Your submission was sent successfully! Close

CVE-2015-5276

Published: 17 November 2015

The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not properly handle short reads from blocking sources, which makes it easier for context-dependent attackers to predict the random values via unspecified vectors.

Priority

Low

Status

Package Release Status
gcc-5
Launchpad, Ubuntu, Debian
yakkety Not vulnerable

upstream
Released (5.3.0-1)
precise Does not exist

trusty Does not exist

vivid Does not exist

wily Ignored
(reached end-of-life)
xenial Not vulnerable
(5.3.1-14ubuntu2.1)
zesty Not vulnerable

artful Not vulnerable

bionic Not vulnerable

cosmic Not vulnerable

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

gcc-3.3
Launchpad, Ubuntu, Debian
upstream Not vulnerable

precise Does not exist
(precise was not-affected)
trusty Not vulnerable

wily Not vulnerable
(std::random_device not present)
xenial Not vulnerable
(std::random_device not present)
yakkety Not vulnerable
(std::random_device not present)
zesty Not vulnerable
(std::random_device not present)
artful Not vulnerable
(std::random_device not present)
bionic Not vulnerable
(std::random_device not present)
cosmic Not vulnerable
(std::random_device not present)
disco Not vulnerable
(std::random_device not present)
eoan Not vulnerable
(std::random_device not present)
focal Not vulnerable
(std::random_device not present)
impish Not vulnerable
(std::random_device not present)
groovy Not vulnerable
(std::random_device not present)
hirsute Not vulnerable
(std::random_device not present)
jammy Not vulnerable
(std::random_device not present)
vivid Not vulnerable

gcc-4.4
Launchpad, Ubuntu, Debian
upstream Needed

precise Does not exist
(precise was needed)
trusty Does not exist
(trusty was needed)
wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

vivid Ignored
(reached end-of-life)
gcc-4.5
Launchpad, Ubuntu, Debian
upstream Needed

precise Does not exist
(precise was needed)
trusty Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

gcc-4.6
Launchpad, Ubuntu, Debian
upstream Needed

precise Ignored
(end of ESM support, was needed)
trusty Does not exist
(trusty was needed)
vivid Ignored
(reached end-of-life)
wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

gcc-4.7
Launchpad, Ubuntu, Debian
upstream Needed

precise Does not exist

trusty Needed

vivid Ignored
(reached end-of-life)
wily Ignored
(reached end-of-life)
yakkety Ignored
(reached end-of-life)
zesty Ignored
(reached end-of-life)
artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

xenial Ignored
(end of standard support, was needed)
gcc-4.8
Launchpad, Ubuntu, Debian
upstream Needed

precise Does not exist

trusty Needed

wily Ignored
(reached end-of-life)
yakkety Ignored
(reached end-of-life)
zesty Ignored
(reached end-of-life)
artful Ignored
(reached end-of-life)
bionic Needed

cosmic Ignored
(reached end-of-life)
disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

xenial Ignored
(end of standard support, was needed)
vivid Ignored
(reached end-of-life)
gcc-4.9
Launchpad, Ubuntu, Debian
upstream
Released (4.9.3-5)
precise Does not exist

trusty Does not exist

vivid Ignored
(reached end-of-life)
wily Not vulnerable
(4.9.3-5ubuntu1)
xenial Not vulnerable
(4.9.3-13ubuntu2)
yakkety Not vulnerable

zesty Not vulnerable

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

gcc-snapshot
Launchpad, Ubuntu, Debian
upstream Needed

precise Does not exist
(precise was needed)
trusty Does not exist
(trusty was needed)
wily Not vulnerable
(20151011-0ubuntu1)
xenial Not vulnerable
(20151011-0ubuntu1)
yakkety Not vulnerable
(20151011-0ubuntu1)
zesty Not vulnerable
(20151011-0ubuntu1)
artful Not vulnerable
(20151011-0ubuntu1)
bionic Not vulnerable
(20151011-0ubuntu1)
cosmic Not vulnerable
(20151011-0ubuntu1)
disco Not vulnerable
(20151011-0ubuntu1)
eoan Not vulnerable
(20151011-0ubuntu1)
focal Not vulnerable
(20151011-0ubuntu1)
impish Not vulnerable
(20151011-0ubuntu1)
groovy Not vulnerable
(20151011-0ubuntu1)
hirsute Not vulnerable
(20151011-0ubuntu1)
jammy Not vulnerable
(20151011-0ubuntu1)
vivid Ignored
(reached end-of-life)
gcc-i686-linux-android
Launchpad, Ubuntu, Debian
upstream Needs triage

