Debian Package Tracker

general

source: gcc-8 (main)
version: 8.3.0-26
maintainer: Debian GCC Maintainers (archive) (DMD)
uploaders: Matthias Klose [DMD]
arch: all any
std-ver: 4.4.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

stable: 8.3.0-6
testing: 8.3.0-26
unstable: 8.3.0-26

versioned links

8.3.0-6: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
8.3.0-26: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

cpp-8
fixincludes
g++-8 (5 bugs: 0, 5, 0, 0)
g++-8-multilib
gcc-8 (12 bugs: 0, 10, 2, 0)
gcc-8-base
gcc-8-hppa64-linux-gnu
gcc-8-locales
gcc-8-multilib
gcc-8-offload-nvptx
gcc-8-plugin-dev
gcc-8-source
gcc-8-test-results
gccbrig-8
gccgo-8
gccgo-8-multilib
gdc-8 (1 bugs: 0, 1, 0, 0)
gdc-8-multilib
gfortran-8 (1 bugs: 0, 1, 0, 0)
gfortran-8-multilib
gnat-8 (2 bugs: 0, 2, 0, 0)
gnat-8-sjlj
gobjc++-8
gobjc++-8-multilib
gobjc-8
gobjc-8-multilib
lib32gcc-8-dev
lib32gfortran-8-dev
lib32go13
lib32gomp1
lib32gphobos-8-dev
lib32mpx2
lib32objc-8-dev
lib32stdc++-8-dev
lib32stdc++6-8-dbg
lib64gcc-8-dev
lib64gfortran-8-dev
lib64go13
lib64gomp1
lib64gphobos-8-dev
lib64mpx2
lib64objc-8-dev
lib64stdc++-8-dev
lib64stdc++6-8-dbg
libgcc-8-dev
libgcc4
libgccjit-8-dev
libgccjit-8-doc
libgfortran-8-dev
libgnat-8
libgnatvsn8
libgnatvsn8-dev
libgo13
libgomp-plugin-nvptx1
libgomp1
libgphobos-8-dev
libhsail-rt-8-dev
libmpx2
libn32gcc-8-dev
libn32gfortran-8-dev
libn32go13
libn32gomp1
libn32objc-8-dev
libn32stdc++-8-dev
libn32stdc++6-8-dbg
libobjc-8-dev
libstdc++-8-dev (1 bugs: 0, 0, 1, 0)
libstdc++-8-doc
libstdc++-8-pic
libstdc++6-8-dbg
libx32gcc-8-dev
libx32gfortran-8-dev
libx32go13
libx32gphobos-8-dev
libx32objc-8-dev
libx32stdc++-8-dev
libx32stdc++6-8-dbg

action needed

2 security issues in bullseye high

There are 2 open security issues in bullseye.

2 important issues:

CVE-2018-12886: stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction sequences when targeting ARM targets that spill the address of the stack protector guard, which allows an attacker to bypass the protection of -fstack-protector, -fstack-protector-all, -fstack-protector-strong, and -fstack-protector-explicit against stack overflow by controlling what the stack canary is compared against.
CVE-2019-15847: The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single execution of a program, the output of every __builtin_darn() call may be the same.

Please fix them.

Created: 2019-07-07 Last update: 2019-12-06 00:38

2 security issues in sid high

There are 2 open security issues in sid.

2 important issues:

CVE-2018-12886: stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction sequences when targeting ARM targets that spill the address of the stack protector guard, which allows an attacker to bypass the protection of -fstack-protector, -fstack-protector-all, -fstack-protector-strong, and -fstack-protector-explicit against stack overflow by controlling what the stack canary is compared against.
CVE-2019-15847: The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single execution of a program, the output of every __builtin_darn() call may be the same.

Please fix them.

Created: 2019-05-26 Last update: 2019-12-06 00:38

Depends on packages which need a new maintainer normal

The packages that gcc-8 depends on which need a new maintainer are:

docbook-xsl (#802370)
- Build-Depends-Indep: docbook-xsl-ns

Created: 2019-11-22 Last update: 2020-01-21 11:33

2 bugs tagged patch in the BTS normal

The BTS contains patches fixing 2 bugs, consider including or untagging them.

Created: 2019-04-01 Last update: 2020-01-21 11:03

Does not build reproducibly during testing normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2019-12-08 Last update: 2020-01-21 09:01

Multiarch hinter reports 22 issue(s) normal

There are issues with the multiarch metadata for this package.

g++-8-multilib could be marked Multi-Arch: same
gcc-8-multilib could be marked Multi-Arch: same
gcc-8-plugin-dev could be marked Multi-Arch: same
gccgo-8-multilib could be marked Multi-Arch: same
gdc-8-multilib could be marked Multi-Arch: same
gfortran-8-multilib could be marked Multi-Arch: same
gnat-8-sjlj could be marked Multi-Arch: same
gobjc++-8-multilib could be marked Multi-Arch: same
gobjc-8 could be marked Multi-Arch: same
gobjc-8-multilib could be marked Multi-Arch: same
lib32gcc-8-dev could be marked Multi-Arch: same
lib32gfortran-8-dev could be marked Multi-Arch: same
lib32objc-8-dev could be marked Multi-Arch: same
lib32stdc++-8-dev could be marked Multi-Arch: same
lib64gcc-8-dev could be marked Multi-Arch: same
lib64gfortran-8-dev could be marked Multi-Arch: same
lib64objc-8-dev could be marked Multi-Arch: same
lib64stdc++-8-dev could be marked Multi-Arch: same
libn32gcc-8-dev could be marked Multi-Arch: same
libn32gfortran-8-dev could be marked Multi-Arch: same
libn32objc-8-dev could be marked Multi-Arch: same
libn32stdc++-8-dev could be marked Multi-Arch: same

