linux/poky.git/meta/recipes-devtools/elfutils/files, branch kirkstone

elfutils: Fix CVE-2025-1377

2025-11-24T14:57:39+00:00

A vulnerability, which was classified as problematic, has been found in GNU elfutils 0.192. This issue affects the function gelf_getsymshndx of the file strip.c of the component eu-strip. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is fbf1df9ca286de3323ae541973b08449f8d03aba. It is recommended to apply a patch to fix this issue. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-1377 Upstream patch: https://sourceware.org/git/?p=elfutils.git;a=commit;h=fbf1df9ca286de3323ae541973b08449f8d03aba (From OE-Core rev: e4e8392e688ceb0d8e68fe48118383c031178b5e) Signed-off-by: Soumya Sambu Signed-off-by: Steve Sakoman

elfutils: Fix CVE-2025-1376

2025-11-24T14:57:39+00:00

A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to fix this issue. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-1376 Upstream patch: https://sourceware.org/git/?p=elfutils.git;a=commit;h=b16f441cca0a4841050e3215a9f120a6d8aea918 (From OE-Core rev: 1126e5c1e63b876499c78ac403d1327645edf1c7) Signed-off-by: Soumya Sambu Signed-off-by: Steve Sakoman

elfutils: Fix multiple CVEs

2025-03-04T16:46:02+00:00

Backport fixes for: * CVE-2025-1352 - Upstream-Status: Backport from https://sourceware.org/git/?p=elfutils.git;a=commit;h=2636426a091bd6c6f7f02e49ab20d4cdc6bfc753 * CVE-2025-1372 - Upstream-Status: Backport from https://sourceware.org/git/?p=elfutils.git;a=commit;h=73db9d2021cab9e23fd734b0a76a612d52a6f1db (From OE-Core rev: 8ea258ad9c83be5d9548a796f7dda4ac820fc435) Signed-off-by: Hitendra Prajapati Signed-off-by: Steve Sakoman

elfutils: update patch submitted upstream

2021-12-17T09:56:14+00:00

As that's what upstream prefers. (From OE-Core rev: 5a6cd9cc1b9d8fd3607f3df311accb483d2989a3) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

elfutils: submit patch upstream

2021-11-25T21:55:10+00:00

(From OE-Core rev: a71a527ecf198e2e3712ed9608b74e78e09ece0f) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

elfutils: update 0.185 -> 0.186

2021-11-25T21:55:10+00:00

Drop glibc-2.34-fix.patch merged upstream. Rework support for error() on non-glibc targets: upstream now provides its own implementation, so we can drop the patch that adds ours; said implementation isn't build-tested with tests, so ptest has to be disabled on musl. This, in turns, allows dropping 0004-Fix-error-on-musl.patch. License-Update: copyright years (From OE-Core rev: 9c51ae20c0e4c0d3e7161fc6b51fca078dbf014a) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

patches: correct whitespace/spelling for Upstream-Status tags

2021-11-21T11:05:02+00:00

(From OE-Core rev: c613ca14c35a5d1782c79a25b83875cbfa2b952b) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

elfutils: Add patch from upstream for glibc 2.34 ptest fixes

2021-08-05T16:48:29+00:00

Add a patch being discussed upstream to fix a ptest issue with glibc 2.34. (From OE-Core rev: 8921f2acfd566d2c03cea7bdb9f0b1883994148b) Signed-off-by: Richard Purdie

elfutils: update 0.183 -> 0.185

2021-06-06T22:16:51+00:00

0001-add-support-for-ipkg-to-debuginfod.cxx.patch merged upstream. 0001-debuginfod-debuginfod-client.c-correct-string-format.patch rebased. (From OE-Core rev: 466ba2d5c81f817334b2f9242daa8ffca271e224) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

elfutils: Make 64bit time_t fix generic

2021-04-23T09:12:08+00:00

Apply it always since more than x32 needs it (From OE-Core rev: faf5034876c319aa51d6b3e21265d0984566bb9e) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie