• 公告ID (KylinSec-SA-2023-2046)

摘要:

gcc security update

安全等级: Medium

公告ID: KylinSec-SA-2023-2046

发布日期: 2023年10月13日

关联CVE: CVE-2023-4039  

  • 详细介绍

1. 漏洞描述

   

gcc包包含GNU编译器集合版本10。你需要这个包来编译C代码。

2. 影响范围

cve名称 产品 组件 是否受影响
CVE-2023-4039 KY3.5.1 gcc Fixed
CVE-2023-4039 KY3.5.2 gcc Fixed

3. 影响组件

    gcc

4. 修复版本

   

KY3.5.1

软件名称 架构 版本号
libquadmath-static x86_64 10.3.1-19.kb1.ky3_5
libgfortran x86_64 10.3.1-19.kb1.ky3_5
libquadmath-devel x86_64 10.3.1-19.kb1.ky3_5
libstdc++-static x86_64 10.3.1-19.kb1.ky3_5
libatomic x86_64 10.3.1-19.kb1.ky3_5
liblsan-static x86_64 10.3.1-19.kb1.ky3_5
libubsan x86_64 10.3.1-19.kb1.ky3_5
libgomp x86_64 10.3.1-19.kb1.ky3_5
gcc-objc x86_64 10.3.1-19.kb1.ky3_5
gcc-gfortran x86_64 10.3.1-19.kb1.ky3_5
gcc-plugin-devel x86_64 10.3.1-19.kb1.ky3_5
gcc-gdb-plugin x86_64 10.3.1-19.kb1.ky3_5
libobjc x86_64 10.3.1-19.kb1.ky3_5
libitm x86_64 10.3.1-19.kb1.ky3_5
libubsan-static x86_64 10.3.1-19.kb1.ky3_5
gcc-c++ x86_64 10.3.1-19.kb1.ky3_5
libitm-devel x86_64 10.3.1-19.kb1.ky3_5
libitm-static x86_64 10.3.1-19.kb1.ky3_5
libgcc x86_64 10.3.1-19.kb1.ky3_5
libstdc++ x86_64 10.3.1-19.kb1.ky3_5
libquadmath x86_64 10.3.1-19.kb1.ky3_5
cpp x86_64 10.3.1-19.kb1.ky3_5
libtsan-static x86_64 10.3.1-19.kb1.ky3_5
libgfortran-static x86_64 10.3.1-19.kb1.ky3_5
libasan-static x86_64 10.3.1-19.kb1.ky3_5
liblsan x86_64 10.3.1-19.kb1.ky3_5
libstdc++-devel x86_64 10.3.1-19.kb1.ky3_5
libasan x86_64 10.3.1-19.kb1.ky3_5
gcc x86_64 10.3.1-19.kb1.ky3_5
gcc-objc++ x86_64 10.3.1-19.kb1.ky3_5
libtsan x86_64 10.3.1-19.kb1.ky3_5
libatomic-static x86_64 10.3.1-19.kb1.ky3_5
gcc-gfortran aarch64 10.3.1-19.kb1.ky3_5
libquadmath aarch64 10.3.1-19.kb1.ky3_5
libitm aarch64 10.3.1-19.kb1.ky3_5
gcc aarch64 10.3.1-19.kb1.ky3_5
libgfortran-static aarch64 10.3.1-19.kb1.ky3_5
libgomp aarch64 10.3.1-19.kb1.ky3_5
libquadmath-devel aarch64 10.3.1-19.kb1.ky3_5
libstdc++ aarch64 10.3.1-19.kb1.ky3_5
libobjc aarch64 10.3.1-19.kb1.ky3_5
libatomic aarch64 10.3.1-19.kb1.ky3_5
libubsan-static aarch64 10.3.1-19.kb1.ky3_5
libitm-devel aarch64 10.3.1-19.kb1.ky3_5
libtsan-static aarch64 10.3.1-19.kb1.ky3_5
libstdc++-devel aarch64 10.3.1-19.kb1.ky3_5
gcc-gdb-plugin aarch64 10.3.1-19.kb1.ky3_5
gcc-objc aarch64 10.3.1-19.kb1.ky3_5
gcc-plugin-devel aarch64 10.3.1-19.kb1.ky3_5
libitm-static aarch64 10.3.1-19.kb1.ky3_5
libgfortran aarch64 10.3.1-19.kb1.ky3_5
libubsan aarch64 10.3.1-19.kb1.ky3_5
libasan aarch64 10.3.1-19.kb1.ky3_5
liblsan-static aarch64 10.3.1-19.kb1.ky3_5
liblsan aarch64 10.3.1-19.kb1.ky3_5
libtsan aarch64 10.3.1-19.kb1.ky3_5
libatomic-static aarch64 10.3.1-19.kb1.ky3_5
libgcc aarch64 10.3.1-19.kb1.ky3_5
libquadmath-static aarch64 10.3.1-19.kb1.ky3_5
gcc-objc++ aarch64 10.3.1-19.kb1.ky3_5
libasan-static aarch64 10.3.1-19.kb1.ky3_5
cpp aarch64 10.3.1-19.kb1.ky3_5
gcc-c++ aarch64 10.3.1-19.kb1.ky3_5
libstdc++-static aarch64 10.3.1-19.kb1.ky3_5

