==========================================================================
\nUbuntu Security Notice USN-5770-1
\nDecember 08, 2022<\/p>\n
gcc-5, gccgo-6 vulnerability
\n==========================================================================<\/p>\n
A security issue affects these releases of Ubuntu and its derivatives:<\/p>\n
– Ubuntu 16.04 ESM<\/p>\n
Summary:<\/p>\n
GNU Compiler Collection’s (GCC) random number generation could be
\nmade less random with specially crafted input.<\/p>\n
Software Description:
\n– gcc-5: GNU C compiler
\n– gccgo-6: GNU Go compiler<\/p>\n
Details:<\/p>\n
Todd Eisenberger discovered that certain versions of GNU Compiler
\nCollection (GCC) could be made to clobber the status flag of RDRAND
\nand RDSEED with specially crafted input. This could potentially lead
\nto less randomness in random number generation.<\/p>\n
Update instructions:<\/p>\n
The problem can be corrected by updating your system to the following
\npackage versions:<\/p>\n
Ubuntu 16.04 ESM:
\ng++-5 5.4.0-6ubuntu1~16.04.12+esm2
\ngcc-5 5.4.0-6ubuntu1~16.04.12+esm2
\ngccgo-5 5.4.0-6ubuntu1~16.04.12+esm2
\ngccgo-6 6.0.1-0ubuntu1+esm1
\ngcj-5 5.4.0-6ubuntu1~16.04.12+esm2
\ngcj-5-jdk 5.4.0-6ubuntu1~16.04.12+esm2
\ngcj-5-jre-headless 5.4.0-6ubuntu1~16.04.12+esm2
\ngdc-5 5.4.0-6ubuntu1~16.04.12+esm2
\ngfortran-5 5.4.0-6ubuntu1~16.04.12+esm2
\ngnat-5 5.4.0-6ubuntu1~16.04.12+esm2<\/p>\n
In general, a standard system update will make all the necessary changes.<\/p>\n
References:
\nhttps:\/\/ubuntu.com\/security\/notices\/USN-5770-1
\nCVE-2017-11671<\/p>\n","protected":false},"excerpt":{"rendered":"
========================================================================== Ubuntu Security Notice USN-5770-1 December 08, 2022 gcc-5, gccgo-6 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 16.04 ESM Summary: GNU Compiler Collection’s (GCC) random number generation could be made less random with specially crafted input. Software Description: – gcc-5: GNU C compiler – gccgo-6: GNU Go …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-34575","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/34575","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=34575"}],"version-history":[{"count":1,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/34575\/revisions"}],"predecessor-version":[{"id":34629,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/34575\/revisions\/34629"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=34575"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=34575"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=34575"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}