annobin-annocheck-12.80-2.el10 RPM for x86_64

From CentOS Stream 10 AppStream for x86_64

Installs the annocheck program which uses the notes generated by annobin to
check that the specified files were compiled with the correct security
hardening options.

Provides

• annobin-annocheck
• annobin-annocheck(x86-64)

Requires

• annobin-docs = 12.80-2.el10
• cpio
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.14)(64bit)
• libc.so.6(GLIBC_2.17)(64bit)
• libc.so.6(GLIBC_2.2.5)(64bit)
• libc.so.6(GLIBC_2.3)(64bit)
• libc.so.6(GLIBC_2.3.4)(64bit)
• libc.so.6(GLIBC_2.33)(64bit)
• libc.so.6(GLIBC_2.34)(64bit)
• libc.so.6(GLIBC_2.38)(64bit)
• libc.so.6(GLIBC_2.4)(64bit)
• libc.so.6(GLIBC_2.8)(64bit)
• libc.so.6(GLIBC_ABI_DT_RELR)(64bit)
• libdw.so.1()(64bit)
• libdw.so.1(ELFUTILS_0.122)(64bit)
• libdw.so.1(ELFUTILS_0.126)(64bit)
• libdw.so.1(ELFUTILS_0.130)(64bit)
• libdw.so.1(ELFUTILS_0.156)(64bit)
• libdw.so.1(ELFUTILS_0.159)(64bit)
• libelf.so.1()(64bit)
• libelf.so.1(ELFUTILS_1.0)(64bit)
• libelf.so.1(ELFUTILS_1.3)(64bit)
• libelf.so.1(ELFUTILS_1.5)(64bit)
• libelf.so.1(ELFUTILS_1.6)(64bit)
• librpm.so.10()(64bit)
• rpm
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1
• rtld(GNU_HASH)

