RHBA-2022:4734 - Bug Fix Advisory

Topic

Updated devtoolset-11-annobin packages are now available as a part of Red Hat Developer Toolset for Red Hat Enterprise Linux.

Description

Annobin is a build security checking tool. The tool consists of annobin, a plug-in for GCC, and annocheck, a program for examining compiled binary files. The annobin plug-in records security-related command-line options that are used when a program is built. This information is stored in the binary files as a special, non-loadable, section. The annocheck tool examines the information, as well as other features of the compiled program, and generates a report about its security hardening status. The devtoolset-11-annobin packages provide the Red Hat Developer Toolset 11 version of Annobin.

Bug Fix(es):

• annocheck says "PASS: lto test" on non-LTO binaries (BZ#2020409)
• fortify-test fails in the upstream test suite (BZ#2031133)

For more information, see the Red Hat Developer Toolset 11 User Guide linked from the References section.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Software Collections (for RHEL Server) 1 for RHEL 7 x86_64
• Red Hat Software Collections (for RHEL Server for System Z) 1 for RHEL 7 s390x
• Red Hat Software Collections (for RHEL Server for IBM Power LE) 1 for RHEL 7 ppc64le
• Red Hat Software Collections (for RHEL Server for IBM Power) 1 for RHEL 7 ppc64
• Red Hat Software Collections (for RHEL Workstation) 1 for RHEL 7 x86_64

Fixes

CVEs

(none)

References

• https://access.redhat.com/documentation/en-us/red_hat_developer_toolset/11/html/user_guide/index