https://sourceware.org/ml/elfutils-devel/2019-q1/msg00147.html
Since it'short, NEWS is reproduced below
------
* NEWS *
build: Add new --enable-install-elfh option.
Do NOT use this for system installs (it overrides glibc elf.h).
backends: riscv improved core file and return value location support.
Fixes CVE-2019-7146, CVE-2019-7148, CVE-2019-7149, CVE-2019-7150,
CVE-2019-7664, CVE-2019-7665
Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools.
This update was made based on information from https://repology.org/metapackage/elfutils/versions.
These checks were done:
- built on NixOS
- /nix/store/nmml2vhzia58ji531a4q1j97rrj308yj-elfutils-0.173/bin/eu-readelf passed the binary check.
- /nix/store/nmml2vhzia58ji531a4q1j97rrj308yj-elfutils-0.173/bin/eu-nm passed the binary check.
- /nix/store/nmml2vhzia58ji531a4q1j97rrj308yj-elfutils-0.173/bin/eu-size passed the binary check.
- /nix/store/nmml2vhzia58ji531a4q1j97rrj308yj-elfutils-0.173/bin/eu-strip passed the binary check.
- /nix/store/nmml2vhzia58ji531a4q1j97rrj308yj-elfutils-0.173/bin/eu-elflint passed the binary check.
- /nix/store/nmml2vhzia58ji531a4q1j97rrj308yj-elfutils-0.173/bin/eu-findtextrel passed the binary check.
- /nix/store/nmml2vhzia58ji531a4q1j97rrj308yj-elfutils-0.173/bin/eu-addr2line passed the binary check.
- /nix/store/nmml2vhzia58ji531a4q1j97rrj308yj-elfutils-0.173/bin/eu-elfcmp passed the binary check.
- /nix/store/nmml2vhzia58ji531a4q1j97rrj308yj-elfutils-0.173/bin/eu-objdump passed the binary check.
- /nix/store/nmml2vhzia58ji531a4q1j97rrj308yj-elfutils-0.173/bin/eu-ranlib passed the binary check.
- /nix/store/nmml2vhzia58ji531a4q1j97rrj308yj-elfutils-0.173/bin/eu-strings passed the binary check.
- /nix/store/nmml2vhzia58ji531a4q1j97rrj308yj-elfutils-0.173/bin/eu-ar passed the binary check.
- /nix/store/nmml2vhzia58ji531a4q1j97rrj308yj-elfutils-0.173/bin/eu-unstrip passed the binary check.
- /nix/store/nmml2vhzia58ji531a4q1j97rrj308yj-elfutils-0.173/bin/eu-stack passed the binary check.
- /nix/store/nmml2vhzia58ji531a4q1j97rrj308yj-elfutils-0.173/bin/eu-elfcompress passed the binary check.
- /nix/store/nmml2vhzia58ji531a4q1j97rrj308yj-elfutils-0.173/bin/eu-make-debug-archive passed the binary check.
- 16 of 16 passed binary check by having a zero exit code.
- 0 of 16 passed binary check by having the new version present in output.
- found 0.173 with grep in /nix/store/nmml2vhzia58ji531a4q1j97rrj308yj-elfutils-0.173
- directory tree listing: https://gist.github.com/f0b855207a6f13446e77907717da40dd
- du listing: https://gist.github.com/1275237e95e19d1956769a304945cc37
Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools.
This update was made based on information from https://repology.org/metapackage/elfutils/versions.
These checks were done:
- built on NixOS
- /nix/store/742pb58l3dabnraf988m4xvmccqyf85w-elfutils-0.171/bin/eu-readelf passed the binary check.
- /nix/store/742pb58l3dabnraf988m4xvmccqyf85w-elfutils-0.171/bin/eu-nm passed the binary check.
- /nix/store/742pb58l3dabnraf988m4xvmccqyf85w-elfutils-0.171/bin/eu-size passed the binary check.
