openSUSE 安全性更新：gcc5 (openSUSE-2016-472)
medium Nessus Plugin ID 90562
語系：
概要
遠端 openSUSE 主機缺少安全性更新。說明
GNU 編譯器集合已更新至 5.3.1 版，帶來了數個修正和增強功能。下列安全性問題已修正：
- 修正會導致可預測隨機性的 C++11 std::random_device 簡短讀取問題。(CVE-2015-5276、bsc#945842)
下列非安全性錯誤已修正：
- 當堆疊不當時，針對 TARGET_64BIT_MS_ABI 啟用框架指標。修正構建 Wine 時發生的內部編譯器錯誤。(bsc#966220)
- 修正中斷編譯較新版本 Docker 之 gcc-go 中的一個 PowerPC 特定問題。(bsc#964468)
- 修正 PowerPC 上的 HTM 內建程式。(bsc#955382)
- 修正 libgo 憑證查閱。(bsc#953831)
- 針對過時虛擬方法的內嵌定義，隱藏 deprecated-declarations 警告。(bsc#939460)
- 在 SLE11 上，再次以「--with-tune=z9-109 --with-arch=z900」構建 s390[x]。(bsc#954002)
- 在 aarch64 上還原意外 libffi ABI 中斷。
(bsc#968771)
- 在 x86_64 上，將預設 32 位元程式碼產生設定為
-march=x86-64，而不是 -march=i586。
- 新增實驗性質的檔案系統 TS 程式庫。此更新是從 SUSE:SLE-12:Update 更新專案匯入。
解決方案
更新受影響的 gcc5 套件。另請參閱
https://bugzilla.opensuse.org/show_bug.cgi?id=939460
https://bugzilla.opensuse.org/show_bug.cgi?id=945842
https://bugzilla.opensuse.org/show_bug.cgi?id=952151
https://bugzilla.opensuse.org/show_bug.cgi?id=953831
https://bugzilla.opensuse.org/show_bug.cgi?id=954002
https://bugzilla.opensuse.org/show_bug.cgi?id=955382
https://bugzilla.opensuse.org/show_bug.cgi?id=962765
https://bugzilla.opensuse.org/show_bug.cgi?id=964468
Plugin 詳細資訊
嚴重性: Medium
ID: 90562
檔案名稱: openSUSE-2016-472.nasl
版本: 2.3
類型: local
代理程式: unix
已發布: 2016/4/18
已更新: 2021/1/19
支援的感應器: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Nessus
風險資訊
VPR
風險因素: Low
分數: 3.4
CVSS v2
風險因素: Medium
基本分數: 5
媒介: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N
弱點資訊
CPE: p-cpe:/a:novell:opensuse:cpp5, p-cpe:/a:novell:opensuse:cpp5-debuginfo, p-cpe:/a:novell:opensuse:gcc5, p-cpe:/a:novell:opensuse:gcc5-32bit, p-cpe:/a:novell:opensuse:gcc5-32bit-debuginfo, p-cpe:/a:novell:opensuse:gcc5-ada, p-cpe:/a:novell:opensuse:gcc5-ada-32bit, p-cpe:/a:novell:opensuse:gcc5-ada-debuginfo, p-cpe:/a:novell:opensuse:libmpxwrappers0-32bit, p-cpe:/a:novell:opensuse:libmpxwrappers0-32bit-debuginfo, p-cpe:/a:novell:opensuse:libmpxwrappers0-debuginfo, p-cpe:/a:novell:opensuse:libquadmath0, p-cpe:/a:novell:opensuse:libquadmath0-32bit, p-cpe:/a:novell:opensuse:libquadmath0-32bit-debuginfo, p-cpe:/a:novell:opensuse:libquadmath0-debuginfo, p-cpe:/a:novell:opensuse:libstdc%2b%2b6, p-cpe:/a:novell:opensuse:libstdc%2b%2b6-32bit, p-cpe:/a:novell:opensuse:libstdc%2b%2b6-32bit-debuginfo, p-cpe:/a:novell:opensuse:libstdc%2b%2b6-debuginfo, p-cpe:/a:novell:opensuse:libstdc%2b%2b6-devel-gcc5, p-cpe:/a:novell:opensuse:libstdc%2b%2b6-devel-gcc5-32bit, p-cpe:/a:novell:opensuse:libstdc%2b%2b6-locale, p-cpe:/a:novell:opensuse:libtsan0, p-cpe:/a:novell:opensuse:libtsan0-debuginfo, p-cpe:/a:novell:opensuse:libubsan0, p-cpe:/a:novell:opensuse:libubsan0-32bit, p-cpe:/a:novell:opensuse:libubsan0-32bit-debuginfo, p-cpe:/a:novell:opensuse:libubsan0-debuginfo, cpe:/o:novell:opensuse:42.1, p-cpe:/a:novell:opensuse:gcc5-c%2b%2b, p