Fedora alert FEDORA-2010-10415 (gcc)

From:
    	     
 
updates@fedoraproject.org 
To:
    	     
 
package-announce@lists.fedoraproject.org 
Subject:
    	     
 
[SECURITY] Fedora 13 Update: gcc-4.4.4-10.fc13 
Date:
    	     
 
Mon, 05 Jul 2010 22:05:54 +0000
Message-ID:
    	     
 
<20100705220554.27F721118DB@bastion02.phx2.fedoraproject.org>
Archive‑link:
 
        	
Article
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-10415
2010-06-25 17:06:23
--------------------------------------------------------------------------------

Name        : gcc
Product     : Fedora 13
Version     : 4.4.4
Release     : 10.fc13
URL         : http://gcc.gnu.org
Summary     : Various compilers (C, C++, Objective-C, Java, ...)
Description :
The gcc package contains the GNU Compiler Collection version 4.4.
You'll need this package in order to compile C code.

--------------------------------------------------------------------------------
ChangeLog:

* Wed Jun 30 2010 Jakub Jelinek <jakub@redhat.com> 4.4.4-10
- update from gcc-4_4-branch
  - PRs fortran/43841, fortran/43843, tree-optimization/44683
  - fix qualified-id as template argument handling (#605761, PR c++/44587)
- -Wunused-but-set-* static_cast fix (PR c++/44682)
- VTA backports
  - PRs debug/44610, debug/44668, debug/44694
- unswitching fixes (PR middle-end/43866)
* Thu Jun 24 2010 Jakub Jelinek <jakub@redhat.com> 4.4.4-9
- update from gcc-4_4-branch
  - PRs bootstrap/44426, bootstrap/44544, c++/44627, fortran/44536,
	libgcj/44216, target/39690, target/43740, target/44261, target/44481,
	target/44534, target/44615, testsuite/32843, testsuite/43739,
	tree-optimization/44508
- VTA backports
  - PRs debug/43650, debug/44181, debug/44247
- -Wunused-but-set-* ->*/.* fix (PR c++/44619)
- undeprecate #ident and #sccs (#606069)
- fixup dates in generated man pages even for fastjar and gcc/ man pages
- don't realign stack on x86/x86-64 just because a DECL_ALIGN was set
  too high by expansion code (#603924, PR target/44542)
- don't allow side-effects in inline-asm memory operands unless
  < or > is present in operand's constraint (#602359, PR middle-end/44492)
* Fri Jun 11 2010 Jakub Jelinek <jakub@redhat.com> 4.4.4-8
- update from gcc-4_4-branch
  - fix demangler (PR other/43838)
- VTA backports
  - further var-tracking speedup (#598310, PR debug/41371)
- for typedefs in non-template classes adjust underlying type to
  emit proper debug info (#601893)
- fix up fastjar directory traversal bugs (CVE-2010-0831)
* Tue Jun  8 2010 Jakub Jelinek <jakub@redhat.com> 4.4.4-7
- update from gcc-4_4-branch
  - PRs c++/43555, fortran/42900, fortran/44360, libfortran/41169,
	libgcj/38251, libobjc/36610, libstdc++/32499, pch/14940,
	rtl-optimization/39580, target/44075, target/44169, target/44199
- VTA backports
  - PRs debug/44367, debug/44375, rtl-optimization/44013,
	tree-optimization/44182
  - speed up var-tracking (#598310, PR debug/41371)
- -Wunused-but-set-* bugfixes
  - PRs c++/44361, c++/44362, c++/44412, c++/44443, c++/44444
- fix -mno-fused-madd -mfma4 on i?86/x86_64 (PR target/44338)
- use GCJ_PROPERTIES=jdt.compiler.useSingleThread=true when
  building classes with ecj1 (#524155)
* Tue May 25 2010 Jakub Jelinek <jakub@redhat.com> 4.4.4-5
- update from gcc-4_4-branch
  - PRs bootstrap/43870, debug/44205, target/43733, target/44074,
	target/44202, target/44245, tree-optimization/43845
  - fix cv-qual issue with function types (#593750, PR c++/44193)
- VTA backports
  - PRs debug/41371, debug/42801, debug/43260, debug/43521
* Tue May 18 2010 Jakub Jelinek <jakub@redhat.com> 4.4.4-4
- update from gcc-4_4-branch
  - PR fortran/44135
- C++ -Wunused-but-set-variable fix (PR c++/44108)
- avoid C++ gimplification affecting mangling (#591635, PR c++/44148)
- asm goto fixes (PRs middle-end/44102, bootstrap/42347)
- VTA backports
  - PRs debug/41371, debug/44112
* Fri May 14 2010 Jakub Jelinek <jakub@redhat.com> 4.4.4-3
- update from gcc-4_4-branch
  - PRs debug/43370, documentation/44016, fortran/44036, middle-end/43671,
	middle-end/44085, target/43744
- make comdat guards of STB_GNU_UNIQUE variables also STB_GNU_UNIQUE
  (PR c++/44059)
- VTA backports
  - PRs debug/42278, debug/43950, debug/43983,debug/44104, debug/44136
  - fix up .debug_macinfo (#479914)
- asm goto fixes (PRs middle-end/44071, middle-end/42739)
- fix up -march=native (PR target/44046)
- C++ -Wunused-but-set-{variable,parameter} support, fixes for C support
  (#538266, PRs c++/44062, c/43981)
- -march=bdver1 and -mtune=bdver1 support
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #594497 - CVE-2010-0831 CVE-2010-2322 fastjar: directory traversal vulnerabilities
        https://bugzilla.redhat.com/show_bug.cgi?id=594497
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update gcc' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-...