Advisories » MGASA-2014-0306

Updated gcc packages fix security vulnerability and other bugs

Publication date: 04 Aug 2014
Modification date: 04 Aug 2014
Type: security
Affected Mageia releases : 3 , 4
CVE: CVE-2014-5044

Description

Updated gcc packages fix the following security issue:
Multiple integer overflow issues were found in libgfortran, the run-time
support library for the Fortran compiler. These could possibly be used to
crash a Fortran application or cause it to execute arbitrary code.
(CVE-2014-5044)

They also fix the following bugs:
The gcc rtl-optimization sched2 miscompiles syscall sequence wich can 
cause random panic in glibc and kernel (gcc/PR61801)

clang++ fails to find cxxabi.h and cxxabi_tweaks.h during build (mga#13543)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=13811
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5044

SRPMS

4/core

• gcc-4.8.2-3.2.mga4

3/core

• gcc-4.7.2-8.2.mga3