Security update for gcc9

Announcement ID:	SUSE-SU-2019:3061-1
Rating:	moderate
References:	bsc#1114592 bsc#1135254 bsc#1141897 bsc#1142649 bsc#1142654 bsc#1148517 bsc#1149145 jsc#SLE-6533 jsc#SLE-6536
Cross-References:	CVE-2019-14250 CVE-2019-15847
CVSS scores:	CVE-2019-14250 ( SUSE ): 5.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2019-14250 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2019-14250 ( NVD ): 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2019-15847 ( SUSE ): 6.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2019-15847 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2019-15847 ( NVD ): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products:	Basesystem Module 15-SP1 Basesystem Module 15 Development Tools Module 15-SP1 Development Tools Module 15 SUSE Linux Enterprise Desktop 15 SUSE Linux Enterprise Desktop 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SUSE Linux Enterprise High Performance Computing 15 SP1 SUSE Linux Enterprise Real Time 15 SP1 SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server 15 SP1 Business Critical Linux 15-SP1 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Manager Proxy 4.0 SUSE Manager Retail Branch Server 4.0 SUSE Manager Server 4.0

An update that solves two vulnerabilities, contains two features and has five security fixes can now be installed.

Description:

This update includes the GNU Compiler Collection 9.

A full changelog is provided by the GCC team on:

https://www.gnu.org/software/gcc/gcc-9/changes.html

The base system compiler libraries libgcc_s1, libstdc++6 and others are now built by the gcc 9 packages.

To use it, install "gcc9" or "gcc9-c++" or other compiler brands and use CC=gcc-9 / CXX=g++-9 during configuration for using it.

Security issues fixed:

• CVE-2019-15847: Fixed a miscompilation in the POWER9 back end, that optimized multiple calls of the __builtin_darn intrinsic into a single call. (bsc#1149145)
• CVE-2019-14250: Fixed a heap overflow in the LTO linker. (bsc#1142649)

Non-security issues fixed:

• Split out libstdc++ pretty-printers into a separate package supplementing gdb and the installed runtime. (bsc#1135254)
• Fixed miscompilation for vector shift on s390. (bsc#1141897)

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

• Basesystem Module 15
  zypper in -t patch SUSE-SLE-Module-Basesystem-15-2019-3061=1
• Basesystem Module 15-SP1
  zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP1-2019-3061=1
• Development Tools Module 15
  zypper in -t patch SUSE-SLE-Module-Development-Tools-15-2019-3061=1
• Development Tools Module 15-SP1
  zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP1-2019-3061=1

Package List:

