linux/poky.git/meta/recipes-devtools/elfutils, branch scarthgap

elfutils: don't add -Werror to avoid discarded-qualifiers

2026-05-04T12:57:32+00:00

With glibc-2.43 on host elfutils-native fails with: elfutils-0.191/libcpu/riscv_disasm.c:1259:46: error: initialization discards âconstâ qualifier from pointer target type [-Werror=discarded-qualifiers] elfutils-0.194 in master doesn't have this issue thanks to this patch avoiding -Werror from: https://git.openembedded.org/openembedded-core/commit/?id=1d6ac3c811798732e6addc798656bbe104661d77 (From OE-Core rev: 7d9d9bcb64094da7121c6d6ce89cf07640537182) Signed-off-by: Martin Jansa Signed-off-by: Yoann Congal Signed-off-by: Paul Barker

elfutils: Fix CVE-2025-1377

2025-11-03T15:17:01+00:00

A vulnerability, which was classified as problematic, has been found in GNU elfutils 0.192. This issue affects the function gelf_getsymshndx of the file strip.c of the component eu-strip. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is fbf1df9ca286de3323ae541973b08449f8d03aba. It is recommended to apply a patch to fix this issue. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-1377 Upstream patch: https://sourceware.org/git/?p=elfutils.git;a=fbf1df9ca286de3323ae541973b08449f8d03aba (From OE-Core rev: ae89d0c2ca49c40429f787577d280b5886f42cc1) Signed-off-by: Soumya Sambu Signed-off-by: Steve Sakoman

elfutils: Fix CVE-2025-1376

2025-11-03T15:17:01+00:00

A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to fix this issue. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-1376 Upstream patch: https://sourceware.org/git/?p=elfutils.git;a=commit;h=b16f441cca0a4841050e3215a9f120a6d8aea918 (From OE-Core rev: 06e3cd0891f553b0ed036d9247dfa7c5ed814d78) Signed-off-by: Soumya Sambu Signed-off-by: Steve Sakoman

elfutils: fix build with gcc-15

2025-09-01T15:30:56+00:00

(From OE-Core rev: ece06774fd1c261c333f61779579614e0b40b927) Signed-off-by: Martin Jansa Signed-off-by: Steve Sakoman

elfutils: Fix CVE-2025-1371

2025-05-08T20:37:29+00:00

A vulnerability has been found in GNU elfutils 0.192 and classified as problematic. This vulnerability affects the function handle_dynamic_symtab of the file readelf.c of the component eu-read. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The patch is identified as b38e562a4c907e08171c76b8b2def8464d5a104a. It is recommended to apply a patch to fix this issue. References: https://nvd.nist.gov/vuln/detail/CVE-2025-1371 https://ubuntu.com/security/CVE-2025-1371 Upstream patch: https://sourceware.org/cgit/elfutils/commit/?id=b38e562a4c907e08171c76b8b2def8464d5a104a (From OE-Core rev: 11c44bde4f3d9e63506ece2f9b27114914aacc4b) Signed-off-by: Soumya Sambu Signed-off-by: Steve Sakoman

elfutils: Fix multiple CVEs

2025-03-05T14:03:47+00:00

Backport fixes for: * CVE-2025-1352 - Upstream-Status: Backport from https://sourceware.org/git/?p=elfutils.git;a=commit;h=2636426a091bd6c6f7f02e49ab20d4cdc6bfc753 * CVE-2025-1365 - Upstream-Status: Backport from https://sourceware.org/git/?p=elfutils.git;a=commit;h=5e5c0394d82c53e97750fe7b18023e6f84157b81 * CVE-2025-1372 - Upstream-Status: Backport from https://sourceware.org/git/?p=elfutils.git;a=commit;h=73db9d2021cab9e23fd734b0a76a612d52a6f1db (From OE-Core rev: 938676089fb5da383b7daf6c5e6348079ecf5674) Signed-off-by: Hitendra Prajapati Signed-off-by: Steve Sakoman

elfutils: fix unused variable BUFFER_SIZE

2024-03-20T18:20:38+00:00

Fix build break with clang (From OE-Core rev: 760292c23213476169116b8608ca4119b99e6ff8) Signed-off-by: Jose Quaresma Signed-off-by: Richard Purdie

elfutils: Fix build break with clang

2024-03-18T12:21:45+00:00

(From OE-Core rev: 68923430069fcc049ad9c5f7830f72c1c3e7d501) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie

elfutils: upgrade 0.189 -> 0.191

2024-03-07T17:25:02+00:00

Drop backports: 0001-Add-helper-function-for-basename.patch 0001-tests-fix-build-against-upcoming-gcc-14-Werror-callo.patch (From OE-Core rev: 797117902490fcd336697397ea5d8c2a601124b2) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

elfutils: Fix build with gcc trunk

2024-01-27T08:20:02+00:00

Fixes a build issue seen with latest gcc trunk. Fixes | ../../elfutils-0.189/tests/elfstrmerge.c: In function 'main': | ../../elfutils-0.189/tests/elfstrmerge.c:450:32: error: 'calloc' sizes specified with 'sizeof' in the earlier argument and not in the later argument [-Werror=calloc-transposed-args] | 450 | newscnbufs = calloc (sizeof (void *), newshnums); | | ^~~~ | ../../elfutils-0.189/tests/elfstrmerge.c:450:32: note: earlier argument should specify number of elements, later size of each element | cc1: all warnings being treated as errors (From OE-Core rev: 3817ac3130e8858b3445872ff74b39c21969822a) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie