Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

annobin-annocheck-12.12-1.el9 RPM for ppc64le

From CentOS Stream 9 AppStream for ppc64le

Name: annobin-annocheck Distribution: CentOS
Version: 12.12 Vendor: CentOS
Release: 1.el9 Build date: Wed Jun 14 12:33:09 2023
Group: Unspecified Build host: ppc64le-02.stream.rdu2.redhat.com
Size: 758190 Source RPM: annobin-12.12-1.el9.src.rpm
Packager: builder@centos.org
Summary: A tool for checking the security hardening status of binaries
Installs the annocheck program which uses the notes generated by annobin to
check that the specified files were compiled with the correct security
hardening options.

Provides

Requires

License

GPLv3+

Changelog

* Wed Jun 14 2023 Nick Clifton  <nickc@redhat.com> - 12.12-1
  - Rebuild against LLVM-16.  (#2212739)
  - Annocheck: Check for string notes in separate debug info files.  (#2211694)
  - Annocheck: Add support for el10 and rhel-10 profiles.  (RHEL-526)
  - Annocheck: Suppress more tests for Rust binaries.
* Wed Apr 26 2023 Nick Clifton  <nickc@redhat.com> - 12.09-1
  - Annocheck: Fix detection of missing plugin options.  (#2189492)
  - Fix generation of auto-generated files.
  - Fix covscan reported errors.
* Mon Apr 24 2023 Nick Clifton  <nickc@redhat.com> - 12.07-1
  - Annocheck: Fix lto testing.  (#2177140)
  - gcc-plugin: generate warnings about misspelt -D_FORTIFY_SOURCE and/or -D_GLIBCXX_ASSERTIONS options.
  - gcc-plugin: use a bigger buffer for constructing notes.
  - llvm-plugin: Fix detection of optimization level.  Improve test.
  - clang-plugin: Improve test.
  - configure: More improvements.
  - annocheck: Fix seg-fault when checking for glibc components in string format notes.
  - configure: Simplify.
  - gcc plugin: Add filenames to string notes.  Allow use of ANNOBIN environment variable.
  - llvm plugin: Add workaround for building with LLVM-16.
  - clang plugin: Fix for building with Clang-16.
  - gcc plugin: Keep ELF notes at protocol version 3.
  - Protocol Version 4: String format notes.
  - Annocheck: Update message for LTO tests.  (#2177140)
* Thu Mar 09 2023 Nick Clifton  <nickc@redhat.com> - 11.13-1
  - Annocheck: Add more code to handle another glibc function built without LTO.
* Mon Mar 06 2023 Nick Clifton  <nickc@redhat.com> - 11.12-1
  - Annocheck: Add code to handle another glibc function built without LTO.
  - GCC Plugin: Do not run if other plugins are active.  (#2175768)
  - Annocheck: Add code to handle glibc functions built without LTO.
  - Libannocheck: Fix thinko in debugging code.
  - Annocheck: Fix LTO test.
  - Notes: Display notes held in separate dbeuginfo files.
  - Annocheck: Fix atexit test.  Fix recording of version numbers.  (#2165528)
  - LLVM & Clang Plugins: Build with branch protection on AArch64.  (#2164364)
  - Libannocheck: Fix bug causing infinite looping when running tests.
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
* Mon Jan 09 2023 Nick Clifton  <nickc@redhat.com> - 11.05-1
  - Annocheck: Fix handling of empty files.  (#2159292)
* Mon Jan 09 2023 Nick Clifton  <nickc@redhat.com> - 11.04-1
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.
* Thu Jan 05 2023 Nick Clifton  <nickc@redhat.com> - 11.02-1
  - Annocheck: Do not treat object files as if they did not contain any code.  (#2158182)
* Wed Jan 04 2023 Nick Clifton  <nickc@redhat.com> - 11.01-1
  - Annocheck: Add more special glibc filenames.
* Wed Dec 21 2022 Nick Clifton  <nickc@redhat.com> - 10.99-1
  - Annocheck: Improve handling of tool versions.
  - GCC plugin: Fix building with gcc-13.
* Fri Dec 16 2022 Nick Clifton  <nickc@redhat.com> - 10.97-1
  - Annocheck: Add test for binaries built by cross compilers.
