Detections
Analytics

Fedora 12 : gcc-4.4.2-20.fc12 (2009-12813)

medium Nessus Plugin ID 43612

Synopsis

The remote Fedora host is missing a security update.

Description

- Tue Dec 22 2009 Jakub Jelinek <jakub at redhat.com> 4.4.2-20

 - fix MEM_SIZE of reload created stack slots (#548825, PR rtl-optimization/42429)

 - fix addition of one character long filenames in fastjar (#549493)

 - Thu Dec 17 2009 Jakub Jelinek <jakub at redhat.com> 4.4.2-18

 - update from gcc-4_4-branch

 - PRs c++/42387

 - another C++ virtual dtors fix (PR c++/42386)

 - VTA mode and COND_EXEC fixes (PR debug/41679)

 - fix ICE in chrec_convert_1 (#547775)

 - fix debuginfo for optimized out TLS vars

 - use DW_AT_location with DW_OP_addr + DW_OP_stack_value instead of DW_AT_const_value with address in it, use DW_OP_addr + DW_OP_stack_value instead of DW_OP_implicit_value with address (#546017)

 - Mon Dec 14 2009 Jakub Jelinek <jakub at redhat.com> 4.4.2-17

 - propagate TREE_NOTHROW/TREE_READONLY/DECL_PURE_P from ipa-pure-const and EH opt to all same body aliases (#547286)

 - don't emit DWARF location list entries with no location or DW_AT_location with empty blocks (PR debug/41473)

 - fix up AMD LWP support

 - don't crash when mangling C++ decls inside of middle-end generated functions (PR c++/41183)

 - Fri Dec 11 2009 Jakub Jelinek <jakub at redhat.com> 4.4.2-16

 - update from gcc-4_4-branch

 - PRs c++/27425, c++/34274, c++/42301, fortran/42268, java/41991, libstdc++/42273, rtl-optimization/41574, target/41196, target/41939 target/42263

 - Wed Dec 9 2009 Jakub Jelinek <jakub at redhat.com> 4.4.2-15

 - VTA backports

 - PRs debug/42166, debug/42234, debug/42244, debug/42299

 - fix handling of C++ COMDAT virtual destructors

 - some x86/x86_64 FMA4, XOP, ABM and LWP fixes

 - fix a decltype handling bug in templates (PR c++/42277)

 - Fri Dec 4 2009 Jakub Jelinek <jakub at redhat.com> 4.4.2-14

 - update from gcc-4_4-branch

 - PRs libstdc++/42261, middle-end/42049

 - backport C++0x ICE fix from trunk (PR c++/42266)

 - fortran !$omp workshare improvements (PR fortran/35423)

 - FMA4 and XOP fixes

 - Wed Dec 2 2009 Jakub Jelinek <jakub at redhat.com> 4.4.2-13

 - fix security issues in libltdl bundled within libgcj (CVE-2009-3736)

 - Wed Dec 2 2009 Jakub Jelinek <jakub at redhat.com> 4.4.2-12

 - update from gcc-4_4-branch

 - PRs c++/42234, fortran/41278, fortran/41807, fortran/42162, target/42113, target/42165

 - don't ICE on -O256 (#539923)

 - fix -mregnames on ppc/ppc64

 - optimize even COMDAT constructors and destructors without virtual bases (PR c++/3187)

 - Mon Nov 23 2009 Jakub Jelinek <jakub at redhat.com> 4.4.2-11

[plus 32 lines in the Changelog]

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Solution

Update the affected gcc package.

See Also

https://bugzilla.redhat.com/show_bug.cgi?id=537941

http://www.nessus.org/u?aa4ac9dc

Plugin Details

Severity: Medium

ID: 43612

File Name: fedora_2009-12813.nasl

Version: 1.15

Type: local

Agent: unix

Published: 12/30/2009

Updated: 1/11/2021

Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.5

CVSS v2

Risk Factor: Medium

Base Score: 6.9

Temporal Score: 5.1

Vector: CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:fedoraproject:fedora:gcc, cpe:/o:fedoraproject:fedora:12

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list

Exploit Ease: No known exploits are available

Patch Publication Date: 12/7/2009

Vulnerability Publication Date: 11/29/2009

Reference Information

CVE: CVE-2009-3736

BID: 37128

FEDORA: 2009-12813