annobin-annocheck-12.72-1.el10 RPM for s390x

From CentOS Stream 10 AppStream for s390x

Installs the annocheck program which uses the notes generated by annobin to
check that the specified files were compiled with the correct security
hardening options.

Provides

• annobin-annocheck
• annobin-annocheck(s390-64)

Requires

• annobin-docs = 12.72-1.el10
• cpio
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.17)(64bit)
• libc.so.6(GLIBC_2.2)(64bit)
• libc.so.6(GLIBC_2.3)(64bit)
• libc.so.6(GLIBC_2.3.4)(64bit)
• libc.so.6(GLIBC_2.33)(64bit)
• libc.so.6(GLIBC_2.34)(64bit)
• libc.so.6(GLIBC_2.38)(64bit)
• libc.so.6(GLIBC_2.4)(64bit)
• libc.so.6(GLIBC_2.8)(64bit)
• libdw.so.1()(64bit)
• libdw.so.1(ELFUTILS_0.122)(64bit)
• libdw.so.1(ELFUTILS_0.126)(64bit)
• libdw.so.1(ELFUTILS_0.130)(64bit)
• libdw.so.1(ELFUTILS_0.156)(64bit)
• libdw.so.1(ELFUTILS_0.159)(64bit)
• libelf.so.1()(64bit)
• libelf.so.1(ELFUTILS_1.0)(64bit)
• libelf.so.1(ELFUTILS_1.3)(64bit)
• libelf.so.1(ELFUTILS_1.5)(64bit)
• libelf.so.1(ELFUTILS_1.6)(64bit)
• librpm.so.10()(64bit)
• rpm
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1
• rtld(GNU_HASH)