Created: 2018-02-07 Last update: 2020-01-21 08:32

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 8.3.0-27, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 5bff6c500fc5d3833bb474459c3edd3e2395310c
Author: Matthias Klose <doko@ubuntu.com>
Date:   Fri Jan 17 13:56:37 2020 +0100

     * Refresh patches.

commit 9b0c7b18ab89fc23b41d9a431708e51961b9c37c
Author: Matthias Klose <doko@ubuntu.com>
Date:   Fri Jan 17 12:22:29 2020 +0100

     * Update to git 20200117 from the gcc-8 branch.

commit c347f609a2f60b11be6a2310610e59677374bb4d
Author: Matthias Klose <doko@ubuntu.com>
Date:   Mon Dec 16 17:19:44 2019 +0100

     * Fix buffer overflow in the gcc-search-prefixed-as-ld patch.
        Addresses: #946792.

Created: 2019-12-21 Last update: 2020-01-20 20:07

2 ignored security issues in buster low

There are 2 open security issues in buster.

2 issues skipped by the security teams:

CVE-2018-12886: stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction sequences when targeting ARM targets that spill the address of the stack protector guard, which allows an attacker to bypass the protection of -fstack-protector, -fstack-protector-all, -fstack-protector-strong, and -fstack-protector-explicit against stack overflow by controlling what the stack canary is compared against.
CVE-2019-15847: The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single execution of a program, the output of every __builtin_darn() call may be the same.

Please fix them.

Created: 2019-05-26 Last update: 2019-12-06 00:38

Build log checks report 4 warnings low

Build log checks report 4 warnings

Created: 2019-07-10 Last update: 2019-09-10 15:39

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.5.0 instead of 4.4.1).

Created: 2020-01-21 Last update: 2020-01-21 05:06

news

[rss feed]

[2019-12-06] gcc-8 8.3.0-26 MIGRATED to testing (Debian testing watch)
[2019-12-06] gcc-8 8.3.0-26 MIGRATED to testing (Debian testing watch)
[2019-12-01] Accepted gcc-8 8.3.0-26 (source) into unstable (Matthias Klose)
[2019-11-26] Accepted gcc-8 8.3.0-25 (source) into unstable (Matthias Klose)
[2019-11-12] gcc-8 8.3.0-24 MIGRATED to testing (Debian testing watch)
[2019-11-07] Accepted gcc-8 8.3.0-24 (source) into unstable (Matthias Klose)
[2019-10-08] gcc-8 8.3.0-23 MIGRATED to testing (Debian testing watch)
[2019-10-02] Accepted gcc-8 8.3.0-23 (source) into unstable (Matthias Klose)
[2019-09-16] gcc-8 8.3.0-22 MIGRATED to testing (Debian testing watch)
[2019-09-09] Accepted gcc-8 8.3.0-22 (source) into unstable (Matthias Klose)
[2019-08-27] gcc-8 8.3.0-21 MIGRATED to testing (Debian testing watch)
[2019-08-17] Accepted gcc-8 8.3.0-21 (source) into unstable (Matthias Klose)
[2019-08-17] Accepted gcc-8 8.3.0-20 (source) into unstable (Matthias Klose)
[2019-07-26] gcc-8 8.3.0-19 MIGRATED to testing (Debian testing watch)
[2019-07-09] Accepted gcc-8 8.3.0-19 (source) into unstable (Matthias Klose)
[2019-07-07] Accepted gcc-8 8.3.0-18 (source) into unstable (Matthias Klose)
[2019-07-03] Accepted gcc-8 8.3.0-17 (source) into experimental (Matthias Klose)
[2019-07-02] Accepted gcc-8 8.3.0-16 (source) into experimental (Matthias Klose)
[2019-06-25] Accepted gcc-8 8.3.0-15 (source) into experimental (Matthias Klose)
[2019-06-12] Accepted gcc-8 8.3.0-14 (source) into experimental (Matthias Klose)
[2019-05-14] Accepted gcc-8 8.3.0-13 (source) into experimental (Matthias Klose)
[2019-05-06] Accepted gcc-8 8.3.0-12 (source) into experimental (Matthias Klose)
[2019-05-05] Accepted gcc-8 8.3.0-11 (source) into experimental (Matthias Klose)
[2019-05-05] Accepted gcc-8 8.3.0-10 (source) into experimental (Matthias Klose)
[2019-04-28] Accepted gcc-8 8.3.0-7 (source) into unstable (Matthias Klose)
[2019-04-15] gcc-8 8.3.0-6 MIGRATED to testing (Debian testing watch)
[2019-04-06] Accepted gcc-8 8.3.0-6 (source) into unstable (Matthias Klose)
[2019-04-06] gcc-8 8.3.0-5 MIGRATED to testing (Debian testing watch)
[2019-04-03] Accepted gcc-8 8.3.0-5 (source) into unstable (Matthias Klose)
[2019-04-01] gcc-8 8.3.0-4 MIGRATED to testing (Debian testing watch)

bugs [bug history graph]

all: 29
RC: 0
I&N: 23
M&W: 6
F&P: 0
patch: 2

links

homepage
buildd: logs, checks, clang, reproducibility, cross
popcon
browse source code
edit tags
security tracker
screenshots
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 8.3.0-26ubuntu1
13 bugs
patches for 8.3.0-26ubuntu1