License

GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later

Changelog

* Fri Dec 13 2024 Nick Clifton  <[email protected]> - 12.80-2
  - Rebuild against debugedit 5.1.2.  (RHEL-72712)
* Fri Dec 13 2024 Nick Clifton  <[email protected]> - 12.80-1
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
* Tue Nov 12 2024 Nick Clifton  <[email protected]> - 12.75-1
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
* Mon Nov 11 2024 Nick Clifton  <[email protected]> - 12.74-1
  - Annocheck: Add exceptions for GCC.  (RHEL-33365)
* Fri Nov 01 2024 Nick Clifton  <[email protected]> - 12.72-1
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.
  - Clang & LLVM Plugins: Include install directory in binary.  (RHEL-54069)
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Annocheck: Stop spurious assembler warnings.  (RHEL-53213)
  - Annocheck: Stop warnings about known gaps.    (RHEL-53218)
  - Annocheck: Fix stack realign test.  (#2302427)
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3.
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
* Tue Oct 29 2024 Troy Dawson <[email protected]> - 12.55-3
  - Bump release for October 2024 mass rebuild:
    Resolves: RHEL-64018
* Mon Jun 24 2024 Troy Dawson <[email protected]> - 12.55-2
  - Bump release for June 2024 mass rebuild
* Mon May 20 2024 Nick Clifton  <[email protected]> - 12.55-1
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
* Mon May 20 2024 Nick Clifton  <[email protected]> - 12.54-1
  - Spec File: Add annobin plugin document directory to the files section.  (#2279779)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239) (RHEL-37267)
* Thu May 09 2024 Nick Clifton  <[email protected]> - 12.53-1
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)
* Tue May 07 2024 Nick Clifton  <[email protected]> - 12.52-2
  - NVR Bump to allow rebuilding against LLVM-18.  (RHEL-27727)
* Thu Apr 25 2024 Nick Clifton  <[email protected]> - 12.52-1
  - Annocheck: Add OpenSSL Engine test.  (PTG-319)
  - Annocheck: Test for gaps even when only one note is present.
  - Annocheck: Skip AArch64 branch protection test for GO binaries.
  - GCC Plugin: Disable active check for -Wimplicit-int for non-C sources.  (#2275884)
  - Annocheck: Ignore stack checks for AMD GPU binaries.
  - Annocheck: Do not produce FAIL result for i686 binaries in the RHEL-10 profile.
  - Annocheck: Test for __stack_chk_guard being writeable.
* Tue Apr 02 2024 Nick Clifton  <[email protected]> - 12.48-1
  - Annocheck: Update heuristics for detecting glibc code in executables.  (RHEL-30579)
* Wed Mar 27 2024 Nick Clifton  <[email protected]> - 12.47-1
  - Clang & LLVM Plugins: Allow environment to override fortification level.  (RHEL-30579)
  - Spec File: Override fortification level and set it to 3.
* Mon Mar 25 2024 Tulio Magno Quites Machado Filho  <[email protected]> - 12.46-1
  - Annocheck: Improve detection of -mbranch-protection option.  (RHEL-526)
  - Clang Plugin: Add global-file-syms option.
  - LLVM Plugin: Add global-file-syms option.
  - Plugins: Add support for ANNOBIN environment variable.
  - Built By: Add more lang types.
* Thu Mar 21 2024 Nick Clifton  <[email protected]> - 12.45-1
  - GCC Plugin: Fix bug extracing the value of target specific command line options.  (RHEL-526)
* Wed Mar 20 2024 Nick Clifron  <[email protected]> - 12.44-2
  - Spec File: Enable AArch64 BTI testing for all binaries.  (RHEL-526)
* Mon Mar 18 2024 Nick Clifron  <[email protected]> - 12.44-1
  - Clang Plugin: Fix building with Clang 18.  (RHEL-27727)
  - Configure: Remove check for FrontendPluginRegistry.h header as it is stored in a non-standard location on Debian systems.
  - Debuginfod test: Allow for the libdwfl library silently contacting the debuginfod server.
  - LLVM Plugin: Use llvm-config to get the correct paths and options for building executables.
  - Clang Plugin: Likewise.
  - Enable silent rules for most building.
  - Annocheck: Correctly extract DWARF attributes from DT_REL files.
  - Annocheck: Improve heuristics for locating debug info files.  (#2267097)
  - Configure: Harmonize configure options.    
  - GCC Plugin: Add support for MIPS specific target functions.
  - GCC Plugin: Use .dc.a for address expressions in 64-bit ELF format notes.
  - Spec File: Remove a workaround for ppc64le.
* Tue Feb 13 2024 Nick Clifron  <[email protected]> - 12.40-1
  - Annocheck: Improve heuristic for skipping LTO and FORTIFY tests.  (#2264000)
* Fri Feb 09 2024 Nick Clifron  <[email protected]> - 12.39-1
  - Annocheck: Also skip property note test for i686 binaries. (#2258571)
* Tue Jan 23 2024 Nick Clifron  <[email protected]> - 12.38-1
  - Annocheck: Also skip the entry point test for i686 binaries. (#2258571)
* Mon Jan 22 2024 Fedora Release Engineering <[email protected]> - 12.37-3