- /nix/store/742pb58l3dabnraf988m4xvmccqyf85w-elfutils-0.171/bin/eu-strip passed the binary check.
- /nix/store/742pb58l3dabnraf988m4xvmccqyf85w-elfutils-0.171/bin/eu-elflint passed the binary check.
- /nix/store/742pb58l3dabnraf988m4xvmccqyf85w-elfutils-0.171/bin/eu-findtextrel passed the binary check.
- /nix/store/742pb58l3dabnraf988m4xvmccqyf85w-elfutils-0.171/bin/eu-addr2line passed the binary check.
- /nix/store/742pb58l3dabnraf988m4xvmccqyf85w-elfutils-0.171/bin/eu-elfcmp passed the binary check.
- /nix/store/742pb58l3dabnraf988m4xvmccqyf85w-elfutils-0.171/bin/eu-objdump passed the binary check.
- /nix/store/742pb58l3dabnraf988m4xvmccqyf85w-elfutils-0.171/bin/eu-ranlib passed the binary check.
- /nix/store/742pb58l3dabnraf988m4xvmccqyf85w-elfutils-0.171/bin/eu-strings passed the binary check.
- /nix/store/742pb58l3dabnraf988m4xvmccqyf85w-elfutils-0.171/bin/eu-ar passed the binary check.
- /nix/store/742pb58l3dabnraf988m4xvmccqyf85w-elfutils-0.171/bin/eu-unstrip passed the binary check.
- /nix/store/742pb58l3dabnraf988m4xvmccqyf85w-elfutils-0.171/bin/eu-stack passed the binary check.
- /nix/store/742pb58l3dabnraf988m4xvmccqyf85w-elfutils-0.171/bin/eu-elfcompress passed the binary check.
- /nix/store/742pb58l3dabnraf988m4xvmccqyf85w-elfutils-0.171/bin/eu-make-debug-archive passed the binary check.
- 16 of 16 passed binary check by having a zero exit code.
- 0 of 16 passed binary check by having the new version present in output.
- found 0.171 with grep in /nix/store/742pb58l3dabnraf988m4xvmccqyf85w-elfutils-0.171
- directory tree listing: https://gist.github.com/a9aa0114a736db7e1428e99f018ccd37
- du listing: https://gist.github.com/4fed4bdee872b7435662455c93469b5d
The following parameters are now available:
* hardeningDisable
To disable specific hardening flags
* hardeningEnable
To enable specific hardening flags
Only the cc-wrapper supports this right now, but these may be reused by
other wrappers, builders or setup hooks.
cc-wrapper supports the following flags:
* fortify
* stackprotector
* pie (disabled by default)
* pic
* strictoverflow
* format
* relro
* bindnow
Regression introduced by df2b9b48cb.
This breaks the build for ltrace and other programs using libelf,
because the header file relies on features from glibc >= 2.22.
Here is an excerpt from the log output of the configure script from
ltrace:
In file included from ...elfutils-0.165/include/gelf.h:32:0,
from conftest.c:57:
...elfutils-0.165/include/libelf.h:280:8: error: unknown type name 'Elf32_Chdr'
extern Elf32_Chdr *elf32_getchdr (Elf_Scn *__scn);
^
...elfutils-0.165/include/libelf.h:281:8: error: unknown type name 'Elf64_Chdr'
extern Elf64_Chdr *elf64_getchdr (Elf_Scn *__scn);
^
In file included from conftest.c:57:0:
...elfutils-0.165/include/gelf.h:89:9: error: unknown type name 'Elf64_Chdr'
typedef Elf64_Chdr GElf_Chdr;
^
The issue has been reported in the Debian bug tracker at
https://bugs.debian.org/810885 and I'm using the patch from Mark
Wielaard that has been posted there which adds compatibility for older
glibc versions.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
Also, install programs with the "eu-" prefix to prevent collisions
with binutils (as recommended by upstream), enable xz support, and
enable deterministic archives.