-cpe:/a:novell:opensuse:gcc5-c%2b%2b-32bit, p-cpe:/a:novell:opensuse:gcc5-c%2b%2b-debuginfo, p-cpe:/a:novell:opensuse:gcc5-debuginfo, p-cpe:/a:novell:opensuse:gcc5-debugsource, p-cpe:/a:novell:opensuse:gcc5-fortran, p-cpe:/a:novell:opensuse:gcc5-fortran-32bit, p-cpe:/a:novell:opensuse:gcc5-fortran-debuginfo, p-cpe:/a:novell:opensuse:gcc5-go, p-cpe:/a:novell:opensuse:gcc5-go-32bit, p-cpe:/a:novell:opensuse:gcc5-go-debuginfo, p-cpe:/a:novell:opensuse:gcc5-info, p-cpe:/a:novell:opensuse:gcc5-locale, p-cpe:/a:novell:opensuse:gcc5-testresults, p-cpe:/a:novell:opensuse:libada5, p-cpe:/a:novell:opensuse:libada5-32bit, p-cpe:/a:novell:opensuse:libada5-32bit-debuginfo, p-cpe:/a:novell:opensuse:libada5-debuginfo, p-cpe:/a:novell:opensuse:libasan2, p-cpe:/a:novell:opensuse:libasan2-32bit, p-cpe:/a:novell:opensuse:libasan2-32bit-debuginfo, p-cpe:/a:novell:opensuse:libasan2-debuginfo, p-cpe:/a:novell:opensuse:libatomic1, p-cpe:/a:novell:opensuse:libatomic1-32bit, p-cpe:/a:novell:opensuse:libatomic1-32bit-debuginfo, p-cpe:/a:novell:opensuse:libatomic1-debuginfo, p-cpe:/a:novell:opensuse:libcilkrts5, p-cpe:/a:novell:opensuse:libcilkrts5-32bit, p-cpe:/a:novell:opensuse:libcilkrts5-32bit-debuginfo, p-cpe:/a:novell:opensuse:libcilkrts5-debuginfo, p-cpe:/a:novell:opensuse:libffi-devel-gcc5, p-cpe:/a:novell:opensuse:libffi-devel-gcc5-32bit, p-cpe:/a:novell:opensuse:libffi-gcc5-debugsource, p-cpe:/a:novell:opensuse:libffi4, p-cpe:/a:novell:opensuse:libffi4-32bit, p-cpe:/a:novell:opensuse:libffi4-32bit-debuginfo, p-cpe:/a:novell:opensuse:libffi4-debuginfo, p-cpe:/a:novell:opensuse:libgcc_s1, p-cpe:/a:novell:opensuse:libgcc_s1-32bit, p-cpe:/a:novell:opensuse:libgcc_s1-32bit-debuginfo, p-cpe:/a:novell:opensuse:libgcc_s1-debuginfo, p-cpe:/a:novell:opensuse:libgfortran3, p-cpe:/a:novell:opensuse:libgfortran3-32bit, p-cpe:/a:novell:opensuse:libgfortran3-32bit-debuginfo, p-cpe:/a:novell:opensuse:libgfortran3-debuginfo, p-cpe:/a:novell:opensuse:libgo7, p-cpe:/a:novell:opensuse:libgo7-32bit, p-cpe:/a:novell:opensuse:libgo7-32bit-debuginfo, p-cpe:/a:novell:opensuse:libgo7-debuginfo, p-cpe:/a:novell:opensuse:libgomp1, p-cpe:/a:novell:opensuse:libgomp1-32bit, p-cpe:/a:novell:opensuse:libgomp1-32bit-debuginfo, p-cpe:/a:novell:opensuse:libgomp1-debuginfo, p-cpe:/a:novell:opensuse:libitm1, p-cpe:/a:novell:opensuse:libitm1-32bit, p-cpe:/a:novell:opensuse:libitm1-32bit-debuginfo, p-cpe:/a:novell:opensuse:libitm1-debuginfo, p-cpe:/a:novell:opensuse:liblsan0, p-cpe:/a:novell:opensuse:liblsan0-debuginfo, p-cpe:/a:novell:opensuse:libmpx0, p-cpe:/a:novell:opensuse:libmpx0-32bit, p-cpe:/a:novell:opensuse:libmpx0-32bit-debuginfo, p-cpe:/a:novell:opensuse:libmpx0-debuginfo, p-cpe:/a:novell:opensuse:libmpxwrappers0
必要的 KB 項目: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list
修補程式發佈日期: 2016/4/17
參考資訊
CVE: CVE-2015-5276