cpp13-13.2.1+git7813-1.1 on GA media SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2024:13234-1 Final 1 1 2024-06-15T00:00:00Z current 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z cpp13-13.2.1+git7813-1.1 on GA media These are all security issues fixed in the cpp13-13.2.1+git7813-1.1 package on the GA media of openSUSE Tumbleweed. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-Tumbleweed-2024-13234 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/security/rating/ SUSE Security Ratings https://www.suse.com/security/cve/CVE-2023-4039/ SUSE CVE CVE-2023-4039 page openSUSE Tumbleweed cpp13-13.2.1+git7813-1.1 gcc13-13.2.1+git7813-1.1 gcc13-32bit-13.2.1+git7813-1.1 gcc13-PIE-13.2.1+git7813-1.1 gcc13-ada-13.2.1+git7813-1.1 gcc13-ada-32bit-13.2.1+git7813-1.1 gcc13-c++-13.2.1+git7813-1.1 gcc13-c++-32bit-13.2.1+git7813-1.1 gcc13-d-13.2.1+git7813-1.1 gcc13-d-32bit-13.2.1+git7813-1.1 gcc13-devel-13.2.1+git7813-1.1 gcc13-fortran-13.2.1+git7813-1.1 gcc13-fortran-32bit-13.2.1+git7813-1.1 gcc13-go-13.2.1+git7813-1.1 gcc13-go-32bit-13.2.1+git7813-1.1 gcc13-info-13.2.1+git7813-1.1 gcc13-locale-13.2.1+git7813-1.1 gcc13-m2-13.2.1+git7813-1.1 gcc13-m2-32bit-13.2.1+git7813-1.1 gcc13-obj-c++-13.2.1+git7813-1.1 gcc13-obj-c++-32bit-13.2.1+git7813-1.1 gcc13-objc-13.2.1+git7813-1.1 gcc13-objc-32bit-13.2.1+git7813-1.1 libada13-13.2.1+git7813-1.1 libada13-32bit-13.2.1+git7813-1.1 libasan8-13.2.1+git7813-1.1 libasan8-32bit-13.2.1+git7813-1.1 libatomic1-13.2.1+git7813-1.1 libatomic1-32bit-13.2.1+git7813-1.1 libgcc_s1-13.2.1+git7813-1.1 libgcc_s1-32bit-13.2.1+git7813-1.1 libgccjit0-13.2.1+git7813-1.1 libgccjit0-devel-gcc13-13.2.1+git7813-1.1 libgdruntime4-13.2.1+git7813-1.1 libgdruntime4-32bit-13.2.1+git7813-1.1 libgfortran5-13.2.1+git7813-1.1 libgfortran5-32bit-13.2.1+git7813-1.1 libgo22-13.2.1+git7813-1.1 libgo22-32bit-13.2.1+git7813-1.1 libgomp1-13.2.1+git7813-1.1 libgomp1-32bit-13.2.1+git7813-1.1 libgphobos4-13.2.1+git7813-1.1 libgphobos4-32bit-13.2.1+git7813-1.1 libhwasan0-13.2.1+git7813-1.1 libitm1-13.2.1+git7813-1.1 libitm1-32bit-13.2.1+git7813-1.1 liblsan0-13.2.1+git7813-1.1 libm2cor18-13.2.1+git7813-1.1 libm2cor18-32bit-13.2.1+git7813-1.1 libm2iso18-13.2.1+git7813-1.1 libm2iso18-32bit-13.2.1+git7813-1.1 libm2log18-13.2.1+git7813-1.1 libm2log18-32bit-13.2.1+git7813-1.1 libm2min18-13.2.1+git7813-1.1 libm2min18-32bit-13.2.1+git7813-1.1 libm2pim18-13.2.1+git7813-1.1 libm2pim18-32bit-13.2.1+git7813-1.1 libobjc4-13.2.1+git7813-1.1 libobjc4-32bit-13.2.1+git7813-1.1 libquadmath0-13.2.1+git7813-1.1 libquadmath0-32bit-13.2.1+git7813-1.1 libstdc++6-13.2.1+git7813-1.1 libstdc++6-32bit-13.2.1+git7813-1.1 libstdc++6-devel-gcc13-13.2.1+git7813-1.1 libstdc++6-devel-gcc13-32bit-13.2.1+git7813-1.1 libstdc++6-locale-13.2.1+git7813-1.1 libstdc++6-pp-13.2.1+git7813-1.1 libstdc++6-pp-32bit-13.2.1+git7813-1.1 libtsan2-13.2.1+git7813-1.1 libubsan1-13.2.1+git7813-1.1 libubsan1-32bit-13.2.1+git7813-1.1 cpp13-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed gcc13-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed gcc13-32bit-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed gcc13-PIE-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed gcc13-ada-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed gcc13-ada-32bit-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed gcc13-c++-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed gcc13-c++-32bit-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed gcc13-d-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed gcc13-d-32bit-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed gcc13-devel-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed gcc13-fortran-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed gcc13-fortran-32bit-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed gcc13-go-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed gcc13-go-32bit-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed gcc13-info-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed gcc13-locale-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed gcc13-m2-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed