gcc-toolset-14-annobin-annocheck-12.52-1.el9 RPM for s390x

From CentOS Stream 9 AppStream for s390x

Installs the annocheck program which uses the notes generated by annobin to
check that the specified files were compiled with the correct security
hardening options.

Provides

• gcc-toolset-14-annobin-annocheck
• gcc-toolset-14-annobin-annocheck(s390-64)
• scl-package(gcc-toolset-14)

Requires

• cpio
• gcc-toolset-14-annobin-docs = 12.52-1.el9
• gcc-toolset-14-runtime
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.17)(64bit)
• libc.so.6(GLIBC_2.2)(64bit)
• libc.so.6(GLIBC_2.3)(64bit)
• libc.so.6(GLIBC_2.33)(64bit)
• libc.so.6(GLIBC_2.34)(64bit)
• libc.so.6(GLIBC_2.4)(64bit)
• libc.so.6(GLIBC_2.7)(64bit)
• libc.so.6(GLIBC_2.8)(64bit)
• libdw.so.1()(64bit)
• libdw.so.1(ELFUTILS_0.122)(64bit)
• libdw.so.1(ELFUTILS_0.126)(64bit)
• libdw.so.1(ELFUTILS_0.130)(64bit)
• libdw.so.1(ELFUTILS_0.156)(64bit)
• libdw.so.1(ELFUTILS_0.159)(64bit)
• libelf.so.1()(64bit)
• libelf.so.1(ELFUTILS_1.0)(64bit)
• libelf.so.1(ELFUTILS_1.3)(64bit)
• libelf.so.1(ELFUTILS_1.5)(64bit)
• libelf.so.1(ELFUTILS_1.6)(64bit)
• librpm.so.9()(64bit)
• rpm
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1
• rtld(GNU_HASH)

License

GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later

Changelog

* Fri Apr 26 2024 Nick Clifton  <nickc@redhat.com> - 12.52-1
  - Initial import of sources.
  - Compared to GTS-13 annobin (12.32) the improvements are:
  - Annocheck: Add OpenSSL Engine test.  (PTG-319)
  - Annocheck: Test for gaps even when only one note is present.
  - Annocheck: Skip AArch64 branch protection test for GO binaries.
  - GCC Plugin: Disable active check for -Wimplicit-int for non-C sources.  (#2275884)
  - Annocheck: Ignore stack checks for AMD GPU binaries.
  - Annocheck: Do not produce FAIL result for i686 binaries in the RHEL-10 profile.
  - Annocheck: Test for __stack_chk_guard being writeable.
  - Annocheck: Update heuristics for detecting glibc code in executables.  (RHEL-30579)
  - Clang & LLVM Plugins: Allow environment to override fortification level.  (RHEL-30579)
  - Spec File: Override fortification level and set it to 3.
  - Annocheck: Improve detection of -mbranch-protection option.
  - Clang Plugin: Add global-file-syms option.
  - LLVM Plugin: Add global-file-syms option.
  - Plugins: Add support for ANNOBIN environment variable.
  - GCC Plugin: Fix bug extracing the value of target specific command line options.
  - Configure: Remove check for FrontendPluginRegistry.h header as it is stored in a non-standard location on Debian systems.
  - Debuginfod test: Allow for the libdwfl library silently contacting the debuginfod server.
  - LLVM Plugin: Use llvm-config to get the correct paths and options for building executables.
  - Clang Plugin: Likewise.
  - Enable silent rules for most building.
  - Annocheck: Correctly extract DWARF attributes from DT_REL files.
  - Annocheck: Improve heuristics for locating debug info files.  (#2267097)
  - Configure: Harmonize configure options.    
  - Clang Plugin: Fix building with Clang 18.  (#31414)
  - GCC Plugin: Add support for MIPS specific target functions.
  - GCC Plugin: Use .dc.a for address expressions in 64-bit ELF format notes.
  - Spec File: Remove a workaround for ppc64le.
  - Annocheck: Improve heuristic for skipping LTO and FORTIFY tests.  (#2264000)
  - Annocheck: Also skip property note test for i686 binaries. (#2258571)
  - Annocheck: Also skip the entry point test for i686 binaries. (#2258571)
  - GCC Plugin: Do not use section groups with string format notes.
  - Annocheck: Disable cf-protection test for i686 architecture. (#2258571)
  - Spec File: Disable hard gcc check in order to allow builds with new version of gcc.
  - Spec File: Do not install annocheck.1.gz when annocheck is disabled.
  - Annocheck: Improve detection of FIPS compliant GO binaries.
  - GCC Plugin: Fix recording of the -Wimplicit-int and -Wimplicit-function-declaration warnings.  Add active checks for when they are deliberately disabled.
  - Tests: Fix implicit-values test so that it will compile with gcc 14+.

Files

/opt/rh/gcc-toolset-14/root/usr/bin/annocheck
/opt/rh/gcc-toolset-14/root/usr/share/man/man1/annocheck.1.gz
/usr/lib/.build-id
/usr/lib/.build-id/96
/usr/lib/.build-id/96/7ee0d091c36bd8100011449bbc9e22468db160

Generated by rpm2html 1.8.1

Fabrice Bellet, Wed Nov 13 07:29:07 2024