Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 117603 - app-text/sablotron-1.0.1 insecure RUNPATHs
Summary: app-text/sablotron-1.0.1 insecure RUNPATHs
Status: RESOLVED NEEDINFO
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Runpath Issues (show other bugs)
Hardware: All All
: High normal (vote)
Assignee: Gentoo Security
URL: http://bugs.gentoo.org/show_bug.cgi?i...
Whiteboard:
Keywords:
: 126240 (view as bug list)
Depends on:
Blocks: 81745
  Show dependency tree
 
Reported: 2006-01-03 07:36 UTC by Jakub Moc (RETIRED)
Modified: 2006-03-14 19:06 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Jakub Moc (RETIRED) gentoo-dev 2006-01-03 07:36:55 UTC 
Separated from the tracker Bug 81745

QA Notice: the following files contain insecure RUNPATH's
 Please file a bug about this at http://bugs.gentoo.org/
 For more information on this issue, kindly review:
 http://bugs.gentoo.org/81745
/var/tmp/portage/sablotron-1.0.1/image//usr/lib usr/bin/sabcmd


!!! ERROR: app-text/sablotron-1.0.1 failed.
!!! Function dyn_install, Line 1057, Exitcode 0
!!! Insecure binaries detected
Comment 1 Tupone Alfredo gentoo-dev 2006-01-12 10:27:30 UTC 
works for me
Comment 2 solar (RETIRED) gentoo-dev 2006-03-05 08:02:59 UTC 
The next ~arch portage revision will auto repair evil rpaths and not bail. 
Maintainers should still fix the packages they maintain as portage will only die
with FEATURES=stricter (but that is a maintainer & QA problem) no longer security@

http://bugs.gentoo.org/show_bug.cgi?id=124962
Comment 3 SpanKY gentoo-dev 2006-03-14 19:05:13 UTC 
*** Bug 126240 has been marked as a duplicate of this bug. ***
Comment 4 SpanKY gentoo-dev 2006-03-14 19:06:34 UTC 
you guys neglected to post any sort of useful information

we'll need:
emerge info
MAKEOPTS=-j1 emerge sablotron >& log
MAKEOPTS='-j1 --debug=b' emerge sablotron >& log2