gcc13-m2-32bit-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed gcc13-obj-c++-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed gcc13-obj-c++-32bit-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed gcc13-objc-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed gcc13-objc-32bit-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libada13-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libada13-32bit-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libasan8-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libasan8-32bit-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libatomic1-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libatomic1-32bit-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libgcc_s1-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libgcc_s1-32bit-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libgccjit0-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libgccjit0-devel-gcc13-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libgdruntime4-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libgdruntime4-32bit-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libgfortran5-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libgfortran5-32bit-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libgo22-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libgo22-32bit-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libgomp1-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libgomp1-32bit-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libgphobos4-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libgphobos4-32bit-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libhwasan0-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libitm1-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libitm1-32bit-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed liblsan0-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libm2cor18-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libm2cor18-32bit-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libm2iso18-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libm2iso18-32bit-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libm2log18-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libm2log18-32bit-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libm2min18-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libm2min18-32bit-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libm2pim18-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libm2pim18-32bit-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libobjc4-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libobjc4-32bit-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libquadmath0-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libquadmath0-32bit-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libstdc++6-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libstdc++6-32bit-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libstdc++6-devel-gcc13-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libstdc++6-devel-gcc13-32bit-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libstdc++6-locale-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libstdc++6-pp-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libstdc++6-pp-32bit-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libtsan2-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libubsan1-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed libubsan1-32bit-13.2.1+git7813-1.1 as a component of openSUSE Tumbleweed ** DISPUTED ** **DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables in your application without this being detected. This stack-protector failure only applies to C99-style dynamically-sized local variables or those created using alloca(). The stack-protector operates as intended for statically-sized local variables. The default behavior when the stack-protector detects an overflow is to terminate your application, resulting in controlled loss of availability. An attacker who can exploit a buffer overflow without triggering the stack-protector might be able to