Red Hat Security AdvisoryRHSA-2020:1864
gcc security and bug fix update
Released 2020-04-28 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) gcc-plugin-devel-8.3.1-5.el8, libstdc++-static-8.3.1-5.el8
- Red Hat Enterprise Linux AppStream (v. 8) cpp-8.3.1-5.el8, gcc-8.3.1-5.el8, gcc-c++-8.3.1-5.el8 +7
- Red Hat Enterprise Linux BaseOS (v. 8) gcc-8.3.1-5.el8, libasan-8.3.1-5.el8, libatomic-8.3.1-5.el8 +11
Fixes 1 record
Priority LOW 39
The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03181 · Published 2019-09-02 · Fixed CWE-331
