{"id":"SUSE-SU-2019:2902-1","summary":"Security update for gdb","details":"This update for gdb fixes the following issues:\n\nUpdate to gdb 8.3.1: (jsc#ECO-368)\n\nSecurity issues fixed:\n\n- CVE-2019-1010180: Fixed a potential buffer overflow when loading ELF sections larger than the file. (bsc#1142772)\n\nUpgrade libipt from v2.0 to v2.0.1.\n\n- Enable librpm for version \u003e librpm.so.3 [bsc#1145692]:\n  * Allow any librpm.so.x\n  * Add %build test to check for 'zypper install \u003crpm-packagename\u003e'\n    message\n\n- Copy gdbinit from fedora master @ 25caf28.  Add\n  gdbinit.without-python, and use it for --without=python.\n\nRebase to 8.3 release (as in fedora 30 @ 1e222a3).\n\n* DWARF index cache: GDB can now automatically save indices of DWARF\n  symbols on disk to speed up further loading of the same binaries.\n* Ada task switching is now supported on aarch64-elf targets when\n  debugging a program using the Ravenscar Profile.\n* Terminal styling is now available for the CLI and the TUI.\n* Removed support for old demangling styles arm, edg, gnu, hp and\n  lucid.\n* Support for new native configuration RISC-V GNU/Linux (riscv*-*-linux*).\n\n- Implemented access to more POWER8 registers.  [fate#326120, fate#325178]\n- Handle most of new s390 arch13 instructions. [fate#327369, jsc#ECO-368]\n","modified":"2026-03-11T07:11:43.471262Z","published":"2019-11-06T10:41:34Z","related":["CVE-2019-1010180"],"upstream":["CVE-2019-1010180"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192902-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1115034"},{"type":"REPORT","url":"https://bugzilla.suse.com/1142772"},{"type":"REPORT","url":"https://bugzilla.suse.com/1145692"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-1010180"},{"type":"REPORT","url":"https://bugzilla.suse.com/ECO-368"}],"affected":[{"package":{"name":"gdb","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15","purl":"pkg:rpm/suse/gdb&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.3.1-3.13.1"}]}],"ecosystem_specific":{"binaries":[{"gdbserver":"8.3.1-3.13.1","gdb":"8.3.1-3.13.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2902-1.json"}}],"schema_version":"1.7.5"}