diff --git a/compiler-rt.spec b/compiler-rt.spec
index 355dcf4..a2e7f0d 100644
--- a/compiler-rt.spec
+++ b/compiler-rt.spec
@@ -14,7 +14,7 @@
 
 %global maj_ver 17
 %global min_ver 0
-%global patch_ver 4
+%global patch_ver 6
 #global rc_ver 4
 %if %{with snapshot_build}
 %global maj_ver %{llvm_snapshot_version_major}
@@ -131,9 +131,12 @@ mv %{buildroot}%{_prefix}/lib/clang/%{maj_ver}/lib/powerpc64le-redhat-linux-gnu
 %changelog
 %{?llvm_snapshot_changelog_entry}
 
-* Tue Nov 07 2023 David Abdurachmanov <davidlt@rivosinc.com> - 17.0.4-1.0.riscv64
+* Thu Dec 07 2023 David Abdurachmanov <davidlt@rivosinc.com> - 17.0.6-1.0.riscv64
 - Add support for riscv64
 
+* Wed Nov 29 2023 Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 17.0.6-1
+- Update to LLVM 17.0.6
+
 * Wed Nov 01 2023 Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 17.0.4-1
 - Update to LLVM 17.0.4
 
diff --git a/rpminspect.yaml b/rpminspect.yaml
index e3e96f2..41a17d6 100644
--- a/rpminspect.yaml
+++ b/rpminspect.yaml
@@ -1,21 +1,19 @@
 ---
-# For compiler-rt, we filter out the following forbidden functions from the list:
-# - gethostbyname
-# - gethostbyname2
-# - gethostbyaddr
-# - inet_aton
-# These are never actually used, and are installed just as interceptors.
 badfuncs:
-    - inet_addr
-    - inet_nsap_addr
-    - inet_ntoa
-    - inet_nsap_ntoa
-    - inet_makeaddr
-    - inet_netof
-    - inet_network
-    - inet_neta
-    - inet_net_ntop
-    - inet_net_pton
-    - rcmd
-    - rexec
-    - rresvport
+    # For compiler-rt, we allow the following forbidden functions:
+    # - gethostbyname
+    # - gethostbyname2
+    # - gethostbyaddr
+    # - inet_aton
+    # These are never actually used, and are installed just as interceptors.
+    allowed:
+        /usr/lib*/clang/*/lib/*/libclang_rt.?san.so:
+            - gethostbyaddr
+            - gethostbyname
+            - gethostbyname2
+            - inet_aton
+        /usr/lib*/clang/*/lib/*/libclang_rt.memprof.so:
+            - gethostbyaddr
+            - gethostbyname
+            - gethostbyname2
+            - inet_aton
diff --git a/sources b/sources
index 17f9f6b..09c8a1d 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (compiler-rt-17.0.4.src.tar.xz) = 050ee856edc28f5cdcd28bb74de6cda4287cdac15a4c053f12be529c2293f88ef03abb954d956a1f77fe17fe57121e1daea8d5c2de3ae86904a8cefe369b0bda
-SHA512 (compiler-rt-17.0.4.src.tar.xz.sig) = d76e7e0e19b543224a8fd132c86d2e6f8e2e81fd697cdb170fcc20ca89d453f9aff14d365577372c4dc54a54e7760ebdf638dade2bd45088624e5c538f103444
+SHA512 (compiler-rt-17.0.6.src.tar.xz) = 56dc9d304dd4ba8d28179077dd99ca7c820ce26dbc70d33b2ba41769928adc900f7618d3efef756b2fc92e322d2f25dba49be966d6583d2d8f1fce9283a9cdf7
+SHA512 (compiler-rt-17.0.6.src.tar.xz.sig) = 3f1e21299fee7ab20fbeb61740049fb0ad61ceeaa8abec000c415320526dd84006d2d82161ff6ed63b33f0c1fd3937647e5eac5341cbeab602edaf70a8b875cd