precise Does not exist

trusty Does not exist
(trusty was needed)
vivid Ignored
(reached end-of-life)
wily Ignored
(reached end-of-life)
yakkety Ignored
(reached end-of-life)
zesty Ignored
(reached end-of-life)
artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

xenial Ignored
(end of standard support, was needed)
gcc-4.4-armel-cross
Launchpad, Ubuntu, Debian
upstream Needs triage

precise Does not exist
(precise was needs-triage)
trusty Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

gcc-4.4-armhf-cross
Launchpad, Ubuntu, Debian
upstream Needs triage

precise Does not exist
(precise was needs-triage)
trusty Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

gcc-4.5-armel-cross
Launchpad, Ubuntu, Debian
upstream Needs triage

precise Does not exist
(precise was needs-triage)
trusty Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

gcc-4.5-armhf-cross
Launchpad, Ubuntu, Debian
upstream Needs triage

precise Does not exist
(precise was needs-triage)
trusty Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

gcc-4.6-armel-cross
Launchpad, Ubuntu, Debian
upstream Needs triage

precise Does not exist
(precise was needs-triage)
trusty Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

gcc-4.6-armhf-cross
Launchpad, Ubuntu, Debian
upstream Needs triage

precise Does not exist
(precise was needs-triage)
trusty Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

gcc-4.7-arm64-cross
Launchpad, Ubuntu, Debian
upstream Needs triage

precise Does not exist

trusty Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

gcc-4.7-armel-cross
Launchpad, Ubuntu, Debian
upstream Needed

precise Does not exist

trusty Does not exist
(trusty was needed)
vivid Ignored
(reached end-of-life)
wily Ignored
(reached end-of-life)
yakkety Ignored
(reached end-of-life)
zesty Ignored
(reached end-of-life)
artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

xenial Ignored
(end of standard support, was needed)
gcc-4.7-armhf-cross
Launchpad, Ubuntu, Debian
upstream Needed

precise Does not exist

trusty Does not exist
(trusty was needed)
vivid Ignored
(reached end-of-life)
wily Ignored
(reached end-of-life)
yakkety Ignored
(reached end-of-life)
zesty Ignored
(reached end-of-life)
artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

xenial Ignored
(end of standard support, was needed)
gcc-4.7-powerpc-cross
Launchpad, Ubuntu, Debian
upstream Needs triage

precise Does not exist

trusty Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

gcc-4.8-arm64-cross
Launchpad, Ubuntu, Debian
upstream Needed

precise Does not exist

trusty Does not exist
(trusty was needed)
vivid Ignored
(reached end-of-life)
wily Ignored
(reached end-of-life)
yakkety Does not exist

zesty Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

xenial Ignored
(end of standard support, was needed)
gcc-4.8-armhf-cross
Launchpad, Ubuntu, Debian
upstream Needed

precise Does not exist

trusty Does not exist
(trusty was needed)
vivid Ignored
(reached end-of-life)
wily Ignored
(reached end-of-life)
yakkety Does not exist

zesty Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

xenial Ignored
(end of standard support, was needed)
gcc-4.8-powerpc-cross
Launchpad, Ubuntu, Debian
upstream Needed

precise Does not exist

trusty Does not exist
(trusty was needed)
wily Ignored
(reached end-of-life)
yakkety Does not exist

zesty Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

xenial Ignored
(end of standard support, was needed)
vivid Ignored
(reached end-of-life)
gcc-4.8-ppc64el-cross
Launchpad, Ubuntu, Debian
upstream Needed

