--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-54bb9337da
2022-04-28 14:09:53.618284
--------------------------------------------------------------------------------
Name : annobin
Product : Fedora 35
Version : 10.66
Release : 2.fc35
URL : None
Summary : Annotate and examine compiled binary files
Description :
This package contains the tools needed to annotate binary files created by
compilers, and also the tools needed to examine those annotations.
One of the tools is a plugin for GCC that records information about the
security options that were in effect when the binary was compiled.
Note - the plugin is automatically enabled in gcc builds via flags
provided by the redhat-rpm-macros package.
One of the tools is a plugin for Clang that records information about the
security options that were in effect when the binary was compiled.
One of the tools is a plugin for LLVM that records information about the
security options that were in effect when the binary was compiled.
One of the tools is a security checker which analyses the notes present in
annotated files and reports on any missing security options.
--------------------------------------------------------------------------------
Update Information:
Upstream bugs (
http://gcc.gnu.org/PRNNNNN) fixed: 45178, 58646, 59950, 61611,
66193, 79754, 80556, 82283, 84685, 87496, 90943, 95036, 95115, 98249, 98724,
99121, 99578, 99585, 99708, 99754, 99893, 100106, 100337, 100464, 100468,
100516, 100537, 100608, 100613, 100680, 100775, 100784, 100786, 100834, 101030,
101051, 101095, 101231, 101324, 101371, 101515, 101532, 101585, 101636, 101677,
101717, 101767, 101894, 102045, 102123, 102140, 102358, 102538, 102656, 102740,
102819, 102869, 102893, 102952, 102957, 102990, 102992, 103057, 103083, 103105,
103169, 103186, 103291, 103299, 103307, 103328, 103337, 103341, 103361, 103432,
103455, 103489, 103544, 103556, 103586, 103596, 103627, 103630, 103638, 103641,
103650, 103706, 103711, 103769, 103790, 103864, 103885, 103904, 103925, 103943,
103955, 103968, 104008, 104079, 104090, 104098, 104107, 104108, 104117, 104147,
104208, 104210, 104211, 104219, 104225, 104228, 104237, 104253, 104258, 104263,
104284, 104288, 104301, 104307, 104311, 104331, 104333, 104337, 104362, 104385,
104402, 104410, 104430, 104442, 104446, 104448, 104449, 104451, 104453, 104458,
104462, 104469, 104472, 104474, 104497, 104502, 104507, 104510, 104511, 104513,
104517, 104542, 104544, 104557, 104565, 104568, 104570, 104589, 104601, 104617,
104619, 104659, 104667, 104674, 104675, 104681, 104688, 104711, 104730, 104759,
104767, 104775, 104777, 104782, 104786, 104806, 104811, 104814, 104847, 104853,
104859, 104861, 104880, 104890, 104894, 104910, 104923, 104931, 104944, 104963,
104971, 104985, 104994, 104998, 105000, 105003, 105004, 105021, 105027, 105028,
105032, 105035, 105052, 105053, 105055, 105058, 105061, 105064, 105068, 105070,
105093, 105094, 105123, 105138, 105143, 105165, 105186, 105189, 105198, 105203,
105211, 105214, 105226, 105232, 105235, 105256, 105257, 105282, 105324, 105331
---- Update the Annocheck tool so that it will not complain about missing
-mbranch-protection options for AArch64 binaries compiled in LTO mode. ----
Upstream bugs (
http://gcc.gnu.org/PRNNNNN) fixed: 45178, 58646, 59950, 61611,
66193, 79754, 82283, 84685, 87496, 95036, 95115, 98724, 99578, 99585, 99708,
99754, 100337, 100464, 100468, 100537, 100680, 100775, 100784, 100786, 100834,
101030, 101095, 101231, 101324, 101371, 101515, 101636, 101767, 102045, 102123,
102140, 102358, 102538, 102656, 102740, 102819, 102893, 102952, 102957, 102990,
103057, 103169, 103186, 103291, 103299, 103307, 103337, 103361, 103489, 103544,
103556, 103586, 103596, 103627, 103641, 103711, 103769, 103790, 103864, 103904,
103925, 103968, 104090, 104107, 104108, 104147, 104208, 104211, 104219, 104237,
104253, 104258, 104263, 104284, 104288, 104307, 104311, 104331, 104333, 104337,
104362, 104385, 104402, 104410, 104430, 104442, 104446, 104448, 104449, 104451,
104453, 104458, 104462, 104469, 104472, 104502, 104510, 104511, 104513, 104517,
104544, 104557, 104568, 104589, 104601, 104617, 104619, 104659, 104667, 104674,
104675, 104681, 104688, 104711, 104730, 104759, 104767, 104775, 104777, 104782,
104786, 104806, 104811, 104814, 104847, 104861, 104890, 104910, 104923, 104931,
104944, 104963, 104971, 104994, 104998, 105000, 105004, 105032, 105035, 105052,
105055, 105058, 105061, 105068, 105093, 105094, 105123 ---- Fixes a bug in
annocheck that falsely reports that AArch64 binaries do not have a
.note.gnu.property section
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 23 2022 Jakub Jelinek <jakub(a)redhat.com> - 10.66-2
- NVR bump to rebuild against GCC 11.3.1-2.
* Wed Apr 13 2022 Nick Clifton <nickc(a)redhat.com> - 10.66-1
- Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries
if compiled in LTO mode.
* Wed Apr 13 2022 Nick Clifton <nickc(a)redhat.com> - 10.65-1
- gcc-plugin: Add support for CLVC_INTEGER options.
- Annocheck: Even more special cases for AArch64 glibc on RHEL-8. (#2072082)
- Annocheck: Add more special cases for AArch64 glibc on RHEL-8. (#2072082)
* Tue Apr 5 2022 Nick Clifton <nickc(a)redhat.com> - 10.62-1
- gcc-plugin: Add remap of OPT_Wall.
- configure: Fix typo in top level configure.ac.
- Add support for building using meson+ninja.
* Mon Apr 4 2022 Jakub Jelinek <jakub(a)redhat.com> - 10.59-2
- NVR bump to rebuild against GCC 11.2.1-10
* Wed Mar 30 2022 Nick Clifton <nickc(a)redhat.com> - 10.59-1
- Annocheck: Fix test for AArch64 property notes. (#2068657)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1773224 - annobin-10.66 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1773224
[ 2 ] Bug #2068657 - aarch64 binary has .note.gnu.property but reports FAIL:
property-note test because .note.gnu.property section not found
https://bugzilla.redhat.com/show_bug.cgi?id=2068657
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-54bb9337da' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------