Bug 117603

Summary:	app-text/sablotron-1.0.1 insecure RUNPATHs
Product:	Gentoo Security	Reporter:	Jakub Moc (RETIRED) <jakub>
Component:	Runpath Issues	Assignee:	Gentoo Security <security>
Status:	RESOLVED NEEDINFO
Severity:	normal	CC:	dttyszka, text-markup+disabled
Priority:	High
Version:	unspecified
Hardware:	All
OS:	All
URL:	http://bugs.gentoo.org/show_bug.cgi?id=81745#c32
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:
Bug Blocks:	81745

Description Jakub Moc (RETIRED) gentoo-dev

2006-01-03 07:36:55 UTC

Separated from the tracker Bug 81745

QA Notice: the following files contain insecure RUNPATH's
 Please file a bug about this at http://bugs.gentoo.org/
 For more information on this issue, kindly review:
 http://bugs.gentoo.org/81745
/var/tmp/portage/sablotron-1.0.1/image//usr/lib usr/bin/sabcmd


!!! ERROR: app-text/sablotron-1.0.1 failed.
!!! Function dyn_install, Line 1057, Exitcode 0
!!! Insecure binaries detected

Comment 1 Tupone Alfredo gentoo-dev

2006-01-12 10:27:30 UTC

works for me

Comment 2 solar (RETIRED) gentoo-dev

2006-03-05 08:02:59 UTC

The next ~arch portage revision will auto repair evil rpaths and not bail. 
Maintainers should still fix the packages they maintain as portage will only die
with FEATURES=stricter (but that is a maintainer & QA problem) no longer security@

http://bugs.gentoo.org/show_bug.cgi?id=124962

Comment 3 SpanKY gentoo-dev

2006-03-14 19:05:13 UTC

*** Bug 126240 has been marked as a duplicate of this bug. ***

Comment 4 SpanKY gentoo-dev

2006-03-14 19:06:34 UTC

you guys neglected to post any sort of useful information

we'll need:
emerge info
MAKEOPTS=-j1 emerge sablotron >& log
MAKEOPTS='-j1 --debug=b' emerge sablotron >& log2