[AUTO-CHERRYPICK] [AUTOPATCHER-CORE] Upgrade libdwarf to 0.9.2 for CVE-2024-2002 [High] - branch 3.0-dev (#13225)

Author: CBL-Mariner-Bot

SPECS/libdwarf/libdwarf.signatures.json

@@ -1,5 +1,5 @@
 {
- "Signatures": {
-  "libdwarf-0.9.0.tar.xz": "d3cad80a337276a7581bb90ebcddbd743484a99a959157c066dd30f7535db59b"
- }
+  "Signatures": {
+    "libdwarf-0.9.2.tar.xz": "22b66d06831a76f6a062126cdcad3fcc58540b89a1acb23c99f8861f50999ec3"
+  }
 }

SPECS/libdwarf/libdwarf.spec

@@ -1,5 +1,5 @@
 Name:          libdwarf
-Version:       0.9.0
+Version:       0.9.2
 Release:       1%{?dist}
 Summary:       Library to access the DWARF Debugging file format
 
@@ -89,6 +89,9 @@ TZ=:America/Los_Angeles %__make check
 
 
 %changelog
+* Fri Mar 28 2025 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 0.9.2-1
+- Auto-upgrade to 0.9.2 - for CVE-2024-2002
+
 * Tue Jan 02 2024 Sindhu Karri <lakarri@microsoft.com> - 0.9.0-1
 - Upgraded to 0.9.0
 - License verified

SPECS/libdwarf/libdwarf_skip_test.patch

@@ -1,12 +1,21 @@
+From 891b29b1a5a6df0b733641a7fc4b985482e506df Mon Sep 17 00:00:00 2001
+From: Kanishk-Bansal <kbkanishk975@gmail.com>
+Date: Fri, 28 Mar 2025 16:11:19 +0000
+Subject: [PATCH] libdwarf_skip_test
+
+---
+ test/Makefile.am | 6 +++---
+ 1 file changed, 3 insertions(+), 3 deletions(-)
+
 diff --git a/test/Makefile.am b/test/Makefile.am
-index 2a2827e..b7c3ed7 100644
+index 437fa2b..65697b5 100644
 --- a/test/Makefile.am
 +++ b/test/Makefile.am
 @@ -272,7 +272,7 @@ if HAVE_DWARFEXAMPLE
    TESTS += test_debuglink-a.sh test_debuglink-b.sh
  endif
  endif
--TESTS += test_dwarfdumpLinux.sh  test_dwarfdumpPE.sh test_dwarfdumpMacos.sh 
+-TESTS += test_dwarfdumpLinux.sh  test_dwarfdumpPE.sh test_dwarfdumpMacos.sh
 +TESTS += test_dwarfdumpLinux.sh
  if HAVE_DWARFEXAMPLE
  TESTS += test_jitreaderdiff.sh
@@ -22,3 +31,6 @@ index 2a2827e..b7c3ed7 100644
  test_dwarfdump.py \
  test_dwarf_leb.c \
  test_dwarf_tied.c \
+-- 
+2.45.2
+

cgmanifest.json

@@ -9231,8 +9231,8 @@
         "type": "other",
         "other": {
           "name": "libdwarf",
-          "version": "0.9.0",
-          "downloadUrl": "https://www.prevanders.net/libdwarf-0.9.0.tar.xz"
+          "version": "0.9.2",
+          "downloadUrl": "https://www.prevanders.net/libdwarf-0.9.2.tar.xz"
         }
       }
     },