* Wed Dec 14 2022 Nick Clifton  <nickc@redhat.com> - 10.96-1
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)
* Mon Dec 12 2022 Nick Clifton  <nickc@redhat.com> - 10.95-1
  - Annocheck: Avoid using debug filename when parsing notes in a debuginfo file.  (#2152280)
* Wed Dec 07 2022 Nick Clifton  <nickc@redhat.com> - 10.94-1
  - Rebase to 10.94.  (#2151308)
  - Annocheck: Better detection of binaries which do not contain code.  (#2144533)
  - Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.
  - Annocheck: Try harder not to run mutually exclusive tests.
  - Tests: Fix future-test so that it properly handles the situation where the compiler does not support the new options.
  - Libannocheck: Actually set result fields after tests are run.
  - Libannocheck: Replace libannocheck_version variable with LIBANNOCHECK_VERSION define.
  - Libannocheck: Remove 'Requires binutils-devel' from libannocheck.pc.
  - Libannocheck: Move into separate sub-package.
  - Libannocheck: Add libannocheck.pc pkgconfig file.
  - Libannocheck: Add libannocheck_reinit().
  - GCC Plugin: Record -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Annocheck: Add future tests for  -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Clang Plugin: Fix for building with Clang-15.  (#2125875)
  - Annocheck: Add a test for the inconsistent use of -Ofast.  (#1248744)
  - GCC Plugin: Fix top level configuration support for RiscV.
  - Annocheck: Improvements to the size tool.
  - Annocheck: Fixes for libannocheck.h.
  - Annocheck: Add automatic profile selection.
  - Annocheck: Improve gap detection and reporting.
  - Annocheck: Check build-id of separate debuginfo files.
  - Annocheck: Add GAPS test replacing --ignore-gaps.
  - Annocheck: Fix covscan detected race condition between stat() and open().
  - Annocheck: Handle binaries created by Rust 1.18.  (#2094420)
  - Annocheck: Add optional function name to --skip arguments.  (PR 29229)
* Wed Jul 20 2022 Florian Weimer <fweimer@redhat.com> - 10.73-3
  - Rebuild to switch back to system annobin (#2106262)
* Tue May 17 2022 Nick Clifton  <nickc@redhat.com> - 10.73-1
  - Annocheck: Fix handling of command line options that take arguments.  (#2086850)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries.  (#2078909)
* Fri May 13 2022 Nick Clifton  <nickc@redhat.com> - 10.71-1
  - llvm-plugin: Rebuild against LLVM 14.  (#2061050)
  - gcc-plugin: Fix typo in configure.ac
* Mon May 09 2022 Nick Clifton  <nickc@redhat.com> - 10.70-1
  - Annocheck: Add another special case for glibc rpms.  (#2083070)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries if compiled using LTO.  (#2082146)
* Fri May 06 2022 Nick Clifton  <nickc@redhat.com> - 10.68-1
  - Annocheck: Add more glibc exceptions + check PT_TLS segments.  (#2081131)
  - Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled by golang.
  - Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled in LTO mode.
  - gcc-plugin: Add support for CLVC_INTEGER options.
  - Annocheck: Even more special cases for AArch64 glibc on RHEL-8.  (#2072082)
  - Annocheck: Add more special cases for AArch64 glibc on RHEL-8.  (#2072082)
  - llvm-plugin: Fix a thinko in the sources.
  - gcc-plugin: Add remap of OPT_Wall.
  - configure: Fix typo in top level configure.ac.
  - Add support for building using meson+ninja.
  - Annocheck: Fix test for AArch64 property notes.  (#2068657)
* Mon Mar 14 2022 Nick Clifton  <nickc@redhat.com> - 10.58-1
  - gcc-plugin: Do not issue warning messages for autoconf generated source files.  (#2009958)
* Mon Mar 07 2022 Nick Clifton  <nickc@redhat.com> - 10.57-1
  - Rebuild to work with LLVM14.  (#2061050)
