openSUSE 安全更新：gcc5 (openSUSE-2016-472)
medium Nessus 插件 ID 90562
语言：
简介
远程 openSUSE 主机缺少安全更新。描述
GNU Compiler Collection 已更新至 5.3.1 版，提供了多个补丁和增强功能。已修复以下安全问题：
- 修复 C++11 std::random_device 短读问题，该问题可导致可预测的随机性。（CVE-2015-5276、bsc#945842）
以下非安全问题已修复：
- 当堆栈不当时，针对 TARGET_64BIT_MS_ABI 启用帧指针。修复构建 Wine 时发生的内部编译器错误。(bsc#966220)
- 修复 gcc-go 中会中断编译较新版本 Docker 的 PowerPC 特定问题。(bsc#964468)
- 修复 PowerPC 上的内置 HTM。(bsc#955382)
- 修复 libgo 证书查找。(bsc#953831)
- 针对过时虚拟方法的内联定义，隐藏 deprecated-declarations 警告。(bsc#939460)
- 在 SLE11 上，再次以“--with-tune=z9-109 --with-arch=z900”构建 s390[x]。(bsc#954002)
- 在 aarch64 上恢复意外 libffi ABI 中断。
(bsc#968771)
- 在 x86_64 上，将默认 32 位代码生成设置为
-march=x86-64，而不是 -march=i586。
- 添加实验性质的文件系统 TS 库。此更新从 SUSE:SLE-12:Update 更新项目导入。
解决方案
更新受影响的 gcc5 程序包。另见
https://bugzilla.opensuse.org/show_bug.cgi?id=939460
https://bugzilla.opensuse.org/show_bug.cgi?id=945842
https://bugzilla.opensuse.org/show_bug.cgi?id=952151
https://bugzilla.opensuse.org/show_bug.cgi?id=953831
https://bugzilla.opensuse.org/show_bug.cgi?id=954002
https://bugzilla.opensuse.org/show_bug.cgi?id=955382
https://bugzilla.opensuse.org/show_bug.cgi?id=962765
https://bugzilla.opensuse.org/show_bug.cgi?id=964468
插件详情
严重性: Medium
ID: 90562
文件名: openSUSE-2016-472.nasl
版本: 2.3
类型: local
代理: unix
发布时间: 2016/4/18
最近更新时间: 2021/1/19
支持的传感器: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Nessus
风险信息
VPR
风险因素: Low
分数: 3.4
CVSS v2
风险因素: Medium
基本分数: 5
矢量: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N
漏洞信息
CPE: p-cpe:/a:novell:opensuse:cpp5, p-cpe:/a:novell:opensuse:cpp5-debuginfo, p-cpe:/a:novell:opensuse:gcc5, p-cpe:/a:novell:opensuse:gcc5-32bit, p-cpe:/a:novell:opensuse:gcc5-32bit-debuginfo, p-cpe:/a:novell:opensuse:gcc5-ada, p-cpe:/a:novell:opensuse:gcc5-ada-32bit, p-cpe:/a:novell:opensuse:gcc5-ada-debuginfo, p-cpe:/a:novell:opensuse:libmpxwrappers0-32bit, p-cpe:/a:novell:opensuse:libmpxwrappers0-32bit-debuginfo, p-cpe:/a:novell:opensuse:libmpxwrappers0-debuginfo, p-cpe:/a:novell:opensuse:libquadmath0, p-cpe:/a:novell:opensuse:libquadmath0-32bit, p-cpe:/a:novell:opensuse:libquadmath0-32bit-debuginfo, p-cpe:/a:novell:opensuse:libquadmath0-debuginfo, p-cpe:/a:novell:opensuse:libstdc%2b%2b6, p-cpe:/a:novell:opensuse:libstdc%2b%2b6-32bit, p-cpe:/a:novell:opensuse:libstdc%2b%2b6-32bit-debuginfo, p-cpe:/a:novell:opensuse:libstdc%2b%2b6-debuginfo, p-cpe:/a:novell:opensuse:libstdc%2b%2b6-devel-gcc5, p-cpe:/a:novell:opensuse:libstdc%2b%2b6-devel-gcc5-32bit, p-cpe:/a:novell:opensuse:libstdc%2b%2b6-locale, p-cpe:/a:novell:opensuse:libtsan0, p-cpe:/a:novell:opensuse:libtsan0-debuginfo, p-cpe:/a:novell:opensuse:libubsan0, p-cpe:/a:novell:opensuse:libubsan0-32bit, p-cpe:/a:novell:opensuse:libubsan0-32bit-debuginfo, p-cpe:/a:novell:opensuse:libubsan0-debuginfo, cpe:/o:novell:opensuse:42.1, p-cpe:/a:novell:opensuse:gcc5-c%2b%2b, p-cpe