• Basesystem Module 15 (aarch64 ppc64le s390x x86_64)
  • libada9-debuginfo-9.2.1+r275327-1.3.7
  • libitm1-9.2.1+r275327-1.3.7
  • libgfortran5-9.2.1+r275327-1.3.7
  • libgcc_s1-9.2.1+r275327-1.3.7
  • libgcc_s1-debuginfo-9.2.1+r275327-1.3.7
  • gcc9-debuginfo-9.2.1+r275327-1.3.7
  • libgomp1-9.2.1+r275327-1.3.7
  • libubsan1-9.2.1+r275327-1.3.7
  • libubsan1-debuginfo-9.2.1+r275327-1.3.7
  • libstdc++6-devel-gcc9-9.2.1+r275327-1.3.7
  • libatomic1-debuginfo-9.2.1+r275327-1.3.7
  • libgomp1-debuginfo-9.2.1+r275327-1.3.7
  • libgo14-debuginfo-9.2.1+r275327-1.3.7
  • libasan5-debuginfo-9.2.1+r275327-1.3.7
  • libstdc++6-debuginfo-9.2.1+r275327-1.3.7
  • libasan5-9.2.1+r275327-1.3.7
  • libgo14-9.2.1+r275327-1.3.7
  • libstdc++6-pp-gcc9-9.2.1+r275327-1.3.7
  • libstdc++6-9.2.1+r275327-1.3.7
  • gcc9-debugsource-9.2.1+r275327-1.3.7
  • libgfortran5-debuginfo-9.2.1+r275327-1.3.7
  • libatomic1-9.2.1+r275327-1.3.7
  • libstdc++6-locale-9.2.1+r275327-1.3.7
  • libitm1-debuginfo-9.2.1+r275327-1.3.7
  • libada9-9.2.1+r275327-1.3.7
• Basesystem Module 15 (aarch64 ppc64le x86_64)
  • liblsan0-9.2.1+r275327-1.3.7
  • libtsan0-debuginfo-9.2.1+r275327-1.3.7
  • libtsan0-9.2.1+r275327-1.3.7
  • liblsan0-debuginfo-9.2.1+r275327-1.3.7
• Basesystem Module 15 (ppc64le x86_64)
  • libquadmath0-9.2.1+r275327-1.3.7
  • libquadmath0-debuginfo-9.2.1+r275327-1.3.7
• Basesystem Module 15 (s390x x86_64)
  • libgfortran5-32bit-9.2.1+r275327-1.3.7
  • libstdc++6-32bit-debuginfo-9.2.1+r275327-1.3.7
  • libatomic1-32bit-debuginfo-9.2.1+r275327-1.3.7
  • libada9-32bit-9.2.1+r275327-1.3.7
  • libgomp1-32bit-9.2.1+r275327-1.3.7
  • libgo14-32bit-9.2.1+r275327-1.3.7
  • libgo14-32bit-debuginfo-9.2.1+r275327-1.3.7
  • libgfortran5-32bit-debuginfo-9.2.1+r275327-1.3.7
  • libstdc++6-32bit-9.2.1+r275327-1.3.7
  • libgomp1-32bit-debuginfo-9.2.1+r275327-1.3.7
  • libada9-32bit-debuginfo-9.2.1+r275327-1.3.7
  • libitm1-32bit-9.2.1+r275327-1.3.7
  • libasan5-32bit-9.2.1+r275327-1.3.7
  • libasan5-32bit-debuginfo-9.2.1+r275327-1.3.7
  • libubsan1-32bit-9.2.1+r275327-1.3.7
  • libubsan1-32bit-debuginfo-9.2.1+r275327-1.3.7
  • libgcc_s1-32bit-9.2.1+r275327-1.3.7
  • libatomic1-32bit-9.2.1+r275327-1.3.7
  • libitm1-32bit-debuginfo-9.2.1+r275327-1.3.7
  • libgcc_s1-32bit-debuginfo-9.2.1+r275327-1.3.7
• Basesystem Module 15 (x86_64)
  • libquadmath0-32bit-9.2.1+r275327-1.3.7
  • libquadmath0-32bit-debuginfo-9.2.1+r275327-1.3.7
• Basesystem Module 15-SP1 (aarch64 ppc64le s390x x86_64)
  • libada9-debuginfo-9.2.1+r275327-1.3.7
  • libitm1-9.2.1+r275327-1.3.7
  • libgfortran5-9.2.1+r275327-1.3.7
  • libgcc_s1-9.2.1+r275327-1.3.7
  • libgcc_s1-debuginfo-9.2.1+r275327-1.3.7
  • gcc9-debuginfo-9.2.1+r275327-1.3.7
  • libgomp1-9.2.1+r275327-1.3.7
  • libubsan1-9.2.1+r275327-1.3.7
  • libubsan1-debuginfo-9.2.1+r275327-1.3.7
  • libstdc++6-devel-gcc9-9.2.1+r275327-1.3.7
