Arm Armv8-A core implementations utilizing speculative execution past unconditional changes in control flow may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka "straight-line speculation."

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - kernel: out-of-bounds write in __btrfs_map_block in fs/btrfs/volumes.c (CVE-2019-19816)

  - Kernel: use-after-free in btf_dump_name_dups in tools/lib/bpf/btf_dump.c (CVE-2022-3534)

  - drivers/scsi/libsas/sas_scsi_host.c in the Linux kernel before 4.16 allows local users to cause a denial     of service (ata qc leak) by triggering certain failure conditions. NOTE: a third party disputes the     relevance of this report because the failure can only occur for physically proximate attackers who unplug     SAS Host Bus Adapter cables (CVE-2018-10021)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - kernel: local privileges escalation in kernel/bpf/verifier.c (CVE-2022-23222)

  - Kernel: use-after-free in btf_dump_name_dups in tools/lib/bpf/btf_dump.c (CVE-2022-3534)

  - An issue was discovered in the Linux kernel through 5.2.13. nbd_genl_status in drivers/block/nbd.c does     not check the nla_nest_start_noflag return value. (CVE-2019-16089)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

This update for gcc7 fixes the following issues :

  - CVE-2020-13844: Added mitigation for aarch64 Straight     Line Speculation issue (bsc#1172798)

  - Enable fortran for the nvptx offload compiler. 

  - Update README.First-for.SuSE.packagers

  - avoid assembler errors with AVX512 gather and scatter     instructions when using -masm=intel.

  - Backport the aarch64 -moutline-atomics feature and     accumulated fixes but not its default enabling.
    [jsc#SLE-12209, bsc#1167939]

  - Fixed 32bit libgnat.so link. [bsc#1178675]

  - Fixed memcpy miscompilation on aarch64. [bsc#1178624,     bsc#1178577]

  - Fixed debug line info for try/catch. [bsc#1178614]

  - Remove -mbranch-protection=standard (aarch64 flag) when     gcc7 is used to build gcc7 (ie when ada is enabled)

  - Fixed corruption of pass private ->aux via DF.
    [gcc#94148]

  - Fixed debug information issue with inlined functions and     passed by reference arguments. [gcc#93888]

  - Fixed binutils release date detection issue.

  - Fixed register allocation issue with exception handling     code on s390x. [bsc#1161913] 

  - Fixed miscompilation of some atomic code on aarch64.
    [bsc#1150164]

This update was imported from the SUSE:SLE-15:Update update project.

This update for gcc7 fixes the following issues :

CVE-2020-13844: Added mitigation for aarch64 Straight Line Speculation issue (bsc#1172798)

Enable fortran for the nvptx offload compiler.

Update README.First-for.SuSE.packagers

avoid assembler errors with AVX512 gather and scatter instructions when using -masm=intel.

Backport the aarch64 -moutline-atomics feature and accumulated fixes but not its default enabling. [jsc#SLE-12209, bsc#1167939]

Fixed 32bit libgnat.so link. [bsc#1178675]

Fixed memcpy miscompilation on aarch64. [bsc#1178624, bsc#1178577]

Fixed debug line info for try/catch. [bsc#1178614]

Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is used to build gcc7 (ie when ada is enabled)

Fixed corruption of pass private ->aux via DF. [gcc#94148]

Fixed debug information issue with inlined functions and passed by reference arguments. [gcc#93888]

Fixed binutils release date detection issue.

Fixed register allocation issue with exception handling code on s390x.
[bsc#1161913]

Fixed miscompilation of some atomic code on aarch64. [bsc#1150164]

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for gcc10 fixes the following issues: This update provides the GCC10 compiler suite and runtime libraries.

The base SUSE Linux Enterprise libraries libgcc_s1, libstdc++6 are replaced by the gcc10 variants.

The new compiler variants are available with '-10' suffix, you can specify them via :

CC=gcc-10 CXX=g++-10

or similar commands.

For a detailed changelog check out https://gcc.gnu.org/gcc-10/changes.html

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for gcc10, nvptx-tools fixes the following issues :

This update provides the GCC10 compiler suite and runtime libraries.

The base SUSE Linux Enterprise libraries libgcc_s1, libstdc++6 are replaced by the gcc10 variants.

The new compiler variants are available with '-10' suffix, you can specify them via :

&#9;CC=gcc-10 CXX=g++-10

or similar commands.

For a detailed changelog check out https://gcc.gnu.org/gcc-10/changes.html

Changes in nvptx-tools :

Enable build on aarch64

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for gcc10, nvptx-tools fixes the following issues :

This update provides the GCC10 compiler suite and runtime libraries.

The base SUSE Linux Enterprise libraries libgcc_s1, libstdc++6 are replaced by the gcc10 variants.

The new compiler variants are available with '-10' suffix, you can specify them via :

&#9;CC=gcc-10 &#9;CXX=g++-10

or similar commands.

For a detailed changelog check out https://gcc.gnu.org/gcc-10/changes.html

Changes in nvptx-tools :

  - Enable build on aarch64 This update was imported from     the SUSE:SLE-15:Update update project.

ID	Name	Product	Family	Severity
199272	RHEL 8 : kernel (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
199265	RHEL 9 : kernel (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
145329	openSUSE Security Update : gcc7 (openSUSE-2020-2301)	Nessus	SuSE Local Security Checks	medium
145277	openSUSE Security Update : gcc7 (openSUSE-2020-2300)	Nessus	SuSE Local Security Checks	medium
144100	SUSE SLED15 / SLES15 Security Update : gcc7 (SUSE-SU-2020:3749-1)	Nessus	SuSE Local Security Checks	medium
143695	SUSE SLES12 Security Update : gcc10 (SUSE-SU-2020:3263-1)	Nessus	SuSE Local Security Checks	medium
143609	SUSE SLED15 / SLES15 Security Update : gcc10, nvptx-tools (SUSE-SU-2020:2947-1)	Nessus	SuSE Local Security Checks	medium
141528	openSUSE Security Update : gcc10 / nvptx-tools (openSUSE-2020-1692)	Nessus	SuSE Local Security Checks	medium
141504	openSUSE Security Update : gcc10 / nvptx-tools (openSUSE-2020-1693)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2020-13844

medium

Tenable Plugins

high

high

medium

medium

medium

medium

medium

medium

medium