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Fedora Release Engineering <[email protected]> - 12.37-2
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Wed Jan 17 2024 Nick Clifron  <[email protected]> - 12.37-1
  - GCC Plugin: DO not use section groups with string format notes.
* Tue Jan 16 2024 Nick Clifron  <[email protected]> - 12.36-2
  - Spec File: NVR bump in order to allow building in side tag.
* Tue Jan 16 2024 Nick Clifron  <[email protected]> - 12.36-1
  - Annocheck: Disable cf-protection test for i686 architecture. (#2258571)
* Mon Jan 15 2024 Nick Clifron  <[email protected]> - 12.35-4
  - Spec File: NVR bump in order to allow building in side tag.
* Mon Jan 15 2024 Nick Clifron  <[email protected]> - 12.35-3
  - Spec File: Disable hard gcc check in order to allow builds with new version of gcc.
* Thu Jan 11 2024 Songsong Zhang  <[email protected]> - 12.35-2
  - Spec File: Do not install annocheck.1.gz when annocheck is disabled.
* Thu Jan 04 2024 Nick Clifron  <[email protected]> - 12.35-1
  - Annocheck: Improve detection of FIPS compliant GO binaries.
* Fri Dec 15 2023 Nick Clifron  <[email protected]> - 12.34-1
  - GCC Plugin: Fix recording of the -Wimplicit-int and -Wimplicit-function-declaration warnings.  Add active checks for when they are deliberately disabled.
* Mon Dec 11 2023 Nick Clifron  <[email protected]> - 12.33-1
  - Tests: Fix implicit-values test so that it will compile with gcc 14+.
* Fri Nov 24 2023 Nick Clifron  <[email protected]> - 12.32-1
  - GCC Plugin: Add support for -fhardended.
* Wed Nov 15 2023 Nick Clifron  <[email protected]> - 12.31-1
  - Update glibc detection heuristics for PPC64.  (RHEL-16453)
* Wed Nov 01 2023 Nick Clifron  <[email protected]> - 12.30-1
  - Fix another atexit test failure.  (#2247481)
* Mon Oct 30 2023 Nick Clifron  <[email protected]> - 12.29-1
  - Fix atexit test failure.
  - Notes: Add support for string format notes.
* Fri Oct 06 2023 Nick Clifron  <[email protected]> - 12.28-1
  - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
  - Annobin: Add future test of these options.
* Tue Sep 26 2023 Nick Clifron  <[email protected]> - 12.27-1
  - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
  - Annobin: Add test for these warnings.
* Wed Sep 06 2023 Nick Clifron  <[email protected]> - 12.26-1
  - LLVM Plugin: Fix building with LLVM version 17.
* Wed Aug 30 2023 Nick Clifron  <[email protected]> - 12.25-1
  - GCC Plugin: Enable string note format by default.
* Fri Aug 04 2023 Nick Clifron  <[email protected]> - 12.24-1
  - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
* Mon Jul 31 2023 Nick Clifron  <[email protected]> - 12.23-1
  - Annocheck: Add test for FIPS compliant GO binaries.
* Wed Jul 26 2023 Nick Clifron  <[email protected]> - 12.22-1
  - Annocheck: Fix double free.  (#2226749)
* Wed Jul 19 2023 Fedora Release Engineering <[email protected]> - 12.21-2
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Tue Jul 18 2023 Nick Clifton  <[email protected]> - 12.21-1
  - Spec File: migrated to SPDX license.  (#2222112)
* Mon Jul 17 2023 Nick Clifton  <[email protected]> - 12.20-2
  - Spec File: Change License field to use SPDX notation.  (#2222112)
* Mon Jul 17 2023 Nick Clifton  <[email protected]> - 12.20-1
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
* Wed Jul 05 2023 Nick Clifton  <[email protected]> - 12.19-1
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.
* Thu Jun 29 2023 Nick Clifton  <[email protected]> - 12.18-1
  - Annocheck: Remove dependency upon binutils-devel.
* Thu Jun 29 2023 Nick Clifton  <[email protected]> - 12.17-1
  - Annocheck: Add detection of known parts of libstdc++-nonshared.a that contain gaps.  (#2217864)
* Tue Jun 27 2023 Nick Clifton  <[email protected]> - 12.16-1
  - Annocheck: Ignore weak/undef function symbols when checking to see if a binary contains code.  (#2217840)
* Mon Jun 26 2023 Nick Clifton  <[email protected]> - 12.15-1
  - Annocheck: Add --suppress-version-warnings option.
* Thu Jun 22 2023 Nick Clifton  <[email protected]> - 12.14-1
  - Annocheck: Do not ignore separate debuginfo files that do not contain any DWARF.  (#2144553)
* Tue Jun 20 2023 Nick Clifton  <[email protected]> - 12.13-1
  - Annocheck: Ignore /dev/null filename in string notes.
  - Annocheck: More tweaks to glibc detection heuristics.  (#2215968)
* Thu Jun 01 2023 Nick Clifton  <[email protected]> - 12.12-1
  - Annocheck: Check for string notes in separate debug info files.  (#2211694)
* Fri May 26 2023 Petr Pisar <[email protected]> - 12.11-1
  - Annocheck: Add support for el10 and rhel-10 profiles.  (RHEL-526)
* Mon May 22 2023 Petr Pisar <[email protected]> - 12.10-3
  - Rebuild against rpm-4.19 (https://fedoraproject.org/wiki/Changes/RPM-4.19)