precise Does not exist

trusty Does not exist
(trusty was needed)
vivid Ignored
(reached end-of-life)
wily Ignored
(reached end-of-life)
yakkety Does not exist

zesty Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

xenial Ignored
(end of standard support, was needed)
gcc-4.9-arm64-cross
Launchpad, Ubuntu, Debian
upstream Needs triage

precise Does not exist

trusty Does not exist

vivid Ignored
(reached end-of-life)
wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

gcc-4.9-armhf-cross
Launchpad, Ubuntu, Debian
upstream Needs triage

precise Does not exist

trusty Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

vivid Ignored
(reached end-of-life)
gcc-4.9-powerpc-cross
Launchpad, Ubuntu, Debian
upstream Needs triage

precise Does not exist

trusty Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

vivid Ignored
(reached end-of-life)
gcc-4.9-ppc64el-cross
Launchpad, Ubuntu, Debian
upstream Needs triage

precise Does not exist

trusty Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

vivid Ignored
(reached end-of-life)
gcc-arm-linux-androideabi
Launchpad, Ubuntu, Debian
upstream Needed

precise Does not exist

trusty Does not exist
(trusty was needed)
wily Ignored
(reached end-of-life)
yakkety Ignored
(reached end-of-life)
zesty Ignored
(reached end-of-life)
artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

xenial Ignored
(end of standard support, was needed)
vivid Ignored
(reached end-of-life)
gcc-arm-none-eabi
Launchpad, Ubuntu, Debian
upstream
Released (15:6.3.1+svn253039)
precise Does not exist

trusty Does not exist
(trusty was needed)
wily Ignored
(reached end-of-life)
yakkety Ignored
(reached end-of-life)
zesty Ignored
(reached end-of-life)
artful Ignored
(reached end-of-life)
bionic Not vulnerable
(15:6.3.1+svn253039)
cosmic Not vulnerable
(15:6.3.1+svn253039)
disco Not vulnerable
(15:6.3.1+svn253039)
eoan Not vulnerable
(15:6.3.1+svn253039)
focal Not vulnerable
(15:6.3.1+svn253039)
impish Not vulnerable
(15:6.3.1+svn253039)
groovy Not vulnerable
(15:6.3.1+svn253039)
hirsute Not vulnerable
(15:6.3.1+svn253039)
jammy Not vulnerable
(15:6.3.1+svn253039)
xenial Ignored
(end of standard support, was needed)
vivid Ignored
(reached end-of-life)
gcc-avr
Launchpad, Ubuntu, Debian
upstream
Released (1:5.4.0+Atmel3.6.0-1build1)
precise Does not exist
(precise was needs-triage)
trusty Does not exist
(trusty was needed)
vivid Ignored
(reached end-of-life)
wily Ignored
(reached end-of-life)
yakkety Ignored
(reached end-of-life)
zesty Ignored
(reached end-of-life)
artful Ignored
(reached end-of-life)
bionic Not vulnerable
(1:5.4.0+Amtel3.6.0-1build1)
cosmic Not vulnerable
(1:5.4.0+Amtel3.6.0-1build1)
disco Not vulnerable
(1:5.4.0+Amtel3.6.0-1build1)
eoan Not vulnerable
(1:5.4.0+Amtel3.6.0-1build1)
focal Not vulnerable
(1:5.4.0+Amtel3.6.0-1build1)
impish Not vulnerable
(1:5.4.0+Amtel3.6.0-1build1)
groovy Not vulnerable
(1:5.4.0+Amtel3.6.0-1build1)
hirsute Not vulnerable
(1:5.4.0+Amtel3.6.0-1build1)
jammy Not vulnerable
(1:5.4.0+Amtel3.6.0-1build1)
xenial Ignored
(end of standard support, was needed)
gcc-defaults
Launchpad, Ubuntu, Debian
upstream Not vulnerable

precise Not vulnerable

trusty Not vulnerable

vivid Not vulnerable

wily Not vulnerable

xenial Not vulnerable

yakkety Not vulnerable

zesty Not vulnerable

artful Not vulnerable

bionic Not vulnerable

cosmic Not vulnerable

disco Not vulnerable

eoan Not vulnerable

focal Not vulnerable

impish Not vulnerable

groovy Not vulnerable

hirsute Not vulnerable

jammy Not vulnerable

gcc-defaults-arm64-cross
Launchpad, Ubuntu, Debian
upstream Not vulnerable

precise Does not exist

trusty Does not exist
(trusty was not-affected)
wily Not vulnerable

xenial Does not exist

yakkety Does not exist

zesty Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

vivid Not vulnerable

gcc-defaults-armel-cross
Launchpad, Ubuntu, Debian
upstream Not vulnerable

precise Does not exist
(precise was not-affected)
trusty Does not exist
(trusty was not-affected)
wily Not vulnerable

xenial Does not exist

yakkety Does not exist

zesty Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

vivid Not vulnerable

gcc-defaults-armhf-cross
Launchpad, Ubuntu, Debian
upstream Not vulnerable

precise Does not exist
(precise was not-affected)
trusty Does not exist
(trusty was not-affected)
wily Not vulnerable

xenial Does not exist

yakkety Does not exist

zesty Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

vivid Not vulnerable

gcc-defaults-powerpc-cross
Launchpad, Ubuntu, Debian
upstream Not vulnerable

precise Does not exist

trusty Does not exist
(trusty was not-affected)
wily Not vulnerable

xenial Does not exist

yakkety Does not exist

zesty Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

vivid Not vulnerable

gcc-defaults-ppc64el-cross
Launchpad, Ubuntu, Debian
upstream Not vulnerable

precise Does not exist

trusty Does not exist
(trusty was not-affected)
vivid Not vulnerable

wily Not vulnerable

xenial Does not exist

yakkety Does not exist

zesty Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

gcc-h8300-hms
Launchpad, Ubuntu, Debian
upstream Not vulnerable
(std::random_device not present)
precise Does not exist
(precise was needs-triage)
trusty Does not exist
(trusty was not-affected [std::random_device not present])
wily Ignored
(reached end-of-life)
xenial Not vulnerable
(std::random_device not present)
yakkety Ignored
(reached end-of-life)
zesty Ignored
(reached end-of-life)
artful Ignored
(reached end-of-life)
bionic Not vulnerable
(std::random_device not present)
cosmic Not vulnerable
(std::random_device not present)
disco Not vulnerable
(std::random_device not present)
eoan Not vulnerable
(std::random_device not present)
focal Not vulnerable
(std::random_device not present)
impish Not vulnerable
(std::random_device not present)
groovy Not vulnerable
(std::random_device not present)
hirsute Not vulnerable
(std::random_device not present)
jammy Not vulnerable
(std::random_device not present)
vivid Ignored
(reached end-of-life)
gcc-m68hc1x
Launchpad, Ubuntu, Debian
upstream Not vulnerable
(std::random_device not present)
precise Does not exist
(precise was needs-triage)
trusty Does not exist
(trusty was not-affected [std::random_device not present])
wily Ignored
(reached end-of-life)
xenial Not vulnerable
(std::random_device not present)
yakkety Ignored
(reached end-of-life)
zesty Ignored
(reached end-of-life)
artful Ignored
(reached end-of-life)
bionic Not vulnerable
(std::random_device not present)
cosmic Not vulnerable
(std::random_device not present)
disco Not vulnerable
(std::random_device not present)
eoan Not vulnerable
(std::random_device not present)
focal Not vulnerable
(std::random_device not present)
impish Not vulnerable
(std::random_device not present)
groovy Not vulnerable
(std::random_device not present)
hirsute Not vulnerable
(std::random_device not present)
jammy Not vulnerable
(std::random_device not present)
vivid Ignored
(reached end-of-life)
gcc-mingw-w64
Launchpad, Ubuntu, Debian
upstream Needs triage

precise Does not exist
(precise was needs-triage)
trusty Needed

wily Ignored
(reached end-of-life)
xenial Not vulnerable
(17)
yakkety Ignored
(reached end-of-life)
zesty Ignored
(reached end-of-life)
artful Ignored
(reached end-of-life)
bionic Not vulnerable
(17)
cosmic Not vulnerable
(17)
disco Not vulnerable
(17)
eoan Not vulnerable
(17)
focal Not vulnerable
(17)
impish Not vulnerable
(17)
groovy Not vulnerable
(17)
hirsute Not vulnerable
(17)
jammy Not vulnerable
(17)
vivid Ignored
(reached end-of-life)
gcc-msp430
Launchpad, Ubuntu, Debian
upstream Needs triage

precise Does not exist
(precise was needs-triage)
trusty Does not exist
(trusty was needed)
wily Ignored
(reached end-of-life)
yakkety Ignored
(reached end-of-life)
zesty Ignored
(reached end-of-life)
artful Ignored
(reached end-of-life)
bionic Needed

cosmic Ignored
(reached end-of-life)
disco Ignored
(reached end-of-life)
eoan Ignored
(reached end-of-life)
focal Needed

impish Needed

groovy Ignored
(reached end-of-life)
hirsute Ignored
(reached end-of-life)
jammy Needed

xenial Ignored
(end of standard support, was needed)
vivid Ignored
(reached end-of-life)
gcc-opt
Launchpad, Ubuntu, Debian
upstream Not vulnerable
(code not present)
precise Does not exist
(precise was needs-triage)
trusty Does not exist
(trusty was not-affected (code not present))
wily Ignored
(reached end-of-life)
xenial Not vulnerable
(code not present)
yakkety Ignored
(reached end-of-life)
zesty Ignored
(reached end-of-life)
artful Ignored
(reached end-of-life)
bionic Not vulnerable
(code not present)
cosmic Not vulnerable
(code not present)
disco Not vulnerable
(code not present)
eoan Not vulnerable
(code not present)
focal Not vulnerable
(code not present)
impish Not vulnerable
(code not present)
groovy Not vulnerable
(code not present)
hirsute Not vulnerable
(code not present)
jammy Not vulnerable
(code not present)
vivid Ignored
(reached end-of-life)
gccgo-4.7
Launchpad, Ubuntu, Debian
upstream Not vulnerable

precise Does not exist
(precise was not-affected [vulnerable code is built but libgo doesn't use it])
trusty Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

gccgo-4.9
Launchpad, Ubuntu, Debian
upstream Not vulnerable

precise Does not exist

trusty Not vulnerable
(vulnerable code is built but libgo doesn't use it)
vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

gccgo-5
Launchpad, Ubuntu, Debian
upstream Not vulnerable

precise Does not exist

trusty Does not exist

vivid Not vulnerable
(vulnerable code is built but libgo doesn't use it)
wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

gccgo-go
Launchpad, Ubuntu, Debian
upstream Not vulnerable

precise Does not exist

trusty Does not exist
(trusty was not-affected)
vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

impish Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

Notes

AuthorNote
tyhicks
Note that upstream revision 227687 is incomplete/incorrect. See
msg01050.html for a more complete patch that is undergoing review.
In gcc-4.7 through gcc-4.8, the code in question exists at
libstdc++-v3/include/tr1/random.h and libstdc++-v3/include/bits/random.h
In gcc-4.4, the code in question exists at
libstdc++-v3/include/tr1_impl/random
sbeattie
Note that for versions where the random_device() code in
question is in a header file, means that it's compiled into the
binaries built against libstdc++, which would need to be rebuilt to
get the fixed version.
upstream commits (so far) are listed under gcc-snapshots
package. Corresponding git commits are:
84bb4e67d45a8921cedd2ef64fe3cffd9ee72f44
8efb09c4325785a5e7d11d05c5aadc74d2a49887
fd16f36d1986fbbb9f802b3649e543f3f41227ea
gcc-opt is just a wrapper around gcc, not affected

References

Bugs