  - Annocheck: Update documentation and fix typo in annocheck.  (#2061291)
  - Annocheck: Add option to enable/disable following symbolic links.
  - Always identify Rust binaries, even if built on a host that does not know about Rust.  (#2057737)
* Tue Feb 15 2022 Nick Clifton  <nickc@redhat.com> - 10.54-2
  - Spec File: Use a different method to disable the annobin plugin  (#2054571)
* Mon Feb 14 2022 Nick Clifton  <nickc@redhat.com> - 10.54-1
  - Annocheck: Accept static GO binaries.  (#2053606)
* Fri Feb 11 2022 Nick Clifton  <nickc@redhat.com> - 10.53-2
  - NVR bump to allow rebuilding against latest gcc.  (#2053507)
* Fri Jan 28 2022 Nick Clifton  <nickc@redhat.com> - 10.53-1
  - gcc-plugin: Fix libtool so that extraneous runpaths are not added to the plugin.  (#2047356)
  - gcc-plugin: Use canonical_option field of save_decoded_options array. (#2047148)
* Tue Jan 25 2022 Nick Clifton  <nickc@redhat.com> - 10.51-1
  - Annocheck: Add an option to disable the use of debuginfod (if available).
  - Annocheck: Add more glibc special file names.
  - Annocheck: Skip some tests for BPF binaries.  (#2044897)
* Mon Jan 24 2022 Nick Clifton  <nickc@redhat.com> - 10.50-1
  - Annocheck: Skip property note test for GO binaries.  (#204300)
  - Annocheck: Add another glibc static library symbol.  (#2043047)
  - Spec File: Use gcc --print-file-name=rpmver for the gcc version info.
* Mon Jan 17 2022 Nick Clifton  <nickc@redhat.com> - 10.48-1
  - GCC Plugin: Do not fail if a section cannot be attached to a group.
* Wed Jan 12 2022 Nick Clifton  <nickc@redhat.com> - 10.47-1
  - Annocheck: Improve detection of kernel modules.
  - GCC Plugin: Only default to link-once when using gcc-12 or later.  (#2039297)
* Wed Jan 12 2022 Nick Clifton  <nickc@redhat.com> - 10.46-1
  - Annocheck: Add option to disable instrumentation test.
  - GCC Plugin: Fix building with gcc-12.
  - Spec file: Add requirement on cpio for annocheck.  (#2039747)
* Fri Jan 07 2022 Nick Clifton  <nickc@redhat.com> - 10.44-1
  - Annocheck: Add even more glibc function names. (#2037333)
  - Annocheck: ARM: Do not fail tests that rely upon annobin notes.
* Thu Jan 06 2022 Nick Clifton  <nickc@redhat.com> - 10.42-1
  - Annocheck: Extend list of known glibc functions.  (#2037333)
* Wed Jan 05 2022 Nick Clifton  <nickc@redhat.com> - 10.41-1
  - Annocheck: Ignore gaps that contain the _start symbol (for AArch64).  (#1995224)
  - Annocheck: Ignore more glibc special binaries.  (#2037220)
* Tue Jan 04 2022 Nick Clifton  <nickc@redhat.com> - 10.40-1
  - Annocheck: Do not complaining about missing stack clash notes if the compilation used LTO.  (#2034946)
* Mon Dec 20 2021 Nick Clifton  <nickc@redhat.com> - 10.39-1
  - Annocheck: Add /usr/lib/ld-linux-aarch64.so.1 to the list of known glibc binaries.  (#2033255)
  - Doc: Note that ENDBR is only needed as the landing pad for indirect branches/calls.  (#28705)
  - Spec File: Store full	gcc version release string in plugin info file.  (#2030671)
  - Annocheck: Add special case for x86_64 RHEL-7 gaps.  (#2031133)
* Tue Dec 14 2021 Nick Clifton  <nickc@redhat.com> - 10.37-1
  - Annocheck: Do not complaining about missing -mstackrealign notes in LTO mode.  (#2030298)
  - GCC Plugin: Do not record missing -mstackrealign in LTO mode.
* Mon Dec 13 2021 Nick Clifton  <nickc@redhat.com> - 10.34-1
  - Tests: Fix gaps and stat tests to use newly built annobin plugin.  (#2028063)
* Mon Dec 06 2021 Nick Clifton  <nickc@redhat.com> - 10.33-1
  - NVR bump to allow rebuilding against new GCC.  (#2028063)
* Mon Dec 06 2021 Nick Clifton  <nickc@redhat.com> - 10.32-1
  - Annocheck: Ignore gaps in binaries at least partial built by golang.  (#2028583)
* Fri Dec 03 2021 Nick Clifton  <nickc@redhat.com> - 10.31-1
