1 libstdc++6-pp-gcc12-32bit-12.3.0+git1204-2.1 libtsan2-gcc12-12.3.0+git1204-2.1 libubsan1-gcc12-12.3.0+git1204-2.1 libubsan1-gcc12-32bit-12.3.0+git1204-2.1 cpp12-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed gcc12-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed gcc12-32bit-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed gcc12-PIE-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed gcc12-ada-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed gcc12-ada-32bit-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed gcc12-c++-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed gcc12-c++-32bit-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed gcc12-d-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed gcc12-d-32bit-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed gcc12-devel-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed gcc12-fortran-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed gcc12-fortran-32bit-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed gcc12-go-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed gcc12-go-32bit-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed gcc12-info-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed gcc12-locale-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed gcc12-obj-c++-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed gcc12-obj-c++-32bit-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed gcc12-objc-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed gcc12-objc-32bit-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libada12-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libada12-32bit-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libasan8-gcc12-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libasan8-gcc12-32bit-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libatomic1-gcc12-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libatomic1-gcc12-32bit-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libgcc_s1-gcc12-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libgcc_s1-gcc12-32bit-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libgccjit0-devel-gcc12-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libgccjit0-gcc12-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libgdruntime3-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libgdruntime3-32bit-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libgfortran5-gcc12-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libgfortran5-gcc12-32bit-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libgo21-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libgo21-32bit-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libgomp1-gcc12-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libgomp1-gcc12-32bit-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libgphobos3-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libgphobos3-32bit-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libitm1-gcc12-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libitm1-gcc12-32bit-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed liblsan0-gcc12-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libobjc4-gcc12-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libobjc4-gcc12-32bit-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libquadmath0-gcc12-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libquadmath0-gcc12-32bit-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libstdc++6-devel-gcc12-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libstdc++6-devel-gcc12-32bit-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libstdc++6-gcc12-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libstdc++6-gcc12-32bit-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libstdc++6-gcc12-locale-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libstdc++6-pp-gcc12-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libstdc++6-pp-gcc12-32bit-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libtsan2-gcc12-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libubsan1-gcc12-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed libubsan1-gcc12-32bit-12.3.0+git1204-2.1 as a component of