License

GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later

Changelog

* Fri Nov 01 2024 Nick Clifton  <nickc@redhat.com> - 12.72-1
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.
  - Clang & LLVM Plugins: Include install directory in binary.  (RHEL-54069)
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Annocheck: Stop spurious assembler warnings.  (RHEL-53213)
  - Annocheck: Stop warnings about known gaps.    (RHEL-53218)
  - Annocheck: Fix stack realign test.  (#2302427)
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3.
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
* Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 12.55-3
  - Bump release for October 2024 mass rebuild:
    Resolves: RHEL-64018
* Mon Jun 24 2024 Troy Dawson <tdawson@redhat.com> - 12.55-2
  - Bump release for June 2024 mass rebuild
* Mon May 20 2024 Nick Clifton  <nickc@redhat.com> - 12.55-1
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
* Mon May 20 2024 Nick Clifton  <nickc@redhat.com> - 12.54-1
  - Spec File: Add annobin plugin document directory to the files section.  (#2279779)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239) (RHEL-37267)
* Thu May 09 2024 Nick Clifton  <nickc@redhat.com> - 12.53-1
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)
* Tue May 07 2024 Nick Clifton  <nickc@redhat.com> - 12.52-2
  - NVR Bump to allow rebuilding against LLVM-18.  (RHEL-27727)
* Thu Apr 25 2024 Nick Clifton  <nickc@redhat.com> - 12.52-1
  - Annocheck: Add OpenSSL Engine test.  (PTG-319)
  - Annocheck: Test for gaps even when only one note is present.
  - Annocheck: Skip AArch64 branch protection test for GO binaries.
  - GCC Plugin: Disable active check for -Wimplicit-int for non-C sources.  (#2275884)
  - Annocheck: Ignore stack checks for AMD GPU binaries.
  - Annocheck: Do not produce FAIL result for i686 binaries in the RHEL-10 profile.
  - Annocheck: Test for __stack_chk_guard being writeable.
* Tue Apr 02 2024 Nick Clifton  <nickc@redhat.com> - 12.48-1
  - Annocheck: Update heuristics for detecting glibc code in executables.  (RHEL-30579)
* Wed Mar 27 2024 Nick Clifton  <nickc@redhat.com> - 12.47-1
  - Clang & LLVM Plugins: Allow environment to override fortification level.  (RHEL-30579)
  - Spec File: Override fortification level and set it to 3.
* Mon Mar 25 2024 Tulio Magno Quites Machado Filho  <tuliom@redhat.com> - 12.46-1
  - Annocheck: Improve detection of -mbranch-protection option.  (RHEL-526)
  - Clang Plugin: Add global-file-syms option.
  - LLVM Plugin: Add global-file-syms option.
  - Plugins: Add support for ANNOBIN environment variable.
  - Built By: Add more lang types.
* Thu Mar 21 2024 Nick Clifton  <nickc@redhat.com> - 12.45-1
  - GCC Plugin: Fix bug extracing the value of target specific command line options.  (RHEL-526)
* Wed Mar 20 2024 Nick Clifron  <nickc@redhat.com> - 12.44-2
  - Spec File: Enable AArch64 BTI testing for all binaries.  (RHEL-526)
* Mon Mar 18 2024 Nick Clifron  <nickc@redhat.com> - 12.44-1
  - Clang Plugin: Fix building with Clang 18.  (RHEL-27727)
  - Configure: Remove check for FrontendPluginRegistry.h header as it is stored in a non-standard location on Debian systems.
  - Debuginfod test: Allow for the libdwfl library silently contacting the debuginfod server.
  - LLVM Plugin: Use llvm-config to get the correct paths and options for building executables.
  - Clang Plugin: Likewise.
  - Enable silent rules for most building.
  - Annocheck: Correctly extract DWARF attributes from DT_REL files.
  - Annocheck: Improve heuristics for locating debug info files.  (#2267097)
  - Configure: Harmonize configure options.    
  - GCC Plugin: Add support for MIPS specific target functions.
  - GCC Plugin: Use .dc.a for address expressions in 64-bit ELF format notes.
  - Spec File: Remove a workaround for ppc64le.
* Tue Feb 13 2024 Nick Clifron  <nickc@redhat.com> - 12.40-1
  - Annocheck: Improve heuristic for skipping LTO and FORTIFY tests.  (#2264000)
* Fri Feb 09 2024 Nick Clifron  <nickc@redhat.com> - 12.39-1
  - Annocheck: Also skip property note test for i686 binaries. (#2258571)
* Tue Jan 23 2024 Nick Clifron  <nickc@redhat.com> - 12.38-1
  - Annocheck: Also skip the entry point test for i686 binaries. (#2258571)
* Mon Jan 22 2024 Fedora Release Engineering <releng@fedoraproject.org> - 12.37-3
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Fedora Release Engineering <releng@fedoraproject.org> - 12.37-2
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Wed Jan 17 2024 Nick Clifron  <nickc@redhat.com> - 12.37-1
  - GCC Plugin: DO not use section groups with string format notes.
* Tue Jan 16 2024 Nick Clifron  <nickc@redhat.com> - 12.36-2
  - Spec File: NVR bump in order to allow building in side tag.
