CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
EPSS
Percentile
10.1%
Tue Dec 22 2009 Jakub Jelinek <jakub at redhat.com> 4.4.2-20
fix MEM_SIZE of reload created stack slots (#548825, PR rtl-optimization/42429)
fix addition of one character long filenames in fastjar (#549493)
Thu Dec 17 2009 Jakub Jelinek <jakub at redhat.com> 4.4.2-18
update from gcc-4_4-branch
PRs c++/42387
another C++ virtual dtors fix (PR c++/42386)
VTA mode and COND_EXEC fixes (PR debug/41679)
fix ICE in chrec_convert_1 (#547775)
fix debuginfo for optimized out TLS vars
use DW_AT_location with DW_OP_addr + DW_OP_stack_value instead of DW_AT_const_value with address in it, use DW_OP_addr + DW_OP_stack_value instead of DW_OP_implicit_value with address (#546017)
Mon Dec 14 2009 Jakub Jelinek <jakub at redhat.com> 4.4.2-17
donβt emit DWARF location list entries with no location or DW_AT_location with empty blocks (PR debug/41473)
fix up AMD LWP support
Fri Dec 11 2009 Jakub Jelinek <jakub at redhat.com> 4.4.2-16
update from gcc-4_4-branch
PRs c++/27425, c++/34274, c++/42301, fortran/42268, java/41991, libstdc++/42273, rtl-optimization/41574, target/41196, target/41939 target/42263
Wed Dec 9 2009 Jakub Jelinek <jakub at redhat.com> 4.4.2-15
VTA backports
PRs debug/42166, debug/42234, debug/42244, debug/42299
fix handling of C++ COMDAT virtual destructors
some x86/x86_64 FMA4, XOP, ABM and LWP fixes
fix a decltype handling bug in templates (PR c++/42277)
Fri Dec 4 2009 Jakub Jelinek <jakub at redhat.com> 4.4.2-14
update from gcc-4_4-branch
PRs libstdc++/42261, middle-end/42049
backport C++0x ICE fix from trunk (PR c++/42266)
fortran !$omp workshare improvements (PR fortran/35423)
FMA4 and XOP fixes
Wed Dec 2 2009 Jakub Jelinek <jakub at redhat.com> 4.4.2-13
fix security issues in libltdl bundled within libgcj (CVE-2009-3736)
Wed Dec 2 2009 Jakub Jelinek <jakub at redhat.com> 4.4.2-12
update from gcc-4_4-branch
PRs c++/42234, fortran/41278, fortran/41807, fortran/42162, target/42113, target/42165
donβt ICE on -O256 (#539923)
fix -mregnames on ppc/ppc64
optimize even COMDAT constructors and destructors without virtual bases (PR c++/3187)
Mon Nov 23 2009 Jakub Jelinek <jakub at redhat.com> 4.4.2-11
[plus 32 lines in the Changelog]
Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Fedora Security Advisory 2009-12813.
#
include('deprecated_nasl_level.inc');
include('compat.inc');
if (description)
{
script_id(43612);
script_version("1.15");
script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/11");
script_cve_id("CVE-2009-3736");
script_bugtraq_id(37128);
script_xref(name:"FEDORA", value:"2009-12813");
script_name(english:"Fedora 12 : gcc-4.4.2-20.fc12 (2009-12813)");
script_summary(english:"Checks rpm output for the updated package.");
script_set_attribute(
attribute:"synopsis",
value:"The remote Fedora host is missing a security update."