KY3.5.2

软件名称 架构 版本号
gcc x86_64 10.3.1-25.ky3_5.kb4
libitm x86_64 10.3.1-25.ky3_5.kb4
libatomic-static x86_64 10.3.1-25.ky3_5.kb4
libtsan-static x86_64 10.3.1-25.ky3_5.kb4
libitm-devel x86_64 10.3.1-25.ky3_5.kb4
libgfortran x86_64 10.3.1-25.ky3_5.kb4
libitm-static x86_64 10.3.1-25.ky3_5.kb4
gcc-plugin-devel x86_64 10.3.1-25.ky3_5.kb4
libgcc x86_64 10.3.1-25.ky3_5.kb4
libasan x86_64 10.3.1-25.ky3_5.kb4
libstdc++-devel x86_64 10.3.1-25.ky3_5.kb4
libstdc++ x86_64 10.3.1-25.ky3_5.kb4
gcc-gdb-plugin x86_64 10.3.1-25.ky3_5.kb4
libubsan x86_64 10.3.1-25.ky3_5.kb4
libquadmath-devel x86_64 10.3.1-25.ky3_5.kb4
libquadmath x86_64 10.3.1-25.ky3_5.kb4
gcc-objc x86_64 10.3.1-25.ky3_5.kb4
libgfortran-static x86_64 10.3.1-25.ky3_5.kb4
gcc-c++ x86_64 10.3.1-25.ky3_5.kb4
libgomp x86_64 10.3.1-25.ky3_5.kb4
libgccjit-devel x86_64 10.3.1-25.ky3_5.kb4
libobjc x86_64 10.3.1-25.ky3_5.kb4
gcc-gfortran x86_64 10.3.1-25.ky3_5.kb4
cpp x86_64 10.3.1-25.ky3_5.kb4
libgccjit x86_64 10.3.1-25.ky3_5.kb4
liblsan x86_64 10.3.1-25.ky3_5.kb4
libstdc++-static x86_64 10.3.1-25.ky3_5.kb4
gcc-objc++ x86_64 10.3.1-25.ky3_5.kb4
libasan-static x86_64 10.3.1-25.ky3_5.kb4
libatomic x86_64 10.3.1-25.ky3_5.kb4
liblsan-static x86_64 10.3.1-25.ky3_5.kb4
libtsan x86_64 10.3.1-25.ky3_5.kb4
libquadmath-static x86_64 10.3.1-25.ky3_5.kb4
libubsan-static x86_64 10.3.1-25.ky3_5.kb4
libquadmath aarch64 10.3.1-25.ky3_5.kb4
libasan-static aarch64 10.3.1-25.ky3_5.kb4
libgfortran-static aarch64 10.3.1-25.ky3_5.kb4
libitm-static aarch64 10.3.1-25.ky3_5.kb4
gcc-gfortran aarch64 10.3.1-25.ky3_5.kb4
libobjc aarch64 10.3.1-25.ky3_5.kb4
libgccjit-devel aarch64 10.3.1-25.ky3_5.kb4
libubsan aarch64 10.3.1-25.ky3_5.kb4
libtsan aarch64 10.3.1-25.ky3_5.kb4
libstdc++-static aarch64 10.3.1-25.ky3_5.kb4
gcc aarch64 10.3.1-25.ky3_5.kb4
libatomic-static aarch64 10.3.1-25.ky3_5.kb4
libubsan-static aarch64 10.3.1-25.ky3_5.kb4
liblsan aarch64 10.3.1-25.ky3_5.kb4
libtsan-static aarch64 10.3.1-25.ky3_5.kb4
libasan aarch64 10.3.1-25.ky3_5.kb4
libquadmath-devel aarch64 10.3.1-25.ky3_5.kb4
liblsan-static aarch64 10.3.1-25.ky3_5.kb4
libitm aarch64 10.3.1-25.ky3_5.kb4
gcc-gdb-plugin aarch64 10.3.1-25.ky3_5.kb4
libquadmath-static aarch64 10.3.1-25.ky3_5.kb4
libgccjit aarch64 10.3.1-25.ky3_5.kb4
libstdc++ aarch64 10.3.1-25.ky3_5.kb4
gcc-objc aarch64 10.3.1-25.ky3_5.kb4
libatomic aarch64 10.3.1-25.ky3_5.kb4
libgomp aarch64 10.3.1-25.ky3_5.kb4
cpp aarch64 10.3.1-25.ky3_5.kb4
gcc-plugin-devel aarch64 10.3.1-25.ky3_5.kb4
gcc-objc++ aarch64 10.3.1-25.ky3_5.kb4
libitm-devel aarch64 10.3.1-25.ky3_5.kb4
gcc-c++ aarch64 10.3.1-25.ky3_5.kb4
libgcc aarch64 10.3.1-25.ky3_5.kb4
libgfortran aarch64 10.3.1-25.ky3_5.kb4
libstdc++-devel aarch64 10.3.1-25.ky3_5.kb4