* Tue Jan 16 2024 Nick Clifron  <nickc@redhat.com> - 12.36-1
  - Annocheck: Disable cf-protection test for i686 architecture. (#2258571)
* Mon Jan 15 2024 Nick Clifron  <nickc@redhat.com> - 12.35-4
  - Spec File: NVR bump in order to allow building in side tag.
* Mon Jan 15 2024 Nick Clifron  <nickc@redhat.com> - 12.35-3
  - Spec File: Disable hard gcc check in order to allow builds with new version of gcc.
* Thu Jan 11 2024 Songsong Zhang  <U2FsdGVkX1@gmail.com> - 12.35-2
  - Spec File: Do not install annocheck.1.gz when annocheck is disabled.
* Thu Jan 04 2024 Nick Clifron  <nickc@redhat.com> - 12.35-1
  - Annocheck: Improve detection of FIPS compliant GO binaries.
* Fri Dec 15 2023 Nick Clifron  <nickc@redhat.com> - 12.34-1
  - GCC Plugin: Fix recording of the -Wimplicit-int and -Wimplicit-function-declaration warnings.  Add active checks for when they are deliberately disabled.
* Mon Dec 11 2023 Nick Clifron  <nickc@redhat.com> - 12.33-1
  - Tests: Fix implicit-values test so that it will compile with gcc 14+.
* Fri Nov 24 2023 Nick Clifron  <nickc@redhat.com> - 12.32-1
  - GCC Plugin: Add support for -fhardended.
* Wed Nov 15 2023 Nick Clifron  <nickc@redhat.com> - 12.31-1
  - Update glibc detection heuristics for PPC64.  (RHEL-16453)
* Wed Nov 01 2023 Nick Clifron  <nickc@redhat.com> - 12.30-1
  - Fix another atexit test failure.  (#2247481)
* Mon Oct 30 2023 Nick Clifron  <nickc@redhat.com> - 12.29-1
  - Fix atexit test failure.
  - Notes: Add support for string format notes.
* Fri Oct 06 2023 Nick Clifron  <nickc@redhat.com> - 12.28-1
  - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
  - Annobin: Add future test of these options.
* Tue Sep 26 2023 Nick Clifron  <nickc@redhat.com> - 12.27-1
  - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
  - Annobin: Add test for these warnings.
* Wed Sep 06 2023 Nick Clifron  <nickc@redhat.com> - 12.26-1
  - LLVM Plugin: Fix building with LLVM version 17.
* Wed Aug 30 2023 Nick Clifron  <nickc@redhat.com> - 12.25-1
  - GCC Plugin: Enable string note format by default.
* Fri Aug 04 2023 Nick Clifron  <nickc@redhat.com> - 12.24-1
  - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
* Mon Jul 31 2023 Nick Clifron  <nickc@redhat.com> - 12.23-1
  - Annocheck: Add test for FIPS compliant GO binaries.
* Wed Jul 26 2023 Nick Clifron  <nickc@redhat.com> - 12.22-1
  - Annocheck: Fix double free.  (#2226749)
* Wed Jul 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 12.21-2
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Tue Jul 18 2023 Nick Clifton  <nickc@redhat.com> - 12.21-1
  - Spec File: migrated to SPDX license.  (#2222112)
* Mon Jul 17 2023 Nick Clifton  <nickc@redhat.com> - 12.20-2
  - Spec File: Change License field to use SPDX notation.  (#2222112)
* Mon Jul 17 2023 Nick Clifton  <nickc@redhat.com> - 12.20-1
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
* Wed Jul 05 2023 Nick Clifton  <nickc@redhat.com> - 12.19-1
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.
* Thu Jun 29 2023 Nick Clifton  <nickc@redhat.com> - 12.18-1
  - Annocheck: Remove dependency upon binutils-devel.
* Thu Jun 29 2023 Nick Clifton  <nickc@redhat.com> - 12.17-1
  - Annocheck: Add detection of known parts of libstdc++-nonshared.a that contain gaps.  (#2217864)
* Tue Jun 27 2023 Nick Clifton  <nickc@redhat.com> - 12.16-1
  - Annocheck: Ignore weak/undef function symbols when checking to see if a binary contains code.  (#2217840)
* Mon Jun 26 2023 Nick Clifton  <nickc@redhat.com> - 12.15-1
  - Annocheck: Add --suppress-version-warnings option.
* Thu Jun 22 2023 Nick Clifton  <nickc@redhat.com> - 12.14-1
  - Annocheck: Do not ignore separate debuginfo files that do not contain any DWARF.  (#2144553)
* Tue Jun 20 2023 Nick Clifton  <nickc@redhat.com> - 12.13-1
  - Annocheck: Ignore /dev/null filename in string notes.
  - Annocheck: More tweaks to glibc detection heuristics.  (#2215968)
* Thu Jun 01 2023 Nick Clifton  <nickc@redhat.com> - 12.12-1
  - Annocheck: Check for string notes in separate debug info files.  (#2211694)
* Fri May 26 2023 Petr Pisar <ppisar@redhat.com> - 12.11-1
  - Annocheck: Add support for el10 and rhel-10 profiles.  (RHEL-526)
* Mon May 22 2023 Petr Pisar <ppisar@redhat.com> - 12.10-3
  - Rebuild against rpm-4.19 (https://fedoraproject.org/wiki/Changes/RPM-4.19)
* Fri May 05 2023 Nick Clifton  <nickc@redhat.com> - 12.10-2
  - GCC Plugin: Default to generating string format notes.  (Experimental)
* Fri Apr 28 2023 Nick Clifton  <nickc@redhat.com> - 12.10-1
  - Annocheck: Suppress more tests for Rust binaries.
* Tue Apr 25 2023 Nick Clifton  <nickc@redhat.com> - 12.09-1
  - Annocheck: Fix detection of missing plugin options.  (#2189492)
* Tue Apr 25 2023 Nick Clifton  <nickc@redhat.com> - 12.08-1
  - Fix generation of auto-generated files.
