[Bug 2054343] Re: CVE-2023-4039: ARM64 GCC

gerald.yang 2054343 at bugs.launchpad.net
Tue Jun 4 08:09:11 UTC 2024


** Summary changed:

- arm64 build of gcc-10 10.5.0-3ubuntu1 still broken (CVE-2023-4039 still open)
+ CVE-2023-4039: ARM64 GCC

** Also affects: gcc-11 (Ubuntu)
   Importance: Undecided
       Status: New

** Also affects: gcc-12 (Ubuntu)
   Importance: Undecided
       Status: New

** Also affects: gcc-13 (Ubuntu)
   Importance: Undecided
       Status: New

** No longer affects: gcc-13 (Ubuntu Focal)

** No longer affects: gcc-11 (Ubuntu Focal)

** No longer affects: gcc-12 (Ubuntu Focal)

** Also affects: gcc-10 (Ubuntu Noble)
   Importance: Undecided
       Status: New

** Also affects: gcc-11 (Ubuntu Noble)
   Importance: Undecided
       Status: New

** Also affects: gcc-12 (Ubuntu Noble)
   Importance: Undecided
       Status: New

** Also affects: gcc-13 (Ubuntu Noble)
   Importance: Undecided
       Status: New

** Changed in: gcc-10 (Ubuntu Noble)
       Status: New => Fix Released

** Changed in: gcc-11 (Ubuntu Noble)
       Status: New => Fix Committed

** Changed in: gcc-12 (Ubuntu Noble)
       Status: New => Fix Released

** Changed in: gcc-13 (Ubuntu Noble)
       Status: New => Fix Released

** Also affects: gcc-10 (Ubuntu Jammy)
   Importance: Undecided
       Status: New

** Also affects: gcc-11 (Ubuntu Jammy)
   Importance: Undecided
       Status: New

** Also affects: gcc-12 (Ubuntu Jammy)
   Importance: Undecided
       Status: New

** Also affects: gcc-13 (Ubuntu Jammy)
   Importance: Undecided
       Status: New

** No longer affects: gcc-13 (Ubuntu Jammy)

** Changed in: gcc-13 (Ubuntu)
       Status: New => Fix Released

** Also affects: gcc-9 (Ubuntu)
   Importance: Undecided
       Status: New

** No longer affects: gcc-9 (Ubuntu Noble)

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to gcc-11 in Ubuntu.
https://bugs.launchpad.net/bugs/2054343

Title:
  CVE-2023-4039: ARM64 GCC

Status in gcc-10 package in Ubuntu:
  Fix Released
Status in gcc-11 package in Ubuntu:
  New
Status in gcc-12 package in Ubuntu:
  New
Status in gcc-13 package in Ubuntu:
  Fix Released
Status in gcc-9 package in Ubuntu:
  New
Status in gcc-10 source package in Focal:
  Triaged
Status in gcc-10 source package in Jammy:
  New
Status in gcc-11 source package in Jammy:
  New
Status in gcc-12 source package in Jammy:
  New
Status in gcc-10 source package in Noble:
  Fix Released
Status in gcc-11 source package in Noble:
  Fix Committed
Status in gcc-12 source package in Noble:
  Fix Released
Status in gcc-13 source package in Noble:
  Fix Released

Bug description:
  See
  https://launchpad.net/ubuntu/+source/gcc-10/10.5.0-3ubuntu1/+build/27746786/+files/buildlog_ubuntu-
  noble-arm64.gcc-10_10.5.0-3ubuntu1_BUILDING.txt.gz

  The above build is supposed to address
  https://nvd.nist.gov/vuln/detail/CVE-2023-4039

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gcc-10/+bug/2054343/+subscriptions




More information about the foundations-bugs mailing list