Debian Package Tracker

general

source: gcc-8 (main)
version: 8.3.0-23
maintainer: Debian GCC Maintainers (archive) (DMD)
uploaders: Matthias Klose [DMD]
arch: all any
std-ver: 4.4.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

stable: 8.3.0-6
testing: 8.3.0-23
unstable: 8.3.0-23

versioned links

8.3.0-6: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
8.3.0-23: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

cpp-8
fixincludes
g++-8 (5 bugs: 0, 5, 0, 0)
g++-8-multilib
gcc-8 (11 bugs: 0, 9, 2, 0)
gcc-8-base
gcc-8-hppa64-linux-gnu
gcc-8-locales
gcc-8-multilib
gcc-8-offload-nvptx
gcc-8-plugin-dev
gcc-8-source
gcc-8-test-results
gccbrig-8
gccgo-8
gccgo-8-multilib
gdc-8 (1 bugs: 0, 1, 0, 0)
gdc-8-multilib
gfortran-8 (1 bugs: 0, 1, 0, 0)
gfortran-8-multilib
gnat-8 (3 bugs: 0, 3, 0, 0)
gnat-8-sjlj
gobjc++-8
gobjc++-8-multilib
gobjc-8
gobjc-8-multilib
lib32gcc-8-dev
lib32gfortran-8-dev
lib32go13
lib32go13-dbg
lib32gomp1
lib32gomp1-dbg
lib32gphobos-8-dev
lib32mpx2
lib32mpx2-dbg
lib32objc-8-dev
lib32stdc++-8-dev
lib32stdc++6-8-dbg
lib64gcc-8-dev
lib64gfortran-8-dev
lib64go13
lib64go13-dbg
lib64gomp1
lib64gomp1-dbg
lib64gphobos-8-dev
lib64mpx2
lib64mpx2-dbg
lib64objc-8-dev
lib64stdc++-8-dev
lib64stdc++6-8-dbg
libgcc-8-dev
libgcc4
libgcc4-dbg
libgccjit-8-dev
libgccjit-8-doc
libgfortran-8-dev
libgnat-8
libgnat-8-dbg
libgnatvsn8
libgnatvsn8-dbg
libgnatvsn8-dev
libgo13
libgo13-dbg
libgomp-plugin-nvptx1
libgomp1
libgomp1-dbg
libgphobos-8-dev
libhsail-rt-8-dev
libmpx2
libmpx2-dbg
libn32gcc-8-dev
libn32gfortran-8-dev
libn32go13
libn32go13-dbg
libn32gomp1
libn32gomp1-dbg
libn32objc-8-dev
libn32stdc++-8-dev
libn32stdc++6-8-dbg
libobjc-8-dev
libstdc++-8-dev (1 bugs: 0, 0, 1, 0)
libstdc++-8-doc
libstdc++-8-pic
libstdc++6-8-dbg
libx32gcc-8-dev
libx32gfortran-8-dev
libx32go13
libx32go13-dbg
libx32gphobos-8-dev
libx32objc-8-dev
libx32stdc++-8-dev
libx32stdc++6-8-dbg

action needed

2 security issues in bullseye high

There are 2 open security issues in bullseye.

2 important issues:

CVE-2018-12886: stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction sequences when targeting ARM targets that spill the address of the stack protector guard, which allows an attacker to bypass the protection of -fstack-protector, -fstack-protector-all, -fstack-protector-strong, and -fstack-protector-explicit against stack overflow by controlling what the stack canary is compared against.
CVE-2019-15847: The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single execution of a program, the output of every __builtin_darn() call may be the same.

Please fix them.

Created: 2019-07-07 Last update: 2019-10-07 12:30

2 security issues in sid high

There are 2 open security issues in sid.

2 important issues:

CVE-2018-12886: stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction sequences when targeting ARM targets that spill the address of the stack protector guard, which allows an attacker to bypass the protection of -fstack-protector, -fstack-protector-all, -fstack-protector-strong, and -fstack-protector-explicit against stack overflow by controlling what the stack canary is compared against.
CVE-2019-15847: The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single execution of a program, the output of every __builtin_darn() call may be the same.

Please fix them.

Created: 2019-05-26 Last update: 2019-10-07 12:30

lintian reports 4 errors and 6 warnings high

Lintian reports 4 errors and 6 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2019-09-12 Last update: 2019-10-04 00:32

2 bugs tagged patch in the BTS normal

The BTS contains patches fixing 2 bugs, consider including or untagging them.

Created: 2019-04-01 Last update: 2019-10-15 07:31

Does not build reproducibly during testing normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2019-10-10 Last update: 2019-10-15 06:49

Depends on packages which need a new maintainer normal

The packages that gcc-8 depends on which need a new maintainer are:

docbook-xsl (#802370)
- Build-Depends-Indep: docbook-xsl-ns

Created: 2018-02-07 Last update: 2019-10-15 06:42

Multiarch hinter reports 25 issue(s) normal

There are issues with the multiarch metadata for this package.

g++-8-multilib could be marked Multi-Arch: same
gcc-8-multilib could be marked Multi-Arch: same
gcc-8-plugin-dev could be marked Multi-Arch: same
gccgo-8-multilib could be marked Multi-Arch: same
gdc-8-multilib could be marked Multi-Arch: same
gfortran-8-multilib could be marked Multi-Arch: same
gnat-8-sjlj could be marked Multi-Arch: same
gobjc++-8-multilib could be marked Multi-Arch: same
gobjc-8 could be marked Multi-Arch: same
gobjc-8-multilib could be marked Multi-Arch: same
lib32gcc-8-dev could be marked Multi-Arch: same
lib32gfortran-8-dev could be marked Multi-Arch: same
lib32go13-dbg could be marked Multi-Arch: same
lib32objc-8-dev could be marked Multi-Arch: same
lib32stdc++-8-dev could be marked Multi-Arch: same
lib64gcc-8-dev could be marked Multi-Arch: same
lib64gfortran-8-dev could be marked Multi-Arch: same
lib64go13-dbg could be marked Multi-Arch: same
lib64objc-8-dev could be marked Multi-Arch: same
lib64stdc++-8-dev could be marked Multi-Arch: same
libn32gcc-8-dev could be marked Multi-Arch: same
libn32gfortran-8-dev could be marked Multi-Arch: same
libn32go13-dbg could be marked Multi-Arch: same
libn32objc-8-dev could be marked Multi-Arch: same
libn32stdc++-8-dev could be marked Multi-Arch: same

