gcc-toolset-14-annobin-annocheck-12.52-1.el8 RPM for x86_64

From CentOS 8-stream AppStream for x86_64 / Packages

Installs the annocheck program which uses the notes generated by annobin to
check that the specified files were compiled with the correct security
hardening options.

Provides

• gcc-toolset-14-annobin-annocheck
• gcc-toolset-14-annobin-annocheck(x86-64)
• scl-package(gcc-toolset-14)

Requires

• cpio
• gcc-toolset-14-annobin-docs = 12.52-1.el8
• gcc-toolset-14-runtime
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.14)(64bit)
• libc.so.6(GLIBC_2.17)(64bit)
• libc.so.6(GLIBC_2.2.5)(64bit)
• libc.so.6(GLIBC_2.3)(64bit)
• libc.so.6(GLIBC_2.3.4)(64bit)
• libc.so.6(GLIBC_2.4)(64bit)
• libc.so.6(GLIBC_2.8)(64bit)
• libdw.so.1()(64bit)
• libdw.so.1(ELFUTILS_0.122)(64bit)
• libdw.so.1(ELFUTILS_0.126)(64bit)
• libdw.so.1(ELFUTILS_0.130)(64bit)
• libdw.so.1(ELFUTILS_0.156)(64bit)
• libdw.so.1(ELFUTILS_0.159)(64bit)
• libelf.so.1()(64bit)
• libelf.so.1(ELFUTILS_1.0)(64bit)
• libelf.so.1(ELFUTILS_1.3)(64bit)
• libelf.so.1(ELFUTILS_1.5)(64bit)
• libelf.so.1(ELFUTILS_1.6)(64bit)
• librpm.so.8()(64bit)
• librpmio.so.8()(64bit)
• rpm
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsXz) <= 5.2-1
• rtld(GNU_HASH)

License

GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later

Changelog

* Fri Apr 26 2024 Nick Clifton  <nickc@redhat.com> - 12.52-1
  - Initial import of sources.
  - Compared to GTS-13 annobin (12.32) the improvements are:
  - Annocheck: Add OpenSSL Engine test.  (PTG-319)
  - Annocheck: Test for gaps even when only one note is present.
  - Annocheck: Skip AArch64 branch protection test for GO binaries.
  - GCC Plugin: Disable active check for -Wimplicit-int for non-C sources.  (#2275884)
  - Annocheck: Ignore stack checks for AMD GPU binaries.
  - Annocheck: Do not produce FAIL result for i686 binaries in the RHEL-10 profile.
  - Annocheck: Test for __stack_chk_guard being writeable.
  - Annocheck: Update heuristics for detecting glibc code in executables.  (RHEL-30579)
  - Clang & LLVM Plugins: Allow environment to override fortification level.  (RHEL-30579)
  - Spec File: Override fortification level and set it to 3.
  - Annocheck: Improve detection of -mbranch-protection option.
  - Clang Plugin: Add global-file-syms option.
  - LLVM Plugin: Add global-file-syms option.
  - Plugins: Add support for ANNOBIN environment variable.
  - GCC Plugin: Fix bug extracing the value of target specific command line options.
  - Configure: Remove check for FrontendPluginRegistry.h header as it is stored in a non-standard location on Debian systems.
  - Debuginfod test: Allow for the libdwfl library silently contacting the debuginfod server.
  - LLVM Plugin: Use llvm-config to get the correct paths and options for building executables.
  - Clang Plugin: Likewise.
  - Enable silent rules for most building.
  - Annocheck: Correctly extract DWARF attributes from DT_REL files.
  - Annocheck: Improve heuristics for locating debug info files.  (#2267097)
  - Configure: Harmonize configure options.    
  - Clang Plugin: Fix building with Clang 18.  (#31414)
  - GCC Plugin: Add support for MIPS specific target functions.
  - GCC Plugin: Use .dc.a for address expressions in 64-bit ELF format notes.
  - Spec File: Remove a workaround for ppc64le.
  - Annocheck: Improve heuristic for skipping LTO and FORTIFY tests.  (#2264000)
  - Annocheck: Also skip property note test for i686 binaries. (#2258571)
  - Annocheck: Also skip the entry point test for i686 binaries. (#2258571)
  - GCC Plugin: Do not use section groups with string format notes.
  - Annocheck: Disable cf-protection test for i686 architecture. (#2258571)
  - Spec File: Disable hard gcc check in order to allow builds with new version of gcc.
  - Spec File: Do not install annocheck.1.gz when annocheck is disabled.
  - Annocheck: Improve detection of FIPS compliant GO binaries.
  - GCC Plugin: Fix recording of the -Wimplicit-int and -Wimplicit-function-declaration warnings.  Add active checks for when they are deliberately disabled.
  - Tests: Fix implicit-values test so that it will compile with gcc 14+.

Files

/opt/rh/gcc-toolset-14/root/usr/bin/annocheck
/opt/rh/gcc-toolset-14/root/usr/share/man/man1/annocheck.1.gz
/usr/lib/.build-id
/usr/lib/.build-id/bd
/usr/lib/.build-id/bd/97d3c320ab7e1fde6d9c1f76e9c1e79f146fd8

Generated by rpm2html 1.8.1

Fabrice Bellet, Wed May 29 02:28:23 2024