:/a:novell:opensuse:gcc5-c%2b%2b-32bit, p-cpe:/a:novell:opensuse:gcc5-c%2b%2b-debuginfo, p-cpe:/a:novell:opensuse:gcc5-debuginfo, p-cpe:/a:novell:opensuse:gcc5-debugsource, p-cpe:/a:novell:opensuse:gcc5-fortran, p-cpe:/a:novell:opensuse:gcc5-fortran-32bit, p-cpe:/a:novell:opensuse:gcc5-fortran-debuginfo, p-cpe:/a:novell:opensuse:gcc5-go, p-cpe:/a:novell:opensuse:gcc5-go-32bit, p-cpe:/a:novell:opensuse:gcc5-go-debuginfo, p-cpe:/a:novell:opensuse:gcc5-info, p-cpe:/a:novell:opensuse:gcc5-locale, p-cpe:/a:novell:opensuse:gcc5-testresults, p-cpe:/a:novell:opensuse:libada5, p-cpe:/a:novell:opensuse:libada5-32bit, p-cpe:/a:novell:opensuse:libada5-32bit-debuginfo, p-cpe:/a:novell:opensuse:libada5-debuginfo, p-cpe:/a:novell:opensuse:libasan2, p-cpe:/a:novell:opensuse:libasan2-32bit, p-cpe:/a:novell:opensuse:libasan2-32bit-debuginfo, p-cpe:/a:novell:opensuse:libasan2-debuginfo, p-cpe:/a:novell:opensuse:libatomic1, p-cpe:/a:novell:opensuse:libatomic1-32bit, p-cpe:/a:novell:opensuse:libatomic1-32bit-debuginfo, p-cpe:/a:novell:opensuse:libatomic1-debuginfo, p-cpe:/a:novell:opensuse:libcilkrts5, p-cpe:/a:novell:opensuse:libcilkrts5-32bit, p-cpe:/a:novell:opensuse:libcilkrts5-32bit-debuginfo, p-cpe:/a:novell:opensuse:libcilkrts5-debuginfo, p-cpe:/a:novell:opensuse:libffi-devel-gcc5, p-cpe:/a:novell:opensuse:libffi-devel-gcc5-32bit, p-cpe:/a:novell:opensuse:libffi-gcc5-debugsource, p-cpe:/a:novell:opensuse:libffi4, p-cpe:/a:novell:opensuse:libffi4-32bit, p-cpe:/a:novell:opensuse:libffi4-32bit-debuginfo, p-cpe:/a:novell:opensuse:libffi4-debuginfo, p-cpe:/a:novell:opensuse:libgcc_s1, p-cpe:/a:novell:opensuse:libgcc_s1-32bit, p-cpe:/a:novell:opensuse:libgcc_s1-32bit-debuginfo, p-cpe:/a:novell:opensuse:libgcc_s1-debuginfo, p-cpe:/a:novell:opensuse:libgfortran3, p-cpe:/a:novell:opensuse:libgfortran3-32bit, p-cpe:/a:novell:opensuse:libgfortran3-32bit-debuginfo, p-cpe:/a:novell:opensuse:libgfortran3-debuginfo, p-cpe:/a:novell:opensuse:libgo7, p-cpe:/a:novell:opensuse:libgo7-32bit, p-cpe:/a:novell:opensuse:libgo7-32bit-debuginfo, p-cpe:/a:novell:opensuse:libgo7-debuginfo, p-cpe:/a:novell:opensuse:libgomp1, p-cpe:/a:novell:opensuse:libgomp1-32bit, p-cpe:/a:novell:opensuse:libgomp1-32bit-debuginfo, p-cpe:/a:novell:opensuse:libgomp1-debuginfo, p-cpe:/a:novell:opensuse:libitm1, p-cpe:/a:novell:opensuse:libitm1-32bit, p-cpe:/a:novell:opensuse:libitm1-32bit-debuginfo, p-cpe:/a:novell:opensuse:libitm1-debuginfo, p-cpe:/a:novell:opensuse:liblsan0, p-cpe:/a:novell:opensuse:liblsan0-debuginfo, p-cpe:/a:novell:opensuse:libmpx0, p-cpe:/a:novell:opensuse:libmpx0-32bit, p-cpe:/a:novell:opensuse:libmpx0-32bit-debuginfo, p-cpe:/a:novell:opensuse:libmpx0-debuginfo, p-cpe:/a:novell:opensuse:libmpxwrappers0
必需的 KB 项: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list
补丁发布日期: 2016/4/17
参考资料信息
CVE: CVE-2015-5276