tclx.x86_64: I: binary-or-shlib-calls-gethostbyname /usr/lib64/tcl/tclx8.6/libtclx8.6.so The binary calls gethostbyname(). Please port the code to use getaddrinfo(). tclx.x86_64: W: missing-call-to-chdir-with-chroot /usr/lib64/tcl/tclx8.6/libtclx8.6.so This executable appears to call chroot without using chdir to change the current directory. This is likely an error and permits an attacker to break out of the chroot by using fchdir. While that's not always a security issue, this has to be checked. tclx.x86_64: W: missing-call-to-setgroups-before-setuid /usr/lib64/tcl/tclx8.6/libtclx8.6.so This executable is calling setuid and setgid without setgroups or initgroups. There is a high probability this means it didn't relinquish all groups, and this would be a potential security issue to be fixed. Seek POS36-C on the web for details about the problem. tclx.src: W: name-repeated-in-summary C TclX tclx.x86_64: W: name-repeated-in-summary C TclX The name of the package is repeated in its summary. This is often redundant information and looks silly in various programs' output. Make the summary brief and to the point without including redundant information in it. tclx.src: W: no-version-in-last-changelog tclx.x86_64: W: no-version-in-last-changelog The latest changelog entry doesn't contain a version. Please insert the version that is coherent with the version of the package and rebuild it. tclx.x86_64: E: devel-file-in-non-devel-package (Badness: 50) /usr/include/tclExtend.h A file that is needed only e.g. when developing or building software is included in a non-devel package. These files should go in devel packages. 2 packages and 0 specfiles checked; 1 errors, 6 warnings.