File elfutils.changes of Package elfutils.8904

Overview Repositories Revisions Requests Users Attributes Meta

File elfutils.changes of Package elfutils.8904

-------------------------------------------------------------------
Wed Jun  5 17:48:59 UTC 2019 - Joao Moreira <jmoreira@suse.com>

- CVE-2018-16403: elfutils: Heap-based buffer over-read in
  libdw/dwarf_getabbrev.c and libdw/dwarf_hasattr.c causes crash
  (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- Add reference number to patch
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch

-------------------------------------------------------------------
Fri May 31 19:11:02 UTC 2019 - Joao Moreira <jmoreira@suse.com>

- Fix warnings captured by asan while reproducing the bugs below
  Add patch:
  elfutils-prevent-incorrect-memory-read.patch
- CVE-2016-10254: elfutils: memory allocation failure in allocate_elf
  (common.h) (bnc#1030472)
  Add patch:
  libelf-always-set-elf-maxsize-when-reading.patch
- CVE-2016-10255: elfutils: memory allocation failure in
  __libelf_set_rawdata_wrlock (elf_getdata.c) (bnc#1030476)
  Add patch:
  libelf-sanity-check-offset-and-size.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch

-------------------------------------------------------------------
Tue Sep 25 15:28:05 UTC 2018 - jmoreira@suse.com

- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch

-------------------------------------------------------------------
Fri Jan  9 20:20:53 UTC 2015 - tonyj@suse.com

- CVE-2014-9447: elfutils: Directory traversal vulnerability (bnc#911662)
  Add patch: elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch

-------------------------------------------------------------------
Thu Jun 19 21:08:35 UTC 2014 - tonyj@suse.com

- Package changes file to support local rpmbuild (bnc#879011)

-------------------------------------------------------------------
Tue Apr 15 18:56:25 UTC 2014 - tonyj@suse.com

- Fix integer overflow in check_section (CVE-2014-0172, bnc#872785)
  Add patch: elfutils-check-for-overflow-before-calling-malloc-to-uncompress-data.patch

-------------------------------------------------------------------
Sat Mar 22 17:19:48 UTC 2014 - jengelh@inai.de

- SPARC build requires the large PIC model (or else build fails)

-------------------------------------------------------------------
Tue Jan 28 19:22:04 UTC 2014 - tonyj@suse.com

- Update to 0.158:
  - libdwfl: 
    - dwfl_core_file_report has new parameter executable.
    - New functions dwfl_module_getsymtab_first_global,
       dwfl_module_getsym_info and dwfl_module_addrinfo.
    - Added unwinder with type Dwfl_Thread_Callbacks, opaque types
       Dwfl_Thread and Dwfl_Frame and functions dwfl_attach_state,
       dwfl_pid, dwfl_thread_dwfl, dwfl_thread_tid, dwfl_frame_thread,
       dwfl_thread_state_registers, dwfl_thread_state_register_pc,
       dwfl_getthread_frames, dwfl_getthreads, dwfl_thread_getframes
       and dwfl_frame_pc.
  - addr2line: New option -x to show the section an address was found in.
  - stack: New utility that uses the new unwinder for processes and cores.
  - backends: Unwinder support for i386, x86_64, s390, s390x, ppc and ppc64.
     aarch64 support.

-------------------------------------------------------------------
Wed Nov 13 12:12:20 UTC 2013 - sweet_f_a@gmx.de

