RHEA-2025:1337 - Product Enhancement Advisory

Topic

An update for gcc-toolset-14-annobin is now available for Red Hat Enterprise Linux 8.

Description

This package contains the tools needed to annotate binary files created by compilers, and also the tools needed to examine those annotations. One of the tools is a plugin for GCC that records information about the security options that were in effect when the binary was compiled. Note - the plugin is automatically enabled in gcc builds via flags provided by the redhat-rpm-macros package. One of the tools is a plugin for Clang that records information about the security options that were in effect when the binary was compiled. One of the tools is a plugin for LLVM that records information about the security options that were in effect when the binary was compiled. One of the tools is a security checker which analyses the notes present in annotated files and reports on any missing security options.

Bug Fix(es) and Enhancement(s):

• GTS 14.1 Annobin update [rhel-8] (JIRA:RHEL-76929)
• annocheck reports "MAYB: test: stack-clash" in its "own" GCC plugin [RHEL-8.10.z/GTS-14] (JIRA:RHEL-77142)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 8 x86_64
• Red Hat Enterprise Linux for IBM z Systems 8 s390x
• Red Hat Enterprise Linux for Power, little endian 8 ppc64le
• Red Hat Enterprise Linux for ARM 64 8 aarch64

Fixes

CVEs

(none)

References

(none)