CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

devel/freebsd-gcc1515.2.0_1

Cross GNU Compiler 15 for FreeBSD/aarch64

1
unaddressed
0
VuXML only, still affected
0
fixed
Maintainer
jhb@FreeBSD.org
Packages
aarch64-gcc15 15.2.0_1, amd64-gcc15 15.2.0_1, armv7-gcc15 15.2.0_1, i386-gcc15 15.2.0_1, powerpc-gcc15 15.2.0_1, powerpc64-gcc15 15.2.0_1, powerpc64le-gcc15 15.2.0_1, riscv64-gcc15 15.2.0_1
Upstream
Higher version available: 16.2.0
CPE
gnu:gcc from the port
WWW
https://gcc.gnu.org/
Links
cgit · VuXML

Unaddressed (1) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2023-40394.8published 2023-09-13

**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables in your application without this being detected. This stack-protector failure only applies to C99-style dynamically-sized local variables or those created using …

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (2)

John Baldwin (jhb) · 15.2.0_1
devel/freebsd-gcc*: Update kernel printf format checking for %b

- Permit the l and ll size modifiers to be used with '%b' for GCC 12/13
  (GCC 14/15 already permitted these).

- Permit the '#' modifier to be used with %b.  This isn't documented but
  the RISC-V kernel uses this.

Reviewed by:	mhorne, lwhsu
Differential Revision:	https://reviews.freebsd.org/D55016
7b603f0ab6
John Baldwin (jhb) · 15.2.0
devel/freebsd-gcc15: External FreeBSD toolchain based on GCC 15

This port provides external GCC toolchains for GCC 15.2.0 for the
aarch64, amd64, armv7, i386, powerpc, powerpc64, powerpc64le, and
riscv64 platforms.

Reviewed by:	lwhsu
Differential Revision:	https://reviews.freebsd.org/D54834
a2c1381141