  - Fix covscan reported errors.
* Fri Apr 21 2023 Nick Clifton  <nickc@redhat.com> - 12.07-1
  - gcc-plugin: generate warnings about misspelt -D_FORTIFY_SOURCE and/or -D_GLIBCXX_ASSERTIONS options.
* Thu Apr 20 2023 Nick Clifton  <nickc@redhat.com> - 12.06-1
  - gcc-plugin: use a bigger buffer for constructing notes.
* Wed Apr 19 2023 Nick Clifton  <nickc@redhat.com> - 12.05-1
  - llvm-plugin: Fix detection of optimization level.  Improve test.
  - clang-plugin: Improve test.
* Mon Apr 17 2023 Nick Clifton  <nickc@redhat.com> - 12.04-1
  - configure: More improvements.
  - annocheck: Fix seg-fault when checking for glibc components in string format notes.
* Thu Apr 13 2023 Nick Clifton  <nickc@redhat.com> - 12.03-1
  - configure: Simplify.
* Tue Apr 11 2023 Nick Clifton  <nickc@redhat.com> - 12.02-1
  - gcc plugin: Add filenames to string notes.  Allow use of ANNOBIN environment variable.
  - llvm plugin: Add workaround for building with LLVM-16.
  - clang plugin: Fix for building with Clang-16.
* Thu Mar 30 2023 Nick Clifton  <nickc@redhat.com> - 12.01-1
  - gcc plugin: Keep ELF notes at protocol version 3.
* Tue Mar 28 2023 Nick Clifton  <nickc@redhat.com> - 12.00-1
  - Protocol Version 4: String format notes.
* Mon Mar 13 2023 Nick Clifton  <nickc@redhat.com> - 11.14-1
  - Annocheck: Update message for LTO tests.  (#2177140)
* Wed Mar 08 2023 Nick Clifton  <nickc@redhat.com> - 11.13-1
  - Annocheck: Add even more code to handle another glibc function built without LTO.
* Fri Mar 03 2023 Nick Clifton  <nickc@redhat.com> - 11.12-1
  - Annocheck: Add code to handle another glibc function built without LTO.
* Tue Feb 28 2023 Nick Clifton  <nickc@redhat.com> - 11.11-1
  - GCC Plugin: Do not run if other plugins are active.  (#2162746)
* Thu Feb 23 2023 Nick Clifton  <nickc@redhat.com> - 11.10-1
  - Annocheck: Add code to handle glibc functions built without LTO.
* Thu Feb 02 2023 Nick Clifton  <nickc@redhat.com> - 11.09-1
  - Libannocheck: Fix thinko in debugging code.
  - Annocheck: Fix LTO test.
  - Notes: Display notes held in separate dbeuginfo files.
* Tue Jan 31 2023 Nick Clifton  <nickc@redhat.com> - 11.08-1
  - Annocheck: Fix atexit test.  Fix recording of version numbers.  (#2165528)
* Wed Jan 25 2023 Nick Clifton  <nickc@redhat.com> - 11.07-2
  - LLVM & Clang Plugins: Build with branch protection on AArch64.  (#2164364)
  - Fix gating tests.
* Fri Jan 20 2023 Nick Clifton  <nickc@redhat.com> - 11.07-1
  - Libannocheck: Fix bug causing infinite looping when running tests.
* Wed Jan 18 2023 Fedora Release Engineering <releng@fedoraproject.org> - 11.06-3
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Mon Jan 16 2023 Jakub Jelinek  <jakub@redhat.com> - 11.06-2
  - Rebuilt against GCC 13.
* Fri Jan 13 2023 Nick Clifton  <nickc@redhat.com> - 11.06-1
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
* Mon Jan 09 2023 Nick Clifton  <nickc@redhat.com> - 11.05-1
  - Annocheck: Fix handling of empty files.  (#2159292)
* Fri Jan 06 2023 Nick Clifton  <nickc@redhat.com> - 11.04-1
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
* Fri Jan 06 2023 Nick Clifton  <nickc@redhat.com> - 11.03-1
  - Annocheck: Fix memory leaks.
* Wed Jan 04 2023 Nick Clifton  <nickc@redhat.com> - 11.02-1
  - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158182)
* Wed Jan 04 2023 Nick Clifton  <nickc@redhat.com> - 11.01-1
  - Annocheck: Add more special glibc filenames.  (#2158100)
* Wed Dec 21 2022 Nick Clifton  <nickc@redhat.com> - 10.99-1
  - Annocheck: Improve handling of tool versions.
* Tue Dec 20 2022 Nick Clifton  <nickc@redhat.com> - 10.98-3
  - Spec File: Fix building with plugin_rebuild enabled.
* Fri Dec 16 2022 Nick Clifton  <nickc@redhat.com> - 10.98-1
  - GCC plugin: Fix building with gcc-13.
* Fri Dec 16 2022 Nick Clifton  <nickc@redhat.com> - 10.97-1
  - Annocheck: Add test for binaries built by cross compilers.
* Thu Dec 15 2022 Nick Clifton  <nickc@redhat.com> - 10.96-1
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)
* Mon Dec 12 2022 Nick Clifton  <nickc@redhat.com> - 10.95-1
  - Annocheck: Avoid using debug filename when parsing notes in a debuginfo file.  (#2152280)
* Wed Nov 30 2022 Nick Clifton  <nickc@redhat.com> - 10.94-1
  - Annocheck: Better detection of binaries which do not contain code.  (#2144533)
* Wed Nov 23 2022 Nick Clifton  <nickc@redhat.com> - 10.93-1
  - Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.
* Mon Nov 07 2022 Nick Clifton  <nickc@redhat.com> - 10.92-1
  - Annocheck: Try harder not to run mutually exclusive tests.

Files

/usr/bin/annocheck
/usr/lib/.build-id
/usr/lib/.build-id/54
/usr/lib/.build-id/54/ecd5a81b4347c4a1f794e418f90d2ab30b265a
/usr/share/man/man1/annocheck.1.gz

Generated by rpm2html 1.8.1

Fabrice Bellet, Fri Nov 15 08:36:54 2024