* Fri May 05 2023 Nick Clifton  <[email protected]> - 12.10-2
  - GCC Plugin: Default to generating string format notes.  (Experimental)
* Fri Apr 28 2023 Nick Clifton  <[email protected]> - 12.10-1
  - Annocheck: Suppress more tests for Rust binaries.
* Tue Apr 25 2023 Nick Clifton  <[email protected]> - 12.09-1
  - Annocheck: Fix detection of missing plugin options.  (#2189492)
* Tue Apr 25 2023 Nick Clifton  <[email protected]> - 12.08-1
  - Fix generation of auto-generated files.
  - Fix covscan reported errors.
* Fri Apr 21 2023 Nick Clifton  <[email protected]> - 12.07-1
  - gcc-plugin: generate warnings about misspelt -D_FORTIFY_SOURCE and/or -D_GLIBCXX_ASSERTIONS options.
* Thu Apr 20 2023 Nick Clifton  <[email protected]> - 12.06-1
  - gcc-plugin: use a bigger buffer for constructing notes.
* Wed Apr 19 2023 Nick Clifton  <[email protected]> - 12.05-1
  - llvm-plugin: Fix detection of optimization level.  Improve test.
  - clang-plugin: Improve test.
* Mon Apr 17 2023 Nick Clifton  <[email protected]> - 12.04-1
  - configure: More improvements.
  - annocheck: Fix seg-fault when checking for glibc components in string format notes.
* Thu Apr 13 2023 Nick Clifton  <[email protected]> - 12.03-1
  - configure: Simplify.
* Tue Apr 11 2023 Nick Clifton  <[email protected]> - 12.02-1
  - gcc plugin: Add filenames to string notes.  Allow use of ANNOBIN environment variable.
  - llvm plugin: Add workaround for building with LLVM-16.
  - clang plugin: Fix for building with Clang-16.
* Thu Mar 30 2023 Nick Clifton  <[email protected]> - 12.01-1
  - gcc plugin: Keep ELF notes at protocol version 3.
* Tue Mar 28 2023 Nick Clifton  <[email protected]> - 12.00-1
  - Protocol Version 4: String format notes.
* Mon Mar 13 2023 Nick Clifton  <[email protected]> - 11.14-1
  - Annocheck: Update message for LTO tests.  (#2177140)
* Wed Mar 08 2023 Nick Clifton  <[email protected]> - 11.13-1
  - Annocheck: Add even more code to handle another glibc function built without LTO.
* Fri Mar 03 2023 Nick Clifton  <[email protected]> - 11.12-1
  - Annocheck: Add code to handle another glibc function built without LTO.
* Tue Feb 28 2023 Nick Clifton  <[email protected]> - 11.11-1
  - GCC Plugin: Do not run if other plugins are active.  (#2162746)
* Thu Feb 23 2023 Nick Clifton  <[email protected]> - 11.10-1
  - Annocheck: Add code to handle glibc functions built without LTO.
* Thu Feb 02 2023 Nick Clifton  <[email protected]> - 11.09-1
  - Libannocheck: Fix thinko in debugging code.
  - Annocheck: Fix LTO test.
  - Notes: Display notes held in separate dbeuginfo files.
* Tue Jan 31 2023 Nick Clifton  <[email protected]> - 11.08-1
  - Annocheck: Fix atexit test.  Fix recording of version numbers.  (#2165528)
* Wed Jan 25 2023 Nick Clifton  <[email protected]> - 11.07-2
  - LLVM & Clang Plugins: Build with branch protection on AArch64.  (#2164364)
  - Fix gating tests.
* Fri Jan 20 2023 Nick Clifton  <[email protected]> - 11.07-1
  - Libannocheck: Fix bug causing infinite looping when running tests.
* Wed Jan 18 2023 Fedora Release Engineering <[email protected]> - 11.06-3
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Mon Jan 16 2023 Jakub Jelinek  <[email protected]> - 11.06-2
  - Rebuilt against GCC 13.
* Fri Jan 13 2023 Nick Clifton  <[email protected]> - 11.06-1
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
* Mon Jan 09 2023 Nick Clifton  <[email protected]> - 11.05-1
  - Annocheck: Fix handling of empty files.  (#2159292)
* Fri Jan 06 2023 Nick Clifton  <[email protected]> - 11.04-1
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
* Fri Jan 06 2023 Nick Clifton  <[email protected]> - 11.03-1
  - Annocheck: Fix memory leaks.
* Wed Jan 04 2023 Nick Clifton  <[email protected]> - 11.02-1
  - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158182)
* Wed Jan 04 2023 Nick Clifton  <[email protected]> - 11.01-1
  - Annocheck: Add more special glibc filenames.  (#2158100)
* Wed Dec 21 2022 Nick Clifton  <[email protected]> - 10.99-1
  - Annocheck: Improve handling of tool versions.
* Tue Dec 20 2022 Nick Clifton  <[email protected]> - 10.98-3
  - Spec File: Fix building with plugin_rebuild enabled.
* Fri Dec 16 2022 Nick Clifton  <[email protected]> - 10.98-1
  - GCC plugin: Fix building with gcc-13.
* Fri Dec 16 2022 Nick Clifton  <[email protected]> - 10.97-1
  - Annocheck: Add test for binaries built by cross compilers.
* Thu Dec 15 2022 Nick Clifton  <[email protected]> - 10.96-1
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)

Files

/usr/bin/annocheck
/usr/lib/.build-id
/usr/lib/.build-id/42
/usr/lib/.build-id/42/cd7f1b5036728b59ae45a718f383bae55fe12a
/usr/share/man/man1/annocheck.1.gz

Generated by rpm2html 1.8.1

Fabrice Bellet, Thu Feb 27 06:21:29 2025