  - Annocheck: Allow spaces in gloang symbols.  (#2028583)
* Wed Dec 01 2021 Nick Clifton  <nickc@redhat.com> - 10.30-1
  - Annocheck: Initial deployment of libannocheck.  (#2028063)
* Thu Nov 25 2021 Nick Clifton  <nickc@redhat.com> - 10.29-1
  - gcc-plugin: Fix bug creating empty attachments.
  - Annocheck: Change MAYB result to SKIP for DT_RPATH.  (#2026300)
  - Annocheck: Skip missing fortify/warning notes for ARM32.
* Thu Nov 18 2021 Nick Clifton  <nickc@redhat.com> - 10.26-1
  - gcc-plugin: Another attempt at fixing ppc64le section grouping.  (#2016458)
* Tue Nov 16 2021 Nick Clifton  <nickc@redhat.com> - 10.25-1
  - gcc-plugin: Revert 10.22 change.  (#2023437)
  - Annocheck: Add exception for /usr/sbin/ldconfig.  (#2022973)
* Mon Nov 08 2021 Nick Clifton  <nickc@redhat.com> - 10.23-1
  - Annocheck: Add a test for unicode characters in identifiers.  (#2009287)
* Wed Oct 27 2021 Nick Clifton  <nickc@redhat.com> - 10.22-1
  - gcc-plugin: Default to link-order grouping for PPC64LE.  (#2016458)
  - Annocheck: Do not fail if a --skip-<name> option does not match a known test.
  - ldconfig-test: Skip the LTO check.
* Tue Oct 26 2021 Nick Clifton  <nickc@redhat.com> - 10.20-1
  - annocheck: Add more glibc functions.
  - gcc-plugin: Attach the .text section to the .text.group.  (#2016458)
* Tue Oct 19 2021 Nick Clifton  <nickc@redhat.com> - 10.17-1
  - Better reporting of problems in object files.  (#2013708)
* Mon Oct 18 2021 Nick Clifton  <nickc@redhat.com> - 10.16-1
  - Fix -mstackrealign test for non-GCC compiled files.  (#2013658)
* Thu Oct 14 2021 Nick Clifton  <nickc@redhat.com> - 10.15-2
  - Re-enable use of annobin plugin when building annobin.  (#2013658)
  - Exclude man pages for uninstalled scripts.  (#2013562)
* Wed Oct 13 2021 Nick Clifton  <nickc@redhat.com> - 10.15-1
  - Annocheck: Add tests based upon recent bug fixes.
  - Annocheck: Another tweak to glibc detection code.
* Fri Oct 08 2021 Nick Clifton  <nickc@redhat.com> - 10.13-1
  - Annocheck: Fix memory corruptions when using --debug-path and when a corrupt note is found.  (#20011438)
  - Annocheck: Fix MAYB results for mixed GO/C files.
  - Annocheck: Move some messages from VERBOSE to VERBOSE2.
  - Annocheck: Scan zero-length tool notes.
* Wed Oct 06 2021 Nick Clifton  <nickc@redhat.com> - 10.11-1
  - Annocheck: Fix covscan detected flaws.
  - plugins: Add more required build options.  (#2011163)
* Tue Oct 05 2021 Nick Clifton  <nickc@redhat.com> - 10.10-1
  - Annocheck: Fix cf-prot test to fail if the CET notes are missing.  (#2010671)
  - Annocheck: Skip gaps in the .plt section.  (#2010675)
  - Plugins: Add -g option when building LLVM and Clang. (#2010675)
* Mon Oct 04 2021 Nick Clifton  <nickc@redhat.com> - 10.09-1
  - Annocheck: Add more cases of glibc startup functions.  (#1981410)
  - Annocheck: Fix covscan detected problems.
  - Annocheck: Add --profile=el8.
  - gcc-plugin: Conditionalize generation of branch protection note.
  - Annocheck: Ignore gaps containing NOP instructions.
* Thu Sep 16 2021 Nick Clifton  <nickc@redhat.com> - 10.06-1
  - GCC Plugin: Fix detection of running inside the LTO compiler.  (#2004917)
  - Annocheck: Do not insist on the DT_AARCH64_PAC_PLT flag being present in AArch64 binaries.
  - Annocheck: With gaps at the start/end of the .text section, check for special symbols before displaying a MAYB result. (#1995224)
  - Annocheck: Do not set CFLAGS/LDFLAGS when building.  Take from environment instead.
  - Annocheck: Fix exit code when tests PASS.
  - Documentation: Add node for each hardening test.
  - Documentation: Install online.
  - Annocheck: Annote FAIL and MAYB results with URL to documentation
