cpp, gcc, libasan, libatomic, libgcc, libgfortran, libgnat, libgo, libgomp, libitm, libmudflap, libobjc, libquadmath, libstdc++, libtsan security update

CentOS Errata and Security Advisory CESA-2018:0849

The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries.

Security Fix(es):

• gcc: GCC generates incorrect code for RDRAND/RDSEED intrinsics (CVE-2017-11671)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.5 Release Notes linked from the References section.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-cr-announce/2018-April/031073.html

Affected packages:
cpp
gcc
gcc-c++
gcc-gfortran
gcc-gnat
gcc-go
gcc-objc
gcc-objc++
gcc-plugin-devel
libasan
libasan-static
libatomic
libatomic-static
libgcc
libgfortran
libgfortran-static
libgnat
libgnat-devel
libgnat-static
libgo
libgo-devel
libgo-static
libgomp
libitm
libitm-devel
libitm-static
libmudflap
libmudflap-devel
libmudflap-static
libobjc
libquadmath
libquadmath-devel
libquadmath-static
libstdc++
libstdc+±devel
libstdc+±docs
libstdc+±static
libtsan
libtsan-static

Upstream details at:
https://access.redhat.com/errata/RHSA-2018:0849