- update to 0.157:
  libdw: Add new functions dwarf_getlocations, dwarf_getlocation_attr
           and dwarf_getlocation_die.
  readelf: Show contents of NT_SIGINFO and NT_FILE core notes.
  addr2line: Support -i, --inlines output option.
  backends: abi_cfi hook for arm, ppc and s390.
- update to 0.156:
  lib: New macro COMPAT_VERSION_NEWPROTO.
  libdw: Handle GNU extension opcodes in dwarf_getlocation.
  libdwfl: Fix STB_GLOBAL over STB_WEAK preference in dwfl_module_addrsym.
           Add minisymtab support.
           Add parameter add_p_vaddr to dwfl_report_elf.
           Use DT_DEBUG library search first.
  libebl: Handle new core note types in EBL.
  backends: Interpret NT_ARM_VFP.
            Implement core file registers parsing for s390/s390x.
  readelf: Add --elf-section input option to inspect an embedded ELF file.
           Add -U, --unresolved-address-offsets output control.
           Add --debug-dump=decodedline support.
           Accept version 8 .gdb_index section format.
           Adjust output formatting width.
           When highpc is in constant form print it also as address.
           Display raw .debug_aranges. Use libdw only for decodedaranges.
  elflint: Add __bss_start__ to the list of allowed symbols.
  tests: Add configure --enable-valgrind option to run all tests under valgrind.
         Enable automake parallel-tests for make check.
  translations: Updated Polish translation.
  Updates for Automake 1.13.
- remove elfutils-aarch64.patch and elfutils-sizeof-pointer-memaccess.patch
  (fixed by upstream)
- rebase elfutils-robustify.patch and elfutils-portability.patch, they are
  provided by ustream

-------------------------------------------------------------------
Tue Jun 18 16:05:13 UTC 2013 - schwab@suse.de

- elfutils-sizeof-pointer-memaccess.patch: Fix sizeof-pointer-memaccess
  warnings

-------------------------------------------------------------------
Tue Mar 26 12:56:03 UTC 2013 - mmeister@suse.com

- Added url as source.
  Please see http://en.opensuse.org/SourceUrls

-------------------------------------------------------------------
Wed Nov 28 09:37:52 UTC 2012 - adrian@suse.de

- add elfutils-aarch64.patch to support aarch64
- update to 0.155

libelf: elf*_xlatetomd now works for cross-endian ELF note data.
  	elf_getshdr now works consistently on non-mmaped ELF files after
  	calling elf_cntl(ELF_C_FDREAD).
  	Implement support for ar archives with 64-bit symbol table.
  	[g]elf[32|64]_offscn() do not match SHT_NOBITS sections at OFFSET.
  
  libdw: dwarf.h corrected the DW_LANG_ObjC constant name (was DW_LANG_Objc).
         Any existing sources using the old name will have to be updated.
         Add DW_MACRO_GNU .debug_macro type encodings constants, DW_ATE_UTF
         and DW_OP_GNU_parameter_ref to dwarf.h.
         Experimental support for DWZ multifile forms DW_FORM_GNU_ref_alt
         and DW_FORM_GNU_strp_alt.  Disabled by default.  Use configure
         --enable-dwz to test it.
         dwarf_highpc function now handles DWARF 4 DW_AT_high_pc constant form.
         Fix bug using dwarf_next_unit to iterate over .debug_types.
  
  elflint: Now accepts gold linker produced executables.
  
  readelf: Add .debug_macro parsing support.
  	 Add .gdb_index version 7 parsing support.
  	 Recognize DW_OP_GNU_parameter_ref.
  
  backends: Add support for Tilera TILE-Gx processor.
  
  translations: Updated Ukrainian translation.
  
  The license is now GPLv2/LGPLv3+ for the libraries and GPLv3+ for stand-alone
  programs. There is now also a formal CONTRIBUTING document describing how to
  submit patches.

-------------------------------------------------------------------
Mon Oct  8 09:48:59 UTC 2012 - schwab@linux-m68k.org

- Fix baselibs.conf: elfutils-devel -> libelf-devel

-------------------------------------------------------------------
Thu Sep 20 13:18:51 UTC 2012 - cfarrell@suse.com

- license update: SUSE-GPL-2.0-with-OSI-exception
  Use a license available on the spreadsheet linked at
  license.opensuse.org

-------------------------------------------------------------------
Wed May 30 17:41:41 UTC 2012 - sweet_f_a@gmx.de

- avoid automake dependency

-------------------------------------------------------------------
Thu Mar 15 08:49:20 UTC 2012 - aj@suse.de

- Update to 0.153:
  * Fix building with gcc 4.7
  *  New --disable-werror for portability.
  * Support for .zdebug sections
  * type_units and DW_AT_GNU_odr_signature support
  * low level support DW_OP_GNU_entry_value and DW_TAG_GNU_call_site
- Revert scanf changes in portability patch since C99 gives %a a new 
  meaning.