  • libatomic1-debuginfo-9.2.1+r275327-1.3.7
  • libgomp1-debuginfo-9.2.1+r275327-1.3.7
  • libgo14-debuginfo-9.2.1+r275327-1.3.7
  • libasan5-debuginfo-9.2.1+r275327-1.3.7
  • libstdc++6-debuginfo-9.2.1+r275327-1.3.7
  • libasan5-9.2.1+r275327-1.3.7
  • libgo14-9.2.1+r275327-1.3.7
  • libstdc++6-pp-gcc9-9.2.1+r275327-1.3.7
  • libstdc++6-9.2.1+r275327-1.3.7
  • gcc9-debugsource-9.2.1+r275327-1.3.7
  • libgfortran5-debuginfo-9.2.1+r275327-1.3.7
  • libatomic1-9.2.1+r275327-1.3.7
  • libstdc++6-locale-9.2.1+r275327-1.3.7
  • libitm1-debuginfo-9.2.1+r275327-1.3.7
  • libada9-9.2.1+r275327-1.3.7
• Basesystem Module 15-SP1 (aarch64 ppc64le x86_64)
  • liblsan0-9.2.1+r275327-1.3.7
  • libtsan0-debuginfo-9.2.1+r275327-1.3.7
  • libtsan0-9.2.1+r275327-1.3.7
  • liblsan0-debuginfo-9.2.1+r275327-1.3.7
• Basesystem Module 15-SP1 (ppc64le x86_64)
  • libquadmath0-9.2.1+r275327-1.3.7
  • libquadmath0-debuginfo-9.2.1+r275327-1.3.7
• Basesystem Module 15-SP1 (s390x x86_64)
  • libgfortran5-32bit-9.2.1+r275327-1.3.7
  • libstdc++6-32bit-debuginfo-9.2.1+r275327-1.3.7
  • libatomic1-32bit-debuginfo-9.2.1+r275327-1.3.7
  • libada9-32bit-9.2.1+r275327-1.3.7
  • libgomp1-32bit-9.2.1+r275327-1.3.7
  • libgo14-32bit-9.2.1+r275327-1.3.7
  • libgo14-32bit-debuginfo-9.2.1+r275327-1.3.7
  • libgfortran5-32bit-debuginfo-9.2.1+r275327-1.3.7
  • libstdc++6-32bit-9.2.1+r275327-1.3.7
  • libgomp1-32bit-debuginfo-9.2.1+r275327-1.3.7
  • libada9-32bit-debuginfo-9.2.1+r275327-1.3.7
  • libitm1-32bit-9.2.1+r275327-1.3.7
  • libasan5-32bit-9.2.1+r275327-1.3.7
  • libasan5-32bit-debuginfo-9.2.1+r275327-1.3.7
  • libubsan1-32bit-9.2.1+r275327-1.3.7
  • libubsan1-32bit-debuginfo-9.2.1+r275327-1.3.7
  • libgcc_s1-32bit-9.2.1+r275327-1.3.7
  • libatomic1-32bit-9.2.1+r275327-1.3.7
  • libitm1-32bit-debuginfo-9.2.1+r275327-1.3.7
  • libgcc_s1-32bit-debuginfo-9.2.1+r275327-1.3.7
• Basesystem Module 15-SP1 (x86_64)
  • libquadmath0-32bit-9.2.1+r275327-1.3.7
  • libquadmath0-32bit-debuginfo-9.2.1+r275327-1.3.7
• Development Tools Module 15 (aarch64 ppc64le s390x x86_64)
  • gcc9-9.2.1+r275327-1.3.7
  • cpp9-9.2.1+r275327-1.3.7
  • gcc9-locale-9.2.1+r275327-1.3.7
  • gcc9-go-9.2.1+r275327-1.3.7
  • gcc9-c++-debuginfo-9.2.1+r275327-1.3.7
  • gcc9-ada-debuginfo-9.2.1+r275327-1.3.7
  • gcc9-debuginfo-9.2.1+r275327-1.3.7
  • gcc9-fortran-debuginfo-9.2.1+r275327-1.3.7
  • gcc9-ada-9.2.1+r275327-1.3.7
  • gcc9-go-debuginfo-9.2.1+r275327-1.3.7
  • cpp9-debuginfo-9.2.1+r275327-1.3.7
  • gcc9-fortran-9.2.1+r275327-1.3.7
  • gcc9-debugsource-9.2.1+r275327-1.3.7
  • gcc9-c++-9.2.1+r275327-1.3.7
• Development Tools Module 15 (noarch)
  • gcc9-info-9.2.1+r275327-1.3.7
• Development Tools Module 15 (aarch64 ppc64le x86_64)
  • libada9-9.2.1+r275327-1.3.7
  • libada9-debuginfo-9.2.1+r275327-1.3.7
• Development Tools Module 15 (s390x x86_64)
  • gcc9-ada-32bit-9.2.1+r275327-1.3.7
  • gcc9-32bit-9.2.1+r275327-1.3.7
