Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 120144 - Emerging dev-php/php and dev-php/mod_php gives insecure runpath
Summary: Emerging dev-php/php and dev-php/mod_php gives insecure runpath
Status: RESOLVED WONTFIX
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Runpath Issues (show other bugs)
Hardware: x86 Linux
: High normal (vote)
Assignee: Gentoo Linux bug wranglers
URL:
Whiteboard:
Keywords:
: 120145 (view as bug list)
Depends on:
Blocks:
 
Reported: 2006-01-23 23:12 UTC by Michael Wayburne
Modified: 2006-01-24 00:00 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michael Wayburne 2006-01-23 23:12:27 UTC
Portage 2.0.54 (default-linux/x86/2005.0, gcc-3.4.4, glibc-2.3.5-r2, 2.4.22 i686)
=================================================================
System uname: 2.4.22 i686 Pentium III (Coppermine)
Gentoo Base System version 1.6.13
dev-lang/python:     2.2.3-r1, 2.3.5, 2.4.2
sys-apps/sandbox:    1.2.12
sys-devel/autoconf:  2.13, 2.59-r6
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1
sys-devel/binutils:  2.16.1
sys-devel/libtool:   1.4.3-r4, 1.5.22
virtual/os-headers:  2.4.19-r1, 2.6.11-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O3 -march=pentium3 -fprefetch-loop-arrays -funroll-loops -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3/share/config /usr/lib/X11/xkb /usr/share/config /var/bind /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/mail/dspam /etc/terminfo /etc/env.d"
CXXFLAGS="-O3 -march=pentium3 -fprefetch-loop-arrays -funroll-loops -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig distlocks sandbox sfperms strict"
GENTOO_MIRRORS="ftp://mirrors.tds.net/gentoo http://mirrors.tds.net/gentoo http://www.gtlib.cc.gatech.edu/pub/gentoo ftp://ftp.gtlib.cc.gatech.edu/pub/gentoo"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="x86 apm arts avi berkdb bitmap-fonts bzip2 crypt cups curl eds emboss encode expat foomaticdb fortran gd gdbm gif gmp gpm gstreamer gtk2 idn imagemagick imlib informix ipv6 java jpeg kde lcms libg++ libwww mad maildir mhash mikmod mng motif mp3 mpeg mysql ncurses nls ogg oggvorbis opengl oss pam pcre pdflib perl png python qt quicktime readline samba sdl slang spell ssl tcpd tiff truetype truetype-fonts type1-fonts vorbis xml xml2 xmms xv zlib userland_GNU kernel_linux elibc_glibc"
Unset:  ASFLAGS, CTARGET, LANG, LC_ALL, LDFLAGS, LINGUAS, MAKEOPTS, PORTDIR_OVERLAY

----------------------------------------------------------------------

>>> Install php-4.4.0-r4 into /var/tmp/portage/php-4.4.0-r4/image/ category dev-php
 * Running make INSTALL_ROOT=/var/tmp/portage/php-4.4.0-r4/image/ install
Installing PHP CLI binary:        /var/tmp/portage/php-4.4.0-r4/image//usr/bin/
Installing PHP CLI man page:      /var/tmp/portage/php-4.4.0-r4/image//usr/share/man/man1/
Installing shared extensions:     /var/tmp/portage/php-4.4.0-r4/image//usr/lib/php/extensions/no-debug-non-zts-20020429/
Installing PEAR environment:      /var/tmp/portage/php-4.4.0-r4/image//usr/lib/php/
[PEAR] Archive_Tar    - installed: 1.1
[PEAR] Console_Getopt - installed: 1.2
[PEAR] PEAR           - installed: 1.3.5
Wrote PEAR system config file at: /var/tmp/portage/php-4.4.0-r4/image///etc/pear.conf
You may want to add: /usr/lib/php to your php.ini include_path
[PEAR] HTML_Template_IT- installed: 1.1
[PEAR] Net_UserAgent_Detect- installed: 2.0.1
[PEAR] XML_RPC        - installed: 1.3.1
Installing build environment:     /var/tmp/portage/php-4.4.0-r4/image//usr/lib/php/build/
Installing header files:          /var/tmp/portage/php-4.4.0-r4/image//usr/include/php/
Installing helper programs:       /var/tmp/portage/php-4.4.0-r4/image//usr/bin/
  program: phpize
  program: php-config
Installing man pages:             /var/tmp/portage/php-4.4.0-r4/image//usr/share/man/man1/
  page: phpize.1
  page: php-config.1
 * Setting extension_dir in php.ini
 * Installing JAR for PHP
 * Installing Java test page
 * Setting correct include_path
patching file php.ini-dist
 * Fixing PEAR cache location
 * Installing manpage
man:
gzipping man page: php-config.1
gzipping man page: phpize.1
prepallstrip:
strip: i686-pc-linux-gnu-strip --strip-unneeded
   usr/bin/php
   usr/lib/php/extensions/no-debug-non-zts-20020429/java.a
   usr/lib/php/extensions/no-debug-non-zts-20020429/java.so

QA Notice: the following files contain insecure RUNPATH's
 Please file a bug about this at http://bugs.gentoo.org/
 For more information on this issue, kindly review:
 http://bugs.gentoo.org/81745
/usr/lib/mysql:/opt/informix/lib:/opt/informix/lib/esql:/var/tmp/portage/php-4.4.0-r4/work/php-4.4.0/ext/informix:/opt/blackdown-jdk-1.4.2.03/jre/lib/i386/server:/opt/blackdown-jdk-1.4.2.03/jre/lib/i386/native_threads:/opt/blackdown-jdk-1.4.2.03/jre/lib/i386 usr/bin/php


!!! ERROR: dev-php/php-4.4.0-r4 failed.
!!! Function dyn_install, Line 1057, Exitcode 0
!!! Insecure binaries detected
!!! If you need support, post the topmost build error, NOT this status message.
Comment 1 Jakub Moc (RETIRED) gentoo-dev 2006-01-23 23:55:24 UTC
*** Bug 120145 has been marked as a duplicate of this bug. ***
Comment 2 Jakub Moc (RETIRED) gentoo-dev 2006-01-24 00:00:34 UTC
dev-php/{php,mod_php} is no longer supported and will be package.masked shortly. Use dev-lang/php - see http://www.gentoo.org/proj/en/php/php-upgrading.xml for more information. Feel free to reopen if the issue is reproducible with those packages.