-------------------------------------------------------------------
Fri Dec  2 08:59:33 UTC 2011 - cfarrell@suse.com

- license update: GPL-2.0-with-osi-exception
  elfutils is GPL-2.0 (only) with an exception for osi approved licenses.
  Also, use SPDX format

-------------------------------------------------------------------
Thu Dec  1 11:22:12 UTC 2011 - coolo@suse.com

- add automake as buildrequire to avoid implicit dependency

-------------------------------------------------------------------
Sun Sep 18 17:17:12 UTC 2011 - jengelh@medozas.de

- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Add elfutils-devel to baselibs

-------------------------------------------------------------------
Tue May 24 15:32:28 UTC 2011 - crrodriguez@opensuse.org

- Remote timestamps on binaries, breaks build compare
- Add missing build requires on zlib, bzip2 and lzma .

-------------------------------------------------------------------
Wed Apr 27 00:35:22 UTC 2011 - tonyj@novell.com

- Upgrade to 0.152, upstream changelog:
  - Various build and warning nits fixed for newest GCC and Autoconf.
  - libdwfl: Yet another prelink-related fix for another regression.
             Look for Linux kernel images in files named with compression
             suffixes.
  - elfcmp: New flag --ignore-build-id to ignore differing build ID bits.
	    New flag -l/--verbose to print all differences.

-------------------------------------------------------------------
Fri Jan 21 22:02:25 UTC 2011 - tonyj@novell.com

- Update to 0.151
- Upstream changelog for 0.151/0.150
  - libdwfl: Fix for more prelink cases with separate debug file. 
  - eu-strip: New flag --strip-sections to remove section headers entirely.
  - libdwfl: Remove bogus assert. 
  - libdw: Fix for handling huge .debug_aranges section. 
  - libdwfl: Fix for handling prelinked DSO with separate debug file. 
  - findtextrel: Fix diagnostics to work with usual section ordering.
  - libebl: i386 backend fix for multi-register integer return value location

-------------------------------------------------------------------
Sat Sep 18 00:00:44 UTC 2010 - tonyj@novell.com

- Update to 0.149
- Upstream changelog
  - libdwfl: Fix Linux kernel module search when dwfl_build_id_find_elf and
    dwfl_build_id_find_debuginfo close fd on success
  - readelf: Use symbolic printing for FDE initial_location address
  - readelf: Print .debug_loc/.debug_ranges with cognizance of actual DIE 
    pointers into them.
  - readelf: Fix crash in .debug_loc with garbage data.
  - readelf: Fix DW_OP_call_ref printing for version 2 CUs.
  - Handle DW_OP_GNU_implicit_pointer.
  - Add dwfl_dwarf_line, addr2line -F to print out more line info bits.
  - Add missing size entries for ELF_T_LIB and ELF_T_GNUHASH.
  - Fix dwarf_formref_die DW_FORM_ref_sig8 hash table insertion.
  - Consider .gdb_index as a debugging section
  - Misc intendation, typo, translation and cleanup fixes

-------------------------------------------------------------------
Mon Sep 13 11:32:58 UTC 2010 - coolo@novell.com

- add small patch to avoid crash in systemtap while building preload

-------------------------------------------------------------------
Thu Aug 26 03:32:26 CEST 2010 - tonyj@suse.de

- Update to 0.148
- Upstream changelog
  - libdw: Accept DWARF 4 format: new functions dwarf_next_unit, 
    dwarf_offdie_types.  New functions dwarf_lineisa, 
    dwarf_linediscriminator, dwarf_lineop_index.
  - libdwfl: Fixes in core-file handling, support cores from PIEs. 
    	 When working from build IDs, don't open a named file that mismatches.
  - readelf: Handle DWARF 4 formats.

-------------------------------------------------------------------
Mon Jun 28 06:38:35 UTC 2010 - jengelh@medozas.de

- use %_smp_mflags

-------------------------------------------------------------------
Tue May 11 20:01:23 UTC 2010 - tonyj@novell.com

- update to version 0.147 (fix bnc#588293)
- dropped patches for 10.3 and older
- dropped elfutils-0.97-ftruncate-mmap-fix, libelf-ignore-NOBITS, test and
  build patches. According to jbl these were mistakenly checked in from
  home:janblunck:debuginfo:libs/elfutils and the purpose of this project is 
  no longer known. Absense of any patch header makes confirmation difficult.

