Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 464254 - >=media-libs/oyranos-0.9.4 - Insecure RUNPATHs
Summary: >=media-libs/oyranos-0.9.4 - Insecure RUNPATHs
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Library (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Michael Weber (RETIRED)
URL: http://www.oyranos.org/scm?p=oyranos....
Whiteboard:
Keywords: PATCH
Depends on:
Blocks:
 
Reported: 2013-04-02 22:04 UTC by Andreas Sturmlechner
Modified: 2013-04-24 20:52 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments
oyranos-0.9.4-buildsystem-1.patch (oyranos-0.9.4-buildsystem-1.patch,707 bytes, patch)
2013-04-02 22:04 UTC, Andreas Sturmlechner
Details | Diff
upstream fix, backported to oyranos-0.9.4 (oyranos-0.9.4-fix-runpaths.patch,5.08 KB, patch)
2013-04-03 11:31 UTC, Andreas Sturmlechner
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Andreas Sturmlechner gentoo-dev 2013-04-02 22:04:26 UTC
Created attachment 344126 [details, diff]
oyranos-0.9.4-buildsystem-1.patch

oyranos git is also affected.


scanelf: rpath_security_checks(): Security problem NULL DT_RPATH in /var/tmp/portage/media-libs/oyranos-9999/image/usr/bin/oyranos-xforms-modules
scanelf: rpath_security_checks(): Security problem NULL DT_RUNPATH in /var/tmp/portage/media-libs/oyranos-9999/image/usr/bin/oyranos-xforms-modules
Auto fixing rpaths for /var/tmp/portage/media-libs/oyranos-9999/image/usr/bin/oyranos-xforms-modules

 * QA Notice: The following files contain insecure RUNPATHs
 *  Please file a bug about this at http://bugs.gentoo.org/
 *  with the maintaining herd of the package.
 *   /var/tmp/portage/media-libs/oyranos-9999/image/usr/bin/oyranos-xforms-modules
 *



Attaching a patch that attempts to fix this. Builds without complaint at least.
Comment 1 Andreas Sturmlechner gentoo-dev 2013-04-03 11:31:00 UTC
Created attachment 344194 [details, diff]
upstream fix, backported to oyranos-0.9.4
Comment 2 Andreas Sturmlechner gentoo-dev 2013-04-24 20:52:18 UTC
Fixed via bug 447246