  - Annocheck: Add --no-urls and --provide-urls options
  - Annocheck: Add --help-<tool> option.
  - Annocheck: Fix fuzzing detected failures.
  - Annocheck: Add --profile option.
  - Docs: Document --profile option and rpminspect.yaml.
  - Annocheck: Skip GO/CET checks.  Fix fuzzing detected failures.
  - LLVM Plugin: Automatically choose the correct tests to run, based upon the version of Clang installed. (#1997444)
  - spec file: Add the installation of the annobon sources into /usr/src/annobin.
  - Annocheck: Fix memory corruption.  (#1996963)
  - spec file: Add the creation of a gcc-plugin version info file in /usr/lib/rpm/redhat.
  - Annocheck: Fix conditionalization of AArch64's PAC+BTI detection.
* Wed Aug 18 2021 Nick Clifton  <nickc@redhat.com> - 9.90-1
  - Annocheck: Add linker generated function for ppc64le exceptions.  (#1981410)
  - LLVM Plugin: Allow checks to be selected from the command line.
  - Annocheck: Examine DW_AT_producer for -flto.
* Tue Aug 17 2021 Nick Clifton  <nickc@redhat.com> - 9.89-1
  - Annocheck: Conditionalize detection of AArch64's PAC+BTI protection.
  - Annocheck: Add linker generated function for s390x exceptions.  (#1981410)
  - Annocheck: Generate MAYB results for gaps in notes covering the .text section.  (#1991943)
  - Annocheck: Close DWARF file descriptors once the debug info is no longer needed.  (#1981410)
  - LLVM Plugin: Update to build with Clang v13.  (Thanks to: Tom Stellard <tstellar@redhat.com>)
* Mon Aug 16 2021 Nick Clifton  <nickc@redhat.com> - 9.87-1
  - Annocheck: Fix memory corruption.  (#1988715)
  - Annocheck: Skip certain tests for kernel modules.
  - Annocheck: Detect a missing CET note.  (#1991931)
  - Annocheck: Do not report future fails for AArch64 notes.
  - Annocheck: Warn about multiple --debug-file, --debug-rpm and --debug-dir options.
* Mon Aug 09 2021 Nick Clifton  <nickc@redhat.com> - 9.84-1
  - Annocheck: Process files in command line order.  (#1988714)
* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 9.83-3
  - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
    Related: rhbz#1991688
* Thu Jul 29 2021 Florian Weimer <fweimer@redhat.com> - 9.83-2
  - Rebuild with GCC 11.2 (#1986836)
* Fri Jul 23 2021 Nick Clifton  <nickc@redhat.com> - 9.83-1
  - Annocheck: Reverse AArch64 PAC+BTI check, ie fail if they are enabled.  (#1984995)
  - Annocheck: Add another test exceptions.
  - Annocheck: Add some more test exceptions.
  - Tests: Skip glibc-notes test if the assembler does not support --generate-missing-build-notes.  (#1978573)
  - Tests: Skip objcopy test if objcopy does not support --merge-notes.
* Thu Jul 01 2021 Nick Clifton  <nickc@redhat.com> - 9.79-1
  - Annocheck: Fix spelling mistake in -mstack-realign failure message.  (#1977349)
* Thu Jun 24 2021 Nick Clifton  <nickc@redhat.com> - 9.78-1
  - gcc-plugin: Do not record global versions of stack protection settings in LTO mode, if not set.  (#1958954)
  - annocheck: Remove limit on number of input files.  (#1973981)
* Tue Jun 15 2021 Nick Clifton  <nickc@redhat.com> - 9.76-1
  - clang/llvm plugins: Build with correct security options.
  - Annocheck: Better detection of GO compiler version.

Files

/usr/bin/annocheck
/usr/include/libannocheck.h
/usr/lib/.build-id
/usr/lib/.build-id/2a
/usr/lib/.build-id/2a/2fe968120851cfc854c46c1050ad75170139cf
/usr/lib/.build-id/bd
/usr/lib/.build-id/bd/50789ed8d049287633f3116cd27691496dc673
/usr/lib64/libannocheck.la
/usr/lib64/libannocheck.so
/usr/lib64/libannocheck.so.0
/usr/lib64/libannocheck.so.0.0.0
/usr/lib64/pkgconfig/libannocheck.pc
/usr/share/man/man1/annocheck.1.gz


Generated by rpm2html 1.8.1

Fabrice Bellet, Wed Apr 17 04:43:28 2024