[ol8_appstream] annobin-annocheck-10.67-3.el8.x86_64

Installs the annocheck program which uses the notes generated by annobin to
check that the specified files were compiled with the correct security
hardening options.

Changelog (Show File list) (Show related packages)

• Thu Jul 21 2022 Florian Weimer <fweimer@redhat.com> - 10.67-3

  - Rebuild to switch back to system annobin (#2108721)

• Fri Jul 15 2022 Florian Weimer <fweimer@redhat.com> - 10.67-2

  - Rebuild to switch back to system annobin (#2001788)

• Fri Apr 29 2022 Nick Clifton <nickc@redhat.com> - 10.67-1

  - Rebuild against LLVM 14.  (#2064521)
  - Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled by golang.
  - Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled in LTO mode.
  - gcc-plugin: Add support for CLVC_INTEGER options.

• Wed Apr 06 2022 Nick Clifton <nickc@redhat.com> - 10.64-1

  - Annocheck: Add more special cases for AArch64 glibc on RHEL-8.  (#2072082)
  - llvm-plugin: Fix a thinko in the sources.
  - gcc-plugin: Add remap of OPT_Wall.
  - configure: Fix typo in top level configure.ac.
  - Add support for building using meson+ninja.
  - Annocheck: Fix test for AArch64 property notes.  (#2068657)
  - gcc-plugin: Do not issue warning messages for autoconf generated source files.  (#2009958)

• Thu Mar 24 2022 Nick Clifton <nickc@redhat.com> - 10.58-1

  - Rebase to 10.58.  (#2067148)
  - gcc-plugin: Do not issue warning messages for autoconf generated source files.  (#2009958)
  - Annocheck: Update documentation and fix typo in annocheck.  (#2061291)
  - Annocheck: Add option to enable/disable following symbolic links.
  - Annocheck: Always identify Rust binaries, even if built on a host that does not know about Rust.  (#2057737)
  - Spec File: Use a different method to disable the annobin plugin  (#2054571)
  - Annocheck: Accept static GO binaries.  (#2053606)
  - gcc-plugin: Fix libtool so that extraneous runpaths are not added to the plugin.  (#2047356)
  - gcc-plugin: Use canonical_option field of save_decoded_options array. (#2047148)
  - Annocheck: Add an option to disable the use of debuginfod (if available).
  - Annocheck: Add more glibc special file names.
  - Annocheck: Skip some tests for BPF binaries.  (#2044897)
  - Annocheck: Skip property note test for GO binaries.  (#204300)
  - Annocheck: Add another glibc static library symbol.  (#2043047)
  - Spec File: Use gcc --print-file-name=rpmver for the gcc version info.
  - GCC Plugin: Do not fail if a section cannot be attached to a group.
  - Annocheck: Improve detection of kernel modules.
  - GCC Plugin: Only default to link-once when using gcc-12 or later.  (#2039297)
  - Annocheck: Add option to disable instrumentation test.
  - GCC Plugin: Fix building with gcc-12.
  - Spec file: Add requirement on cpio for annocheck.  (#2039747)
  - Annocheck: Add even more glibc function names. (#2037333)
  - Annocheck: ARM: Do not fail tests that rely upon annobin notes.
  - Annocheck: Extend list of known glibc functions.  (#2037333)
  - Annocheck: Ignore gaps that contain the _start symbol (for AArch64).  (#1995224)
  - Annocheck: Ignore more glibc special binaries.  (#2037220)
  - Annocheck: Do not complaining about missing stack clash notes if the compilation used LTO.  (#2034946)
  - Annocheck: Add /usr/lib/ld-linux-aarch64.so.1 to the list of known glibc binaries.  (#2033255)
  - Docs: Note that ENDBR is only needed as the landing pad for indirect branches/calls.  (#28705)
  - Spec File: Store full	gcc version release string in plugin info file.  (#2030671)
  - Annocheck: Add special case for x86_64 RHEL-7 gaps.  (#2031133)
  - Annocheck: Do not complaining about missing -mstackrealign notes in LTO mode.  (#2030298)
  - GCC Plugin: Do not record missing -mstackrealign in LTO mode.
  - Tests: Fix gaps and stat tests to use newly built annobin plugin.  (#2028063)
  - Annocheck: Ignore gaps in binaries at least partial built by golang.  (#2028583)
  - Annocheck: Allow spaces in gloang symbols.  (#2028583)
  - Annocheck: Initial deployment of libannocheck.  (#2028063)
  - gcc-plugin: Fix bug creating empty attachments.
  - Annocheck: Change MAYB result to SKIP for DT_RPATH.  (#2026300)
  - Annocheck: Skip missing fortify/warning notes for ARM32.

• Tue Feb 08 2022 Nick Clifton <nickc@redhat.com> - 10.29-3

  - NVR bump in order to allow rebuilding against latest gcc.  (#2052060)

• Mon Jan 24 2022 Nick Clifton <nickc@redhat.com> - 10.29-2

  - Spec File: Add "Requires: rpm cpio" to annocheck sub-package.  (#2043474)

• Tue Nov 30 2021 Nick Clifton <nickc@redhat.com> - 10.28-1

  - gcc-plugin: Fix bug creating empty attachments.  (#2026944)
  - Annocheck: Change MAYB result to SKIP for DT_RPATH.  (#2026300)

• Mon Nov 22 2021 Nick Clifton <nickc@redhat.com> - 10.27-1

  - Annocheck: Skip missing fortify/warning notes for ARM32.
  - gcc-plugin: Try another fix for ppc64le section grouping.  (#2023437)
  - gcc-plugin: Revert 10.22 change.  (#2023437)
  - Annocheck: Add exception for /usr/sbin/ldconfig.  (#2022973)

• Mon Nov 08 2021 Nick Clifton <nickc@redhat.com> - 10.23-1

  - Annocheck: Add a test for unicode characters in identifiers.  (#2017363)
  - gcc-plugin: Default to link-order grouping for PPC64LE.  (#2016458)