);
script_set_attribute(
attribute:"description",
value:
" - Tue Dec 22 2009 Jakub Jelinek <jakub at redhat.com>
4.4.2-20
- fix MEM_SIZE of reload created stack slots (#548825,
PR rtl-optimization/42429)
- fix addition of one character long filenames in fastjar
(#549493)
- Thu Dec 17 2009 Jakub Jelinek <jakub at redhat.com>
4.4.2-18
- update from gcc-4_4-branch
- PRs c++/42387
- another C++ virtual dtors fix (PR c++/42386)
- VTA mode and COND_EXEC fixes (PR debug/41679)
- fix ICE in chrec_convert_1 (#547775)
- fix debuginfo for optimized out TLS vars
- use DW_AT_location with DW_OP_addr + DW_OP_stack_value
instead of DW_AT_const_value with address in it, use
DW_OP_addr + DW_OP_stack_value instead of
DW_OP_implicit_value with address (#546017)
- Mon Dec 14 2009 Jakub Jelinek <jakub at redhat.com>
4.4.2-17
- propagate TREE_NOTHROW/TREE_READONLY/DECL_PURE_P from
ipa-pure-const and EH opt to all same body aliases
(#547286)
- don't emit DWARF location list entries with no location
or DW_AT_location with empty blocks (PR debug/41473)
- fix up AMD LWP support
- don't crash when mangling C++ decls inside of
middle-end generated functions (PR c++/41183)
- Fri Dec 11 2009 Jakub Jelinek <jakub at redhat.com>
4.4.2-16
- update from gcc-4_4-branch
- PRs c++/27425, c++/34274, c++/42301, fortran/42268,
java/41991, libstdc++/42273, rtl-optimization/41574,
target/41196, target/41939 target/42263
- Wed Dec 9 2009 Jakub Jelinek <jakub at redhat.com>
4.4.2-15
- VTA backports
- PRs debug/42166, debug/42234, debug/42244, debug/42299
- fix handling of C++ COMDAT virtual destructors
- some x86/x86_64 FMA4, XOP, ABM and LWP fixes
- fix a decltype handling bug in templates (PR
c++/42277)
- Fri Dec 4 2009 Jakub Jelinek <jakub at redhat.com>
4.4.2-14
- update from gcc-4_4-branch
- PRs libstdc++/42261, middle-end/42049
- backport C++0x ICE fix from trunk (PR c++/42266)
- fortran !$omp workshare improvements (PR
fortran/35423)
- FMA4 and XOP fixes
- Wed Dec 2 2009 Jakub Jelinek <jakub at redhat.com>
4.4.2-13
- fix security issues in libltdl bundled within libgcj
(CVE-2009-3736)
- Wed Dec 2 2009 Jakub Jelinek <jakub at redhat.com>
4.4.2-12
- update from gcc-4_4-branch
- PRs c++/42234, fortran/41278, fortran/41807,
fortran/42162, target/42113, target/42165
- don't ICE on -O256 (#539923)
- fix -mregnames on ppc/ppc64
- optimize even COMDAT constructors and destructors
without virtual bases (PR c++/3187)
- Mon Nov 23 2009 Jakub Jelinek <jakub at redhat.com>
4.4.2-11
[plus 32 lines in the Changelog]
Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.redhat.com/show_bug.cgi?id=537941"
);
# https://lists.fedoraproject.org/pipermail/package-announce/2009-December/033321.html
script_set_attribute(
attribute:"see_also",
value:"http://www.nessus.org/u?aa4ac9dc"
);
script_set_attribute(attribute:"solution", value:"Update the affected gcc package.");
script_set_cvss_base_vector("CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C");
script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
script_set_attribute(attribute:"exploit_available", value:"false");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:gcc");
script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:12");
script_set_attribute(attribute:"vuln_publication_date", value:"2009/11/29");
script_set_attribute(attribute:"patch_publication_date", value:"2009/12/07");
script_set_attribute(attribute:"plugin_publication_date", value:"2009/12/30");
script_set_attribute(attribute:"generated_plugin", value:"current");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_copyright(english:"This script is Copyright (C) 2009-2021 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_family(english:"Fedora Local Security Checks");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");
exit(0);
}
include("audit.inc");
include("global_settings.inc");
include("rpm.inc");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = eregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! ereg(pattern:"^12([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 12.x", "Fedora " + os_ver);
if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);
flag = 0;
if (rpm_check(release:"FC12", reference:"gcc-4.4.2-20.fc12")) flag++;
if (flag)
{
if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
else security_warning(0);
exit(0);
}
else
{
tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, "gcc");
}