8:42 p.m.
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-3f1a1aff9e
2022-08-12 01:41:01.346938
--------------------------------------------------------------------------------
Name : annobin
Product : Fedora 35
Version : 10.79
Release : 1.fc35
URL : https://sourceware.org/annobin/
Summary : Annotate and examine compiled binary files
Description :
This package contains the tools needed to annotate binary files created by
compilers, and also the tools needed to examine those annotations.
One of the tools is a plugin for GCC that records information about the
security options that were in effect when the binary was compiled.
Note - the plugin is automatically enabled in gcc builds via flags
provided by the redhat-rpm-macros package.
One of the tools is a plugin for Clang that records information about the
security options that were in effect when the binary was compiled.
One of the tools is a plugin for LLVM that records information about the
security options that were in effect when the binary was compiled.
One of the tools is a security checker which analyses the notes present in
annotated files and reports on any missing security options.
--------------------------------------------------------------------------------
Update Information:
- Annocheck: Fixes for libannocheck.h. - Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild ---- - Annocheck: Add
automatic profile selection. - Annocheck: Improve gap detection and reporting.
---- Update the %files section in annobin.spec so that it admits to using the
gcc plugin directory. Remove the bogus Provides: annobin from the annobin-doc
sub-package. ---- Synced with rawhide. Brings in support for annocheck
scanning of binaries created by Rust 1.18 ---- Fix a bug in annocheck when
parsing command line options that take a parameter. ---- - Annocheck: Do not
complain about unenabled -mbranch-protection option in AArch64 binaries.
(#2078909) ---- - gcc-plugin: Fix typo in configure.ac. ---- Add another
exception (to annocheck) for glibc libraries ---- Fixes another problem with
a false FAIL result from annocheck about -mbranch-protection for AArch64
binaries built with LTO enabled
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 26 2022 Yara Ahmad <yahmad(a)redhat.com> - 10.79-1
- Annocheck: Fixes for libannocheck.h.
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Mon Jul 11 2022 Yara Ahmad <yahmad(a)redhat.com> - 10.78-1
- Annocheck: Add automatic profile selection.
- Annocheck: Improve gap detection and reporting.
* Wed Jun 29 2022 Nick Clifton <nickc(a)redhat.com> - 10.76-3
- Spec File: Use the %dir directive in the %files section to ensure that
- plugin directories are useable. (#2080454)
- Spec File: Remove bogus Provides from annobin-docs subpackage.
* Mon Jun 20 2022 Nick Clifton <nickc(a)redhat.com> - 10.76-1
- Annocheck: Check build-id of separate debuginfo files.
- Annocheck: Add GAPS test replacing --ignore-gaps.
- Annocheck: Fix covscan detected race condition between stat() and open().
- Annocheck: Handle binaries created by Rust 1.18. (#2094420)
- Annocheck: Add optional function name to --skip arguments. (PR 29229)
* Thu May 19 2022 Nick Clifton <nickc(a)redhat.com> - 10.73-1
- Annocheck: Fix handling of command line options that take arguments. (#2086850)
* Tue May 17 2022 Yara Ahmad <yahmad(a)redhat.com> - 10.72-1
- Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64
binaries. (#2078909)
* Wed May 11 2022 Yara Ahmad <yahmad(a)redhat.com> - 10.71-1
- gcc-plugin: Fix typo in configure.ac.
- gcc-plugin: Add support for RISC-V.
* Mon May 9 2022 Nick Clifton <nickc(a)redhat.com> - 10.70-1
- Annocheck: Add another special case for glibc rpms. (#2083070)
* Fri May 6 2022 Nick Clifton <nickc(a)redhat.com> - 10.69-1
- Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64
binaries if compiled using LTO. (#2082146)
* Tue May 3 2022 Nick Clifton <nickc(a)redhat.com> - 10.68-1
- Annocheck: Add more glibc exceptions + check PT_TLS segments. (#2081131)
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-3f1a1aff9e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------