openSUSE Tumbleweed ** DISPUTED ** **DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables in your application without this being detected. This stack-protector failure only applies to C99-style dynamically-sized local variables or those created using alloca(). The stack-protector operates as intended for statically-sized local variables. The default behavior when the stack-protector detects an overflow is to terminate your application, resulting in controlled loss of availability. An attacker who can exploit a buffer overflow without triggering the stack-protector might be able to change program flow control to cause an uncontrolled loss of availability or to go further and affect confidentiality or integrity. NOTE: The GCC project argues that this is a missed hardening bug and not a vulnerability by itself. CVE-2023-4039 openSUSE Tumbleweed:cpp12-12.3.0+git1204-2.1 openSUSE Tumbleweed:gcc12-12.3.0+git1204-2.1 openSUSE Tumbleweed:gcc12-32bit-12.3.0+git1204-2.1 openSUSE Tumbleweed:gcc12-PIE-12.3.0+git1204-2.1 openSUSE Tumbleweed:gcc12-ada-12.3.0+git1204-2.1 openSUSE Tumbleweed:gcc12-ada-32bit-12.3.0+git1204-2.1 openSUSE Tumbleweed:gcc12-c++-12.3.0+git1204-2.1 openSUSE Tumbleweed:gcc12-c++-32bit-12.3.0+git1204-2.1 openSUSE Tumbleweed:gcc12-d-12.3.0+git1204-2.1 openSUSE Tumbleweed:gcc12-d-32bit-12.3.0+git1204-2.1 openSUSE Tumbleweed:gcc12-devel-12.3.0+git1204-2.1 openSUSE Tumbleweed:gcc12-fortran-12.3.0+git1204-2.1 openSUSE Tumbleweed:gcc12-fortran-32bit-12.3.0+git1204-2.1 openSUSE Tumbleweed:gcc12-go-12.3.0+git1204-2.1 openSUSE Tumbleweed:gcc12-go-32bit-12.3.0+git1204-2.1 openSUSE Tumbleweed:gcc12-info-12.3.0+git1204-2.1 openSUSE Tumbleweed:gcc12-locale-12.3.0+git1204-2.1 openSUSE Tumbleweed:gcc12-obj-c++-12.3.0+git1204-2.1 openSUSE Tumbleweed:gcc12-obj-c++-32bit-12.3.0+git1204-2.1 openSUSE Tumbleweed:gcc12-objc-12.3.0+git1204-2.1 openSUSE Tumbleweed:gcc12-objc-32bit-12.3.0+git1204-2.1 openSUSE Tumbleweed:libada12-12.3.0+git1204-2.1 openSUSE Tumbleweed:libada12-32bit-12.3.0+git1204-2.1 openSUSE Tumbleweed:libasan8-gcc12-12.3.0+git1204-2.1 openSUSE Tumbleweed:libasan8-gcc12-32bit-12.3.0+git1204-2.1 openSUSE Tumbleweed:libatomic1-gcc12-12.3.0+git1204-2.1 openSUSE Tumbleweed:libatomic1-gcc12-32bit-12.3.0+git1204-2.1 openSUSE Tumbleweed:libgcc_s1-gcc12-12.3.0+git1204-2.1 openSUSE Tumbleweed:libgcc_s1-gcc12-32bit-12.3.0+git1204-2.1 openSUSE Tumbleweed:libgccjit0-devel-gcc12-12.3.0+git1204-2.1 openSUSE Tumbleweed:libgccjit0-gcc12-12.3.0+git1204-2.1 openSUSE Tumbleweed:libgdruntime3-12.3.0+git1204-2.1 openSUSE Tumbleweed:libgdruntime3-32bit-12.3.0+git1204-2.1 openSUSE Tumbleweed:libgfortran5-gcc12-12.3.0+git1204-2.1 openSUSE Tumbleweed:libgfortran5-gcc12-32bit-12.3.0+git1204-2.1 openSUSE Tumbleweed:libgo21-12.3.0+git1204-2.1 openSUSE Tumbleweed:libgo21-32bit-12.3.0+git1204-2.1 openSUSE Tumbleweed:libgomp1-gcc12-12.3.0+git1204-2.1 openSUSE Tumbleweed:libgomp1-gcc12-32bit-12.3.0+git1204-2.1 openSUSE Tumbleweed:libgphobos3-12.3.0+git1204-2.1 openSUSE Tumbleweed:libgphobos3-32bit-12.3.0+git1204-2.1 openSUSE Tumbleweed:libitm1-gcc12-12.3.0+git1204-2.1 openSUSE Tumbleweed:libitm1-gcc12-32bit-12.3.0+git1204-2.1 openSUSE Tumbleweed:liblsan0-gcc12-12.3.0+git1204-2.1 openSUSE Tumbleweed:libobjc4-gcc12-12.3.0+git1204-2.1 openSUSE Tumbleweed:libobjc4-gcc12-32bit-12.3.0+git1204-2.1 openSUSE Tumbleweed:libquadmath0-gcc12-12.3.0+git1204-2.1 openSUSE Tumbleweed:libquadmath0-gcc12-32bit-12.3.0+git1204-2.1 openSUSE Tumbleweed:libstdc++6-devel-gcc12-12.3.0+git1204-2.1 openSUSE Tumbleweed:libstdc++6-devel-gcc12-32bit-12.3.0+git1204-2.1 openSUSE Tumbleweed:libstdc++6-gcc12-12.3.0+git1204-2.1 openSUSE Tumbleweed:libstdc++6-gcc12-32bit-12.3.0+git1204-2.1 openSUSE Tumbleweed:libstdc++6-gcc12-locale-12.3.0+git1204-2.1 openSUSE Tumbleweed:libstdc++6-pp-gcc12-12.3.0+git1204-2.1 openSUSE Tumbleweed:libstdc++6-pp-gcc12-32bit-12.3.0+git1204-2.1 openSUSE Tumbleweed:libtsan2-gcc12-12.3.0+git1204-2.1 openSUSE Tumbleweed:libubsan1-gcc12-12.3.0+git1204-2.1 openSUSE Tumbleweed:libubsan1-gcc12-32bit-12.3.0+git1204-2.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-4039.html CVE-2023-4039 https://bugzilla.suse.com/1214052 SUSE Bug 1214052 https://bugzilla.suse.com/1228298 SUSE Bug 1228298