  • libstdc++6-pp-gcc9-32bit-9.2.1+r275327-1.3.7
  • gcc9-c++-32bit-9.2.1+r275327-1.3.7
  • libstdc++6-devel-gcc9-32bit-9.2.1+r275327-1.3.7
  • gcc9-go-32bit-9.2.1+r275327-1.3.7
  • gcc9-fortran-32bit-9.2.1+r275327-1.3.7
• Development Tools Module 15 (s390x)
  • libstdc++6-devel-gcc9-9.2.1+r275327-1.3.7
  • libstdc++6-pp-gcc9-9.2.1+r275327-1.3.7
• Development Tools Module 15 (x86_64)
  • libubsan1-32bit-9.2.1+r275327-1.3.7
  • libatomic1-32bit-debuginfo-9.2.1+r275327-1.3.7
  • libada9-32bit-9.2.1+r275327-1.3.7
  • libubsan1-32bit-debuginfo-9.2.1+r275327-1.3.7
  • libada9-32bit-debuginfo-9.2.1+r275327-1.3.7
  • libatomic1-32bit-9.2.1+r275327-1.3.7
• Development Tools Module 15-SP1 (aarch64 ppc64le s390x x86_64)
  • gcc9-9.2.1+r275327-1.3.7
  • cpp9-9.2.1+r275327-1.3.7
  • gcc9-locale-9.2.1+r275327-1.3.7
  • gcc9-go-9.2.1+r275327-1.3.7
  • gcc9-c++-debuginfo-9.2.1+r275327-1.3.7
  • gcc9-ada-debuginfo-9.2.1+r275327-1.3.7
  • gcc9-debuginfo-9.2.1+r275327-1.3.7
  • gcc9-fortran-debuginfo-9.2.1+r275327-1.3.7
  • gcc9-ada-9.2.1+r275327-1.3.7
  • gcc9-go-debuginfo-9.2.1+r275327-1.3.7
  • cpp9-debuginfo-9.2.1+r275327-1.3.7
  • gcc9-fortran-9.2.1+r275327-1.3.7
  • gcc9-debugsource-9.2.1+r275327-1.3.7
  • gcc9-c++-9.2.1+r275327-1.3.7
• Development Tools Module 15-SP1 (noarch)
  • gcc9-info-9.2.1+r275327-1.3.7
• Development Tools Module 15-SP1 (aarch64 ppc64le x86_64)
  • libada9-9.2.1+r275327-1.3.7
  • libada9-debuginfo-9.2.1+r275327-1.3.7
• Development Tools Module 15-SP1 (aarch64 ppc64le s390x)
  • libstdc++6-devel-gcc9-9.2.1+r275327-1.3.7
• Development Tools Module 15-SP1 (s390x x86_64)
  • gcc9-ada-32bit-9.2.1+r275327-1.3.7
  • gcc9-32bit-9.2.1+r275327-1.3.7
  • libstdc++6-pp-gcc9-32bit-9.2.1+r275327-1.3.7
  • gcc9-c++-32bit-9.2.1+r275327-1.3.7
  • libstdc++6-devel-gcc9-32bit-9.2.1+r275327-1.3.7
  • gcc9-go-32bit-9.2.1+r275327-1.3.7
  • gcc9-fortran-32bit-9.2.1+r275327-1.3.7
• Development Tools Module 15-SP1 (s390x)
  • libstdc++6-pp-gcc9-9.2.1+r275327-1.3.7
• Development Tools Module 15-SP1 (x86_64)
  • libubsan1-32bit-9.2.1+r275327-1.3.7
  • libatomic1-32bit-debuginfo-9.2.1+r275327-1.3.7
  • libada9-32bit-9.2.1+r275327-1.3.7
  • libubsan1-32bit-debuginfo-9.2.1+r275327-1.3.7
  • libada9-32bit-debuginfo-9.2.1+r275327-1.3.7
  • libatomic1-32bit-9.2.1+r275327-1.3.7

References:

• https://www.suse.com/security/cve/CVE-2019-14250.html
• https://www.suse.com/security/cve/CVE-2019-15847.html
• https://bugzilla.suse.com/show_bug.cgi?id=1114592
• https://bugzilla.suse.com/show_bug.cgi?id=1135254
• https://bugzilla.suse.com/show_bug.cgi?id=1141897
• https://bugzilla.suse.com/show_bug.cgi?id=1142649
• https://bugzilla.suse.com/show_bug.cgi?id=1142654
• https://bugzilla.suse.com/show_bug.cgi?id=1148517
• https://bugzilla.suse.com/show_bug.cgi?id=1149145
• https://jira.suse.com/browse/SLE-6533
• https://jira.suse.com/browse/SLE-6536