Created: 2018-02-07 Last update: 2019-10-15 01:38

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 8.3.0-24, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit fd4d981f7b174888e36760b1db15a0ea96cd0bec
Author: Matthias Klose <doko@ubuntu.com>
Date:   Tue Oct 8 15:49:14 2019 +0200

      * Update to SVN 20191008 (r276700) from the gcc-8-branch.

commit 0636513ddb4a041b13fdee007bae6c47fc37c18a
Author: Matthias Klose <doko@ubuntu.com>
Date:   Wed Oct 2 06:33:09 2019 +0200

      * Update to SVN 20191002 (r276439) from the gcc-8-branch.
      * Bump standards version.

Created: 2019-10-02 Last update: 2019-10-14 03:42

2 ignored security issues in buster low

There are 2 open security issues in buster.

2 issues skipped by the security teams:

CVE-2018-12886: stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction sequences when targeting ARM targets that spill the address of the stack protector guard, which allows an attacker to bypass the protection of -fstack-protector, -fstack-protector-all, -fstack-protector-strong, and -fstack-protector-explicit against stack overflow by controlling what the stack canary is compared against.
CVE-2019-15847: The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single execution of a program, the output of every __builtin_darn() call may be the same.

Please fix them.

Created: 2019-05-26 Last update: 2019-10-07 12:30

Build log checks report 4 warnings low

Build log checks report 4 warnings

Created: 2019-07-10 Last update: 2019-09-10 15:39

news

[rss feed]

[2019-10-08] gcc-8 8.3.0-23 MIGRATED to testing (Debian testing watch)
[2019-10-02] Accepted gcc-8 8.3.0-23 (source) into unstable (Matthias Klose)
[2019-09-16] gcc-8 8.3.0-22 MIGRATED to testing (Debian testing watch)
[2019-09-09] Accepted gcc-8 8.3.0-22 (source) into unstable (Matthias Klose)
[2019-08-27] gcc-8 8.3.0-21 MIGRATED to testing (Debian testing watch)
[2019-08-17] Accepted gcc-8 8.3.0-21 (source) into unstable (Matthias Klose)
[2019-08-17] Accepted gcc-8 8.3.0-20 (source) into unstable (Matthias Klose)
[2019-07-26] gcc-8 8.3.0-19 MIGRATED to testing (Debian testing watch)
[2019-07-09] Accepted gcc-8 8.3.0-19 (source) into unstable (Matthias Klose)
[2019-07-07] Accepted gcc-8 8.3.0-18 (source) into unstable (Matthias Klose)
[2019-07-03] Accepted gcc-8 8.3.0-17 (source) into experimental (Matthias Klose)
[2019-07-02] Accepted gcc-8 8.3.0-16 (source) into experimental (Matthias Klose)
[2019-06-25] Accepted gcc-8 8.3.0-15 (source) into experimental (Matthias Klose)
[2019-06-12] Accepted gcc-8 8.3.0-14 (source) into experimental (Matthias Klose)
[2019-05-14] Accepted gcc-8 8.3.0-13 (source) into experimental (Matthias Klose)
[2019-05-06] Accepted gcc-8 8.3.0-12 (source) into experimental (Matthias Klose)
[2019-05-05] Accepted gcc-8 8.3.0-11 (source) into experimental (Matthias Klose)
[2019-05-05] Accepted gcc-8 8.3.0-10 (source) into experimental (Matthias Klose)
[2019-04-28] Accepted gcc-8 8.3.0-7 (source) into unstable (Matthias Klose)
[2019-04-15] gcc-8 8.3.0-6 MIGRATED to testing (Debian testing watch)
[2019-04-06] Accepted gcc-8 8.3.0-6 (source) into unstable (Matthias Klose)
[2019-04-06] gcc-8 8.3.0-5 MIGRATED to testing (Debian testing watch)
[2019-04-03] Accepted gcc-8 8.3.0-5 (source) into unstable (Matthias Klose)
[2019-04-01] gcc-8 8.3.0-4 MIGRATED to testing (Debian testing watch)
[2019-03-26] Accepted gcc-8 8.3.0-4 (source) into unstable (Matthias Klose)
[2019-03-16] Accepted gcc-8 8.3.0-3 (source) into unstable (Matthias Klose)
[2019-03-08] gcc-8 8.3.0-2 MIGRATED to testing (Debian testing watch)
[2019-02-26] Accepted gcc-8 8.3.0-2 (source) into unstable (Matthias Klose)
[2019-02-25] Accepted gcc-8 8.3.0-1 (source) into unstable (Matthias Klose)
[2019-02-25] gcc-8 8.2.0-21 MIGRATED to testing (Debian testing watch)

bugs [bug history graph]

all: 29
RC: 0
I&N: 23
M&W: 6
F&P: 0
patch: 2

links

homepage
lintian (4, 6)
buildd: logs, checks, clang, reproducibility, cross
popcon
browse source code
edit tags
security tracker
screenshots
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 8.3.0-23ubuntu2
11 bugs
patches for 8.3.0-23ubuntu2