Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package libdwarf for openSUSE:Factory checked in at 2023-02-28 12:49:01
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/libdwarf (Old)
and /work/SRC/openSUSE:Factory/.libdwarf.new.31432 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libdwarf"
Tue Feb 28 12:49:01 2023 rev:30 rq:1068066 version:0.6.0
Changes:
--------
--- /work/SRC/openSUSE:Factory/libdwarf/libdwarf.changes 2022-12-03 10:04:03.751382327 +0100
+++ /work/SRC/openSUSE:Factory/.libdwarf.new.31432/libdwarf.changes 2023-02-28 12:49:21.756747638 +0100
@@ -1,0 +2,19 @@
+Mon Feb 27 21:29:52 UTC 2023 - Dirk M��ller
+
+- update to 0.6.0:
+ Fixes for Denial Of Service (possible libdwarf crash):
+ * The dealloc required for dwarf_offset_list() was incorrect,
+ possibly leading to a crash.
+ * The function prototype for dwarf_dietype_offset() changed so
+ it can work correctly on DWARF4 objects.
+ * A memory leak from dwarf_load_loclists() has been fixed.
+ * The function dwarf_get_pubtypes() changed, Dwarf_Type no longer
+ exists, correcting a library design mistake made in 1993.
+ The function applied to DWARF3 and DWARF4 objects.
+ * The set of functions using Dwarf_Type are gone, use Dwarf_Global
+ instead. An object with DW_FORM_strx3 (DWARF5) could result in
+ the library either crashing or returning an inappropriate error.
+ DW_FORM_strx3 is now handled
+ * https://newreleases.io/github/davea42/libdwarf-code?version=v0.6.0
+
+-------------------------------------------------------------------
Old:
----
libdwarf-0.5.0.tar.xz
New:
----
libdwarf-0.6.0.tar.xz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ libdwarf.spec ++++++
--- /var/tmp/diff_new_pack.waAaib/_old 2023-02-28 12:49:22.292750581 +0100
+++ /var/tmp/diff_new_pack.waAaib/_new 2023-02-28 12:49:22.296750603 +0100
@@ -1,7 +1,7 @@
#
# spec file for package libdwarf
#
-# Copyright (c) 2022 SUSE LLC
+# Copyright (c) 2023 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
Name: libdwarf
-Version: 0.5.0
+Version: 0.6.0
Release: 0
Summary: Access DWARF debugging information
License: GPL-2.0-or-later AND LGPL-2.1-or-later
++++++ libdwarf-0.5.0.tar.xz -> libdwarf-0.6.0.tar.xz ++++++
++++ 31709 lines of diff (skipped)