- Upstream changelog:
  0.147
  - libdw: Fixes in CFI handling, best possible handling of bogus CFA
    ops.
  - libdwfl: Ignore R_*_NONE relocs, works around old (binutils) ld -r
    bugs.
  
  0.146
  - libdwfl: New function dwfl_core_file_report.
  
  0.145
  - Fix build with --disable-dependency-tracking.
  - Fix build with most recent glibc headers.
  - libelf: More robust to bogus section headers.
  - libdw: Fix CFI decoding.
  - libdwfl: Fix address bias returned by CFI accessors.   Fix core
    file module layout identification.
  - readelf: Fix CFI decoding.
  
  0.144
  - libelf: New function elf_getphdrnum.  Now support using more than
    65536 program headers in a file.
  - libdw: New function dwarf_aggregate_size for computing (constant)
    type        sizes, including array_type cases with nontrivial
    calculation.
  - readelf: Don't give errors for missing info under -a.
    Handle Linux "VMCOREINFO" notes under -n.
  
  0.143
  - libdw: Various convenience functions for individual attributes now
    use dwarf_attr_integrate to look up indirect inherited
    attributes.  Location expression handling now supports
    DW_OP_implicit_value.
  - libdwfl: Support automatic decompression of files in XZ format,
    and of Linux kernel images made with bzip2 or LZMA (as well
    as gzip).

-------------------------------------------------------------------
Wed Feb 10 12:21:51 CET 2010 - rguenther@suse.de

- Fix uninitialized variable.

-------------------------------------------------------------------
Sat Dec 12 18:13:13 CET 2009 - jengelh@medozas.de

- Enable parallel building
- add baselibs.conf as a source

-------------------------------------------------------------------
Thu Aug 20 13:13:21 CEST 2009 - rguenther@suse.de

- Fix elfutils-old-scanf-fix.diff patch.

-------------------------------------------------------------------
Thu Aug 13 16:11:47 CEST 2009 - tiwai@suse.de

- updated to 0.142:
  - Fix handling filling caps between sections in libelf
  - Add elf_getshdrnum alias for elf_getshnum and elf_getshdrstrndx
    alias for elf_getshstrndx and deprecate original names.
  - Add support for STB_GNU_UNIQUE
  - Add -N option to readelf, speeds up DWARF printing without
    address->name lookups
  - Add support for decoding DWARF CFI into location description
    form to libdw.
    Some new DWARF 3 expression operations.
    Basic handling of some new encodings slated for DWARF 4.

-------------------------------------------------------------------
Wed Apr 29 17:49:28 CEST 2009 - tiwai@suse.de

- updated to 0.141:
  - libebl: sparc backend fixes
      some more arm backend support
  - libdwfl: fix dwfl_module_build_id for prelinked DSO case
      fixes in core file support dwfl_module_getsym interface
      improved for non-address symbols
  - eu-strip: fix infinite loop on strange inputs with -f
  - eu-addr2line: take -j/--section=NAME option for binutils
      compatibility (same effect as '(NAME)0x123' syntax already
      supported)

-------------------------------------------------------------------
Thu Feb 19 15:39:39 CET 2009 - tiwai@suse.de

- Update to 0.139
  - libcpu: Add Intel SSE4 disassembler support
  - readelf: Implement call frame information and exception
             handling dumping.
             Add -e option.  Enable it implicitly for -a.
  - elflint: Check PT_GNU_EH_FRAME program header entry.
  - libdwfl: Support automatic gzip/bzip2 decompression of ELF
             files.
- updated to 0.140:
  - libelf: Fix regression in creation of section header.
  - Misc bug fixes

-------------------------------------------------------------------
Tue Jan 27 14:34:17 CET 2009 - tiwai@suse.de

- revert the ET_DYN address fix patch; causing a regression
  (bnc#468814)

-------------------------------------------------------------------
Wed Jan  7 15:01:10 CET 2009 - tiwai@suse.de

- Fix the header size check in dwarf_getsrclines() (bnc#455992)
- Backport the fix for ET_DYN addresses

-------------------------------------------------------------------
Tue Dec 16 13:48:38 CET 2008 - tiwai@suse.de