change program flow control to cause an uncontrolled loss of availability or to go further and affect confidentiality or integrity. NOTE: The GCC project argues that this is a missed hardening bug and not a vulnerability by itself. CVE-2023-4039 openSUSE Tumbleweed:cpp13-13.2.1+git7813-1.1 openSUSE Tumbleweed:gcc13-13.2.1+git7813-1.1 openSUSE Tumbleweed:gcc13-32bit-13.2.1+git7813-1.1 openSUSE Tumbleweed:gcc13-PIE-13.2.1+git7813-1.1 openSUSE Tumbleweed:gcc13-ada-13.2.1+git7813-1.1 openSUSE Tumbleweed:gcc13-ada-32bit-13.2.1+git7813-1.1 openSUSE Tumbleweed:gcc13-c++-13.2.1+git7813-1.1 openSUSE Tumbleweed:gcc13-c++-32bit-13.2.1+git7813-1.1 openSUSE Tumbleweed:gcc13-d-13.2.1+git7813-1.1 openSUSE Tumbleweed:gcc13-d-32bit-13.2.1+git7813-1.1 openSUSE Tumbleweed:gcc13-devel-13.2.1+git7813-1.1 openSUSE Tumbleweed:gcc13-fortran-13.2.1+git7813-1.1 openSUSE Tumbleweed:gcc13-fortran-32bit-13.2.1+git7813-1.1 openSUSE Tumbleweed:gcc13-go-13.2.1+git7813-1.1 openSUSE Tumbleweed:gcc13-go-32bit-13.2.1+git7813-1.1 openSUSE Tumbleweed:gcc13-info-13.2.1+git7813-1.1 openSUSE Tumbleweed:gcc13-locale-13.2.1+git7813-1.1 openSUSE Tumbleweed:gcc13-m2-13.2.1+git7813-1.1 openSUSE Tumbleweed:gcc13-m2-32bit-13.2.1+git7813-1.1 openSUSE Tumbleweed:gcc13-obj-c++-13.2.1+git7813-1.1 openSUSE Tumbleweed:gcc13-obj-c++-32bit-13.2.1+git7813-1.1 openSUSE Tumbleweed:gcc13-objc-13.2.1+git7813-1.1 openSUSE Tumbleweed:gcc13-objc-32bit-13.2.1+git7813-1.1 openSUSE Tumbleweed:libada13-13.2.1+git7813-1.1 openSUSE Tumbleweed:libada13-32bit-13.2.1+git7813-1.1 openSUSE Tumbleweed:libasan8-13.2.1+git7813-1.1 openSUSE Tumbleweed:libasan8-32bit-13.2.1+git7813-1.1 openSUSE Tumbleweed:libatomic1-13.2.1+git7813-1.1 openSUSE Tumbleweed:libatomic1-32bit-13.2.1+git7813-1.1 openSUSE Tumbleweed:libgcc_s1-13.2.1+git7813-1.1 openSUSE Tumbleweed:libgcc_s1-32bit-13.2.1+git7813-1.1 openSUSE Tumbleweed:libgccjit0-13.2.1+git7813-1.1 openSUSE Tumbleweed:libgccjit0-devel-gcc13-13.2.1+git7813-1.1 openSUSE Tumbleweed:libgdruntime4-13.2.1+git7813-1.1 openSUSE Tumbleweed:libgdruntime4-32bit-13.2.1+git7813-1.1 openSUSE Tumbleweed:libgfortran5-13.2.1+git7813-1.1 openSUSE Tumbleweed:libgfortran5-32bit-13.2.1+git7813-1.1 openSUSE Tumbleweed:libgo22-13.2.1+git7813-1.1 openSUSE Tumbleweed:libgo22-32bit-13.2.1+git7813-1.1 openSUSE Tumbleweed:libgomp1-13.2.1+git7813-1.1 openSUSE Tumbleweed:libgomp1-32bit-13.2.1+git7813-1.1 openSUSE Tumbleweed:libgphobos4-13.2.1+git7813-1.1 openSUSE Tumbleweed:libgphobos4-32bit-13.2.1+git7813-1.1 openSUSE Tumbleweed:libhwasan0-13.2.1+git7813-1.1 openSUSE Tumbleweed:libitm1-13.2.1+git7813-1.1 openSUSE Tumbleweed:libitm1-32bit-13.2.1+git7813-1.1 openSUSE Tumbleweed:liblsan0-13.2.1+git7813-1.1 openSUSE Tumbleweed:libm2cor18-13.2.1+git7813-1.1 openSUSE Tumbleweed:libm2cor18-32bit-13.2.1+git7813-1.1 openSUSE Tumbleweed:libm2iso18-13.2.1+git7813-1.1 openSUSE Tumbleweed:libm2iso18-32bit-13.2.1+git7813-1.1 openSUSE Tumbleweed:libm2log18-13.2.1+git7813-1.1 openSUSE Tumbleweed:libm2log18-32bit-13.2.1+git7813-1.1 openSUSE Tumbleweed:libm2min18-13.2.1+git7813-1.1 openSUSE Tumbleweed:libm2min18-32bit-13.2.1+git7813-1.1 openSUSE Tumbleweed:libm2pim18-13.2.1+git7813-1.1 openSUSE Tumbleweed:libm2pim18-32bit-13.2.1+git7813-1.1 openSUSE Tumbleweed:libobjc4-13.2.1+git7813-1.1 openSUSE Tumbleweed:libobjc4-32bit-13.2.1+git7813-1.1 openSUSE Tumbleweed:libquadmath0-13.2.1+git7813-1.1 openSUSE Tumbleweed:libquadmath0-32bit-13.2.1+git7813-1.1 openSUSE Tumbleweed:libstdc++6-13.2.1+git7813-1.1 openSUSE Tumbleweed:libstdc++6-32bit-13.2.1+git7813-1.1 openSUSE Tumbleweed:libstdc++6-devel-gcc13-13.2.1+git7813-1.1 openSUSE Tumbleweed:libstdc++6-devel-gcc13-32bit-13.2.1+git7813-1.1 openSUSE Tumbleweed:libstdc++6-locale-13.2.1+git7813-1.1 openSUSE Tumbleweed:libstdc++6-pp-13.2.1+git7813-1.1 openSUSE Tumbleweed:libstdc++6-pp-32bit-13.2.1+git7813-1.1 openSUSE Tumbleweed:libtsan2-13.2.1+git7813-1.1 openSUSE Tumbleweed:libubsan1-13.2.1+git7813-1.1 openSUSE Tumbleweed:libubsan1-32bit-13.2.1+git7813-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-4039.html CVE-2023-4039 https://bugzilla.suse.com/1214052 SUSE Bug 1214052 https://bugzilla.suse.com/1228298 SUSE Bug 1228298