Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 154987 - www-apache/libapreq2-2.07 insecure runpaths
Summary: www-apache/libapreq2-2.07 insecure runpaths
Status: VERIFIED TEST-REQUEST
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: x86 Linux
: High blocker (vote)
Assignee: Gentoo Linux bug wranglers
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2006-11-13 03:09 UTC by Oliver
Modified: 2006-11-13 05:14 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Oliver 2006-11-13 03:09:05 UTC 
Hi,

can't install the package www-apache/libapreq2:

QA Notice: the following files contain insecure RUNPATH's
 Please file a bug about this at http://bugs.gentoo.org/
 For more information on this issue, kindly review:
 http://bugs.gentoo.org/81745
/var/tmp/portage/libapreq2-2.07/work/libapreq2-2.07/library/.libs:/usr/lib usr/lib/perl5/site_perl/5.8.8/i686-linux/auto/APR/Request/CGI/CGI.so
/var/tmp/portage/libapreq2-2.07/work/libapreq2-2.07/library/.libs:/usr/lib usr/lib/perl5/site_perl/5.8.8/i686-linux/auto/APR/Request/Hook/Hook.so
/var/tmp/portage/libapreq2-2.07/work/libapreq2-2.07/library/.libs:/usr/lib usr/lib/perl5/site_perl/5.8.8/i686-linux/auto/APR/Request/Cookie/Cookie.so
/var/tmp/portage/libapreq2-2.07/work/libapreq2-2.07/library/.libs:/usr/lib usr/lib/perl5/site_perl/5.8.8/i686-linux/auto/APR/Request/Apache2/Apache2.so
/var/tmp/portage/libapreq2-2.07/work/libapreq2-2.07/library/.libs:/usr/lib usr/lib/perl5/site_perl/5.8.8/i686-linux/auto/APR/Request/Error/Error.so
/var/tmp/portage/libapreq2-2.07/work/libapreq2-2.07/library/.libs:/usr/lib usr/lib/perl5/site_perl/5.8.8/i686-linux/auto/APR/Request/Param/Param.so
/var/tmp/portage/libapreq2-2.07/work/libapreq2-2.07/library/.libs:/usr/lib usr/lib/perl5/site_perl/5.8.8/i686-linux/auto/APR/Request/Parser/Parser.so
/var/tmp/portage/libapreq2-2.07/work/libapreq2-2.07/library/.libs:/usr/lib usr/lib/perl5/site_perl/5.8.8/i686-linux/auto/APR/Request/Request.so


!!! ERROR: www-apache/libapreq2-2.07 failed.
!!! Function dyn_install, Line 1057, Exitcode 0
!!! Insecure binaries detected
!!! If you need support, post the topmost build error, NOT this status message.


What should I do? otrs and rt need this packages to work properly...

Regards,
Oliver


Portage 2.0.54 (default-linux/x86/2006.0, gcc-3.3.6, glibc-2.3.5-r2, 2.6.16.18-xen_domU i686)
=================================================================
System uname: 2.6.16.18-xen_domU i686 Intel(R) Xeon(TM) CPU 2.80GHz
Gentoo Base System version 1.6.14
distcc 2.18.3 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632) [disabled]
ccache version 2.3 [enabled]
app-admin/eselect-compiler: [Not Present]
dev-java/java-config: 1.2.11
dev-lang/python:     2.3.5, 2.4.2
dev-python/pycrypto: [Not Present]
dev-util/ccache:     2.3
dev-util/confcache:  [Not Present]
sys-apps/sandbox:    1.2.12
sys-devel/autoconf:  2.13, 2.59-r6
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1
sys-devel/binutils:  2.16.1
sys-devel/gcc-config: 1.3.12-r6
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.11-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-mcpu=pentium4 -march=pentium4 -O2 -pipe -fomit-frame-pointer -fstack-protector"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/lib/X11/xkb"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-mcpu=pentium4 -march=pentium4 -O2 -pipe -fomit-frame-pointer -fstack-protector"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig ccache distlocks sandbox sfperms strict"
GENTOO_MIRRORS="http://mirrors.sec.informatik.tu-darmstadt.de/gentoo"
LANG="de_DE.utf8"
LC_ALL="de_DE.utf8"
MAKEOPTS="-j3"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage"
USE="alsa apache2 bitmap-fonts bzip2 cli cracklib dlloader dri eds emboss esd expat fortran gd gif gstreamer iconv idn innodb isdnlog jpeg junit lcms ldap memlimit mmx mng mp3 mysql ncurses nptl ogg pam pcre perl pic pie png postgres pppd qt3 qt4 recode reflection samba session snmp spl sse sse2 ssl tcpd tiff truetype truetype-fonts type1-fonts udev vorbis x86 xml xorg video_cards_apm video_cards_ark video_cards_ati video_cards_chips video_cards_cirrus video_cards_cyrix video_cards_dummy video_cards_fbdev video_cards_glint video_cards_i128 video_cards_i740 video_cards_i810 video_cards_imstt video_cards_mga video_cards_neomagic video_cards_nsc video_cards_nv video_cards_rendition video_cards_s3 video_cards_s3virge video_cards_savage video_cards_siliconmotion video_cards_sis video_cards_sisusb video_cards_tdfx video_cards_tga video_cards_trident video_cards_tseng video_cards_v4l video_cards_vesa video_cards_vga video_cards_via video_cards_vmware video_cards_voodoo input_devices_keyboard input_devices_mouse input_devices_evdev userland_GNU kernel_linux elibc_glibc"
Unset:  CTARGET, INSTALL_MASK, LDFLAGS, LINGUAS, PORTAGE_RSYNC_EXTRA_OPTS, PORTAGE_RSYNC_OPTS, PORTDIR_OVERLAY
Comment 1 Jakub Moc (RETIRED) gentoo-dev 2006-11-13 04:59:51 UTC 
Kindly review http://bugs.gentoo.org/page.cgi?id=fields.html#bug_severity and note that FEATURES="stricter" is not intended for users.

Not reproducible at all, if you have ExtUtils-MakeMaker installed then unmerge it.
Comment 2 Oliver 2006-11-13 05:14:46 UTC 
hmm, I searched at forums.gentoo.org and found a entry that I have to upgrade "portage" - now is portage-2.1.1-r1 installed and the package libapreq2 is installable.

this bug _is_ reproducible on some packages - look at: http://bugs.gentoo.org/81745.

Regards,
Oliver