5. 修复方法


方法一:下载安装包进行升级安装
1、通过下载链接下载需要升级的升级包保存,如 xxx.rpm
2、通过rpm命令升级,如 rpm -Uvh xxx.rpm

方法二:通过软件源进行升级安装
1、保持能够连接上互联网
2、通过yum命令升级指定的包,如 yum install 包名

6. 下载链接

   

KY3.5.1:

x86_64:

     libquadmath-static   

     libgfortran   

     libquadmath-devel   

     libstdc++-static   

     libatomic   

     liblsan-static   

     libubsan   

     libgomp   

     gcc-objc   

     gcc-gfortran   

     gcc-plugin-devel   

     gcc-gdb-plugin   

     libobjc   

     libitm   

     libubsan-static   

     gcc-c++   

     libitm-devel   

     libitm-static   

     libgcc   

     libstdc++   

     libquadmath   

     cpp   

     libtsan-static   

     libgfortran-static   

     libasan-static   

     liblsan   

     libstdc++-devel   

     libasan   

     gcc   

     gcc-objc++   

     libtsan   

     libatomic-static   

aarch64:

     gcc-gfortran   

     libquadmath   

     libitm   

     gcc   

     libgfortran-static   

     libgomp   

     libquadmath-devel   

     libstdc++   

     libobjc   

     libatomic   

     libubsan-static   

     libitm-devel   

     libtsan-static   

     libstdc++-devel   

     gcc-gdb-plugin   

     gcc-objc   

     gcc-plugin-devel   

     libitm-static   

     libgfortran   

     libubsan   

     libasan   

     liblsan-static   

     liblsan   

     libtsan   

     libatomic-static   

     libgcc   

     libquadmath-static   

     gcc-objc++   

     libasan-static   

     cpp   

     gcc-c++   

     libstdc++-static   

KY3.5.2:

x86_64:

     gcc   

     libitm   

     libatomic-static   

     libtsan-static   

     libitm-devel   

     libgfortran   

     libitm-static   

     gcc-plugin-devel   

     libgcc   

     libasan   

     libstdc++-devel   

     libstdc++   

     gcc-gdb-plugin   

     libubsan   

     libquadmath-devel   

     libquadmath   

     gcc-objc   

     libgfortran-static   

     gcc-c++   

     libgomp   

     libgccjit-devel   

     libobjc   

     gcc-gfortran   

     cpp   

     libgccjit   

     liblsan   

     libstdc++-static   

     gcc-objc++   

     libasan-static   

     libatomic   

     liblsan-static   

     libtsan   

     libquadmath-static   

     libubsan-static   

aarch64:

     libquadmath   

     libasan-static   

     libgfortran-static   

     libitm-static   

     gcc-gfortran   

     libobjc   

     libgccjit-devel   

     libubsan   

     libtsan   

     libstdc++-static   

     gcc   

     libatomic-static   

     libubsan-static   

     liblsan   

     libtsan-static   

     libasan   

     libquadmath-devel   

     liblsan-static   

     libitm   

     gcc-gdb-plugin   

     libquadmath-static   

     libgccjit   

     libstdc++   

     gcc-objc   

     libatomic   

     libgomp   

     cpp   

     gcc-plugin-devel   

     gcc-objc++   

     libitm-devel   

     gcc-c++   

     libgcc   

     libgfortran   

     libstdc++-devel   

上一篇:KylinSec-SA-2023-2041 下一篇:KylinSec-SA-2023-2280