[Bug 2054343] Re: arm64 build of gcc-10 10.5.0-3ubuntu1 still broken (CVE-2023-4039 still open)

[Rama malladi]

Can we have this issue (https://ubuntu.com/security/CVE-2023-4039) fixed
by patching all the version of GCC supported in Ubuntu releases? Thank
you. It impacts `aarch64` based processors such as AWS Graviton.

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-4039

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to gcc-10 in Ubuntu.
https://bugs.launchpad.net/bugs/2054343

Title:
  arm64 build of gcc-10 10.5.0-3ubuntu1 still broken (CVE-2023-4039
  still open)

Status in gcc-10 package in Ubuntu:
  Confirmed

Bug description:
  See
  https://launchpad.net/ubuntu/+source/gcc-10/10.5.0-3ubuntu1/+build/27746786/+files/buildlog_ubuntu-
  noble-arm64.gcc-10_10.5.0-3ubuntu1_BUILDING.txt.gz

  The above build is supposed to address
  https://nvd.nist.gov/vuln/detail/CVE-2023-4039

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gcc-10/+bug/2054343/+subscriptions