Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libdwarf for openSUSE:Factory checked in at 2023-02-28 12:49:01 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libdwarf (Old) and /work/SRC/openSUSE:Factory/.libdwarf.new.31432 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "libdwarf" Tue Feb 28 12:49:01 2023 rev:30 rq:1068066 version:0.6.0 Changes: -------- --- /work/SRC/openSUSE:Factory/libdwarf/libdwarf.changes 2022-12-03 10:04:03.751382327 +0100 +++ /work/SRC/openSUSE:Factory/.libdwarf.new.31432/libdwarf.changes 2023-02-28 12:49:21.756747638 +0100 @@ -1,0 +2,19 @@ +Mon Feb 27 21:29:52 UTC 2023 - Dirk M��ller <dmueller@suse.com> + +- update to 0.6.0: + Fixes for Denial Of Service (possible libdwarf crash): + * The dealloc required for dwarf_offset_list() was incorrect, + possibly leading to a crash. + * The function prototype for dwarf_dietype_offset() changed so + it can work correctly on DWARF4 objects. + * A memory leak from dwarf_load_loclists() has been fixed. + * The function dwarf_get_pubtypes() changed, Dwarf_Type no longer + exists, correcting a library design mistake made in 1993. + The function applied to DWARF3 and DWARF4 objects. + * The set of functions using Dwarf_Type are gone, use Dwarf_Global + instead. An object with DW_FORM_strx3 (DWARF5) could result in + the library either crashing or returning an inappropriate error. + DW_FORM_strx3 is now handled + * https://newreleases.io/github/davea42/libdwarf-code?version=v0.6.0 + +------------------------------------------------------------------- Old: ---- libdwarf-0.5.0.tar.xz New: ---- libdwarf-0.6.0.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libdwarf.spec ++++++ --- /var/tmp/diff_new_pack.waAaib/_old 2023-02-28 12:49:22.292750581 +0100 +++ /var/tmp/diff_new_pack.waAaib/_new 2023-02-28 12:49:22.296750603 +0100 @@ -1,7 +1,7 @@ # # spec file for package libdwarf # -# Copyright (c) 2022 SUSE LLC +# Copyright (c) 2023 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,7 +17,7 @@ Name: libdwarf -Version: 0.5.0 +Version: 0.6.0 Release: 0 Summary: Access DWARF debugging information License: GPL-2.0-or-later AND LGPL-2.1-or-later ++++++ libdwarf-0.5.0.tar.xz -> libdwarf-0.6.0.tar.xz ++++++ ++++ 31709 lines of diff (skipped)