Amazon Linux 2023 Security Advisory: ALAS-2023-145
Advisory Release Date: 2023-03-20 18:27 Pacific
Advisory Updated Date: 2023-03-22 23:18 Pacific
libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new. (CVE-2022-27943)
Affected Packages:
gcc
Issue Correction:
Run dnf update --releasever=2023.0.20230322 gcc to update your system.
aarch64:
libtsan-11.3.1-4.amzn2023.0.3.aarch64
gcc-debuginfo-11.3.1-4.amzn2023.0.3.aarch64
libasan-11.3.1-4.amzn2023.0.3.aarch64
libgccjit-devel-11.3.1-4.amzn2023.0.3.aarch64
cpp-11.3.1-4.amzn2023.0.3.aarch64
libgomp-debuginfo-11.3.1-4.amzn2023.0.3.aarch64
libasan-static-11.3.1-4.amzn2023.0.3.aarch64
liblsan-debuginfo-11.3.1-4.amzn2023.0.3.aarch64
gcc-gdb-plugin-debuginfo-11.3.1-4.amzn2023.0.3.aarch64
gcc-11.3.1-4.amzn2023.0.3.aarch64
gcc-gdb-plugin-11.3.1-4.amzn2023.0.3.aarch64
libstdc++-static-11.3.1-4.amzn2023.0.3.aarch64
libgcc-11.3.1-4.amzn2023.0.3.aarch64
libatomic-11.3.1-4.amzn2023.0.3.aarch64
libubsan-static-11.3.1-4.amzn2023.0.3.aarch64
libubsan-11.3.1-4.amzn2023.0.3.aarch64
libatomic-debuginfo-11.3.1-4.amzn2023.0.3.aarch64
libgomp-11.3.1-4.amzn2023.0.3.aarch64
libgccjit-11.3.1-4.amzn2023.0.3.aarch64
libgcc-debuginfo-11.3.1-4.amzn2023.0.3.aarch64
gcc-gfortran-11.3.1-4.amzn2023.0.3.aarch64
libitm-static-11.3.1-4.amzn2023.0.3.aarch64
libgfortran-static-11.3.1-4.amzn2023.0.3.aarch64
gcc-c++-11.3.1-4.amzn2023.0.3.aarch64
libitm-debuginfo-11.3.1-4.amzn2023.0.3.aarch64
gcc-gfortran-debuginfo-11.3.1-4.amzn2023.0.3.aarch64
libgccjit-debuginfo-11.3.1-4.amzn2023.0.3.aarch64
liblsan-static-11.3.1-4.amzn2023.0.3.aarch64
libtsan-static-11.3.1-4.amzn2023.0.3.aarch64
cpp-debuginfo-11.3.1-4.amzn2023.0.3.aarch64
libgfortran-11.3.1-4.amzn2023.0.3.aarch64
libtsan-debuginfo-11.3.1-4.amzn2023.0.3.aarch64
liblsan-11.3.1-4.amzn2023.0.3.aarch64
gcc-plugin-devel-11.3.1-4.amzn2023.0.3.aarch64
libasan-debuginfo-11.3.1-4.amzn2023.0.3.aarch64
gcc-c++-debuginfo-11.3.1-4.amzn2023.0.3.aarch64
libstdc++-debuginfo-11.3.1-4.amzn2023.0.3.aarch64
libubsan-debuginfo-11.3.1-4.amzn2023.0.3.aarch64
libstdc++-devel-11.3.1-4.amzn2023.0.3.aarch64
gcc-plugin-devel-debuginfo-11.3.1-4.amzn2023.0.3.aarch64
libitm-11.3.1-4.amzn2023.0.3.aarch64
libgfortran-debuginfo-11.3.1-4.amzn2023.0.3.aarch64
libstdc++-11.3.1-4.amzn2023.0.3.aarch64
libatomic-static-11.3.1-4.amzn2023.0.3.aarch64
libitm-devel-11.3.1-4.amzn2023.0.3.aarch64
gcc-debugsource-11.3.1-4.amzn2023.0.3.aarch64
libstdc++-docs-11.3.1-4.amzn2023.0.3.aarch64
src:
gcc-11.3.1-4.amzn2023.0.3.src
x86_64:
gcc-debuginfo-11.3.1-4.amzn2023.0.3.x86_64
libstdc++-static-11.3.1-4.amzn2023.0.3.x86_64
liblsan-static-11.3.1-4.amzn2023.0.3.x86_64
libtsan-11.3.1-4.amzn2023.0.3.x86_64
libasan-11.3.1-4.amzn2023.0.3.x86_64
libubsan-static-11.3.1-4.amzn2023.0.3.x86_64
libasan-static-11.3.1-4.amzn2023.0.3.x86_64
libgccjit-11.3.1-4.amzn2023.0.3.x86_64
cpp-11.3.1-4.amzn2023.0.3.x86_64
gcc-11.3.1-4.amzn2023.0.3.x86_64
libgccjit-devel-11.3.1-4.amzn2023.0.3.x86_64
cpp-debuginfo-11.3.1-4.amzn2023.0.3.x86_64
libgomp-debuginfo-11.3.1-4.amzn2023.0.3.x86_64
libstdc++-devel-11.3.1-4.amzn2023.0.3.x86_64
gcc-plugin-devel-11.3.1-4.amzn2023.0.3.x86_64
libtsan-debuginfo-11.3.1-4.amzn2023.0.3.x86_64
gcc-c++-11.3.1-4.amzn2023.0.3.x86_64
libasan-debuginfo-11.3.1-4.amzn2023.0.3.x86_64
libubsan-debuginfo-11.3.1-4.amzn2023.0.3.x86_64
gcc-gdb-plugin-debuginfo-11.3.1-4.amzn2023.0.3.x86_64
gcc-offload-nvptx-11.3.1-4.amzn2023.0.3.x86_64
libgccjit-debuginfo-11.3.1-4.amzn2023.0.3.x86_64
libgfortran-static-11.3.1-4.amzn2023.0.3.x86_64
gcc-gfortran-11.3.1-4.amzn2023.0.3.x86_64
gcc-gfortran-debuginfo-11.3.1-4.amzn2023.0.3.x86_64
liblsan-debuginfo-11.3.1-4.amzn2023.0.3.x86_64
libgfortran-debuginfo-11.3.1-4.amzn2023.0.3.x86_64
libstdc++-debuginfo-11.3.1-4.amzn2023.0.3.x86_64
gcc-c++-debuginfo-11.3.1-4.amzn2023.0.3.x86_64
libitm-debuginfo-11.3.1-4.amzn2023.0.3.x86_64
gcc-offload-nvptx-debuginfo-11.3.1-4.amzn2023.0.3.x86_64
libstdc++-11.3.1-4.amzn2023.0.3.x86_64
libgfortran-11.3.1-4.amzn2023.0.3.x86_64
gcc-debugsource-11.3.1-4.amzn2023.0.3.x86_64
libtsan-static-11.3.1-4.amzn2023.0.3.x86_64
libstdc++-docs-11.3.1-4.amzn2023.0.3.x86_64
libquadmath-static-11.3.1-4.amzn2023.0.3.x86_64
libquadmath-debuginfo-11.3.1-4.amzn2023.0.3.x86_64
gcc-plugin-devel-debuginfo-11.3.1-4.amzn2023.0.3.x86_64
libgomp-11.3.1-4.amzn2023.0.3.x86_64
liblsan-11.3.1-4.amzn2023.0.3.x86_64
libubsan-11.3.1-4.amzn2023.0.3.x86_64
libgcc-debuginfo-11.3.1-4.amzn2023.0.3.x86_64
libquadmath-11.3.1-4.amzn2023.0.3.x86_64
gcc-gdb-plugin-11.3.1-4.amzn2023.0.3.x86_64
libitm-static-11.3.1-4.amzn2023.0.3.x86_64
libgcc-11.3.1-4.amzn2023.0.3.x86_64
libitm-11.3.1-4.amzn2023.0.3.x86_64
libatomic-static-11.3.1-4.amzn2023.0.3.x86_64
libgomp-offload-nvptx-debuginfo-11.3.1-4.amzn2023.0.3.x86_64
libatomic-debuginfo-11.3.1-4.amzn2023.0.3.x86_64
libgomp-offload-nvptx-11.3.1-4.amzn2023.0.3.x86_64
libatomic-11.3.1-4.amzn2023.0.3.x86_64
libquadmath-devel-11.3.1-4.amzn2023.0.3.x86_64
libitm-devel-11.3.1-4.amzn2023.0.3.x86_64