- Fix dwfl_getmodules(), assert in systemtap (bnc#448331)
- Fix libebl1 dependency
- Fix crashes of elfutils binaries, backports from upstream

-------------------------------------------------------------------
Tue Nov 25 13:12:04 CET 2008 - tiwai@suse.de

- fix libdwfl regression with realloc DWFL->lookup_module in
  the fix patch (bnc#448331, likely bnc#445783)

-------------------------------------------------------------------
Tue Oct 28 20:33:17 CET 2008 - tiwai@suse.de

- added baselibs.conf for 32bit libs (bnc#439582)

-------------------------------------------------------------------
Tue Oct  7 15:07:28 CEST 2008 - tiwai@suse.de

- renamed to libebl1
- provides libasm1 package
- fix provides and obsolets of libebl1
- updated to version 0.137:
  * libdwfl: bug fixes

-------------------------------------------------------------------
Tue Aug 26 17:52:21 CEST 2008 - tiwai@suse.de

- updated to version 0.135:
  * libdwfl: bug fixes
- updated to version 0.134:
  * libdwfl, libelf: bug fixes
- updated to version 0.133:
  * readelf, elflint, libebl: SHT_GNU_ATTRIBUTE section handling
    (readelf -A)
  * libdwfl: bug fixes and optimization in relocation handling
- updated to version 0.132:
  * libcpu: Implement x86 and x86-64 disassembler.
  * libasm: Add interface for disassembler.
- fixed post scripts

-------------------------------------------------------------------
Fri Feb 29 19:17:35 CET 2008 - dmueller@suse.de

- fix build for older distributions

-------------------------------------------------------------------
Mon Jan 28 14:24:36 CET 2008 - tiwai@suse.de

- fix compile errors regarding missing prototypes.

-------------------------------------------------------------------
Tue Nov 20 14:47:20 CET 2007 - tiwai@suse.de

- fix off64_t in libelf.h again...

-------------------------------------------------------------------
Tue Nov 20 10:36:32 CET 2007 - tiwai@suse.de

- updated to version 0.131
  * libdw: DW_FORM_ref_addr support
     dwarf_formref entry point now deprecated
     bug fixes for oddly-formatted DWARF
  * libdwfl: bug fixes in offline archive support
     apply partial relocations for dwfl_module_address_section
     on ET_REL
  * libebl: powerpc backend support for Altivec registers

-------------------------------------------------------------------
Mon Oct 22 18:40:18 CEST 2007 - tiwai@suse.de

- fix comiple errors regarding missing off64_t definitions
  in libelf.h

-------------------------------------------------------------------
Mon Oct 22 15:18:07 CEST 2007 - tiwai@suse.de

- updated to version 0.129:
  readelf: new options --hex-dump (or -x), --strings (or -p)
- updated to version 0.130
  * readelf: -p option can take an argument like -x for one
    section
  * libelf: new function elf_getdata_rawchunk, replaces
    gelf_rawchunk;
    new functions gelf_getnote, gelf_getauxv, gelf_update_auxv
  * libdwfl: new functions dwfl_build_id_find_elf,
    dwfl_build_id_find_debuginfo, dwfl_module_build_id,
    dwfl_module_report_build_id;
    support dynamic symbol tables found via phdrs;
    dwfl_standard_find_debuginfo now uses build IDs when available
  * libebl: backend improvements for sparc, alpha, powerpc

-------------------------------------------------------------------
Thu Oct  4 15:28:43 CEST 2007 - rguenther@suse.de

- fix build with gcc-4.3, same patch as for the copy in rpm

-------------------------------------------------------------------
Wed Jul  4 12:20:22 CEST 2007 - tiwai@suse.de

- updated to version 0.128
  * auto-tool fixes

-------------------------------------------------------------------
Mon Jun 11 01:05:12 CEST 2007 - ro@suse.de

- use __attribute__ ((gnu_inline)) to fix build with gcc-4.2

-------------------------------------------------------------------
Mon May 21 12:19:46 CEST 2007 - tiwai@suse.de

- initial packages, built from elfutils-0.127.
  A problematic file regarding the license is removed from the
  tarball.

Places

File elfutils.changes of Package elfutils.8904

Places