QA Notice: The following files contain insecure RUNPATHs /var/tmp/portage/sys-devel/autogen-5.18.16/image/usr/bin/getdefs RPATH: /var/tmp/portage/sys-devel/autogen-5.18.16/work/autogen-5.18.16/autoopts/.libs /var/tmp/portage/sys-devel/autogen-5.18.16/image/usr/bin/columns RPATH: /var/tmp/portage/sys-devel/autogen-5.18.16/work/autogen-5.18.16/autoopts/.libs /var/tmp/portage/sys-devel/autogen-5.18.16/image/usr/bin/autogen RPATH: /var/tmp/portage/sys-devel/autogen-5.18.16/work/autogen-5.18.16/autoopts/.libs Reproducible: Didn't try Portage 2.3.51 (python 2.7.15-final-0, default/linux/amd64/17.0/no-multilib/hardened/selinux, gcc-7.3.0, glibc-2.27-r6, 4.14.83-gentoo-gnu x86_64) ================================================================= System uname: Linux-4.14.83-gentoo-gnu-x86_64-Intel-R-_Core-TM-_i3-3110M_CPU_@_2.40GHz-with-gentoo-2.6 KiB Mem: 16295656 total, 7746128 free KiB Swap: 2097148 total, 2097148 free Timestamp of repository gentoo: Sat, 26 Jan 2019 09:30:01 +0000 Head commit of repository gentoo: 6acedbe509067f691e3cf1a4a6486ec57ecdd8af Head commit of repository libressl: 35e76eac01127cd8b87c2dd05af03eb2d8bc8e4c sh bash 4.4_p23-r1 ld GNU ld (Gentoo 2.30 p5) 2.30.0 app-shells/bash: 4.4_p23-r1::gentoo dev-java/java-config: 2.2.0-r4::gentoo dev-lang/perl: 5.26.2::gentoo dev-lang/python: 2.7.15::gentoo, 3.6.5::gentoo dev-util/cmake: 3.9.6::gentoo dev-util/pkgconfig: 0.29.2::gentoo sys-apps/baselayout: 2.6-r1::gentoo sys-apps/openrc: 0.38.3-r1::gentoo sys-apps/sandbox: 2.13::gentoo sys-devel/autoconf: 2.13-r1::gentoo, 2.69-r4::gentoo sys-devel/automake: 1.11.6-r3::gentoo, 1.13.4-r2::gentoo, 1.16.1-r1::gentoo sys-devel/binutils: 2.30-r4::gentoo sys-devel/gcc: 7.3.0-r3::gentoo sys-devel/gcc-config: 2.0::gentoo sys-devel/libtool: 2.4.6-r3::gentoo sys-devel/make: 4.2.1-r4::gentoo sys-kernel/linux-headers: 4.14-r1::gentoo (virtual/os-headers) sys-libs/glibc: 2.27-r6::gentoo Repositories: gentoo location: /usr/portage sync-type: rsync sync-uri: rsync://rsync.gentoo.org/gentoo-portage priority: -1000 sync-rsync-verify-jobs: 1 sync-rsync-verify-metamanifest: yes sync-rsync-extra-opts: sync-rsync-verify-max-age: 24 local location: /usr/local/portage masters: gentoo libressl location: /var/lib/overlays/libressl sync-type: git sync-uri: https://github.com/gentoo/libressl.git masters: gentoo priority: 50 ACCEPT_KEYWORDS="amd64" ACCEPT_LICENSE="@FREE" CBUILD="x86_64-pc-linux-gnu" CC="gcc" CFLAGS="-march=native -O2 -pipe" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/lib64/libreoffice/program/sofficerc /usr/share/config /usr/share/easy-rsa /usr/share/gnupg/qualified.txt /var/bind" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php7.2/ext-active/ /etc/php/cgi-php7.2/ext-active/ /etc/php/cli-php7.2/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c" CXX="g++" CXXFLAGS="-march=native -O2 -pipe" DISTDIR="/usr/portage/distfiles" ENV_UNSET="DBUS_SESSION_BUS_ADDRESS DISPLAY GOBIN PERL5LIB PERL5OPT PERLPREFIX PERL_CORE PERL_MB_OPT PERL_MM_OPT XAUTHORITY XDG_CACHE_HOME XDG_CONFIG_HOME XDG_DATA_HOME XDG_RUNTIME_DIR" FCFLAGS="-O2 -pipe" FEATURES="assume-digests binpkg-logs config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync multilib-strict news parallel-fetch preserve-libs protect-owned sandbox selinux sesandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr" FFLAGS="-O2 -pipe" GENTOO_MIRRORS="http://lug.mtu.edu/gentoo/ http://gentoo.osuosl.org/ rsync://mirrors.rit.edu/gentoo/ http://mirrors.rit.edu/gentoo/ http://mirror.iawnet.sandia.gov/gentoo/ http://mirror.lug.udel.edu/pub/gentoo/ http://cosmos.illinois.edu/pub/gentoo/ rsync://gentoo.cs.uni.edu/gentoo-distfiles http://gentoo.cs.uni.edu/ http://mirror.usu.edu/mirrors/gentoo/" LANG="en_US.UTF8" LDFLAGS="-Wl,-O1 -Wl,--as-needed" MAKEOPTS="-j4" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git" PORTAGE_TMPDIR="/var/tmp" USE="X a52 aac aalib acl acpi alsa amd64 audiofile audit avahi bash-completion blas branding bzip2 cairo cdda cddb cdparanoia cdr clamav consolekit crypt css cups curl cxx dbus deblob djvu dts dv dvd dvdr emboss encode exif fam fbcon ffmpeg fftw flac fontconfig geoip gif git gnuplot gnutls gphoto2 gpm graphviz gsl gstreamer hardened hddtemp hdf5 iconv icu idn imlib inotify ipv6 jack jbig jemalloc jpeg jpeg2k kde ladspa lapack lash latex lcms ldap libnotify libressl libsamplerate libtirpc lm_sensors lzma mad matroska memcached memlimit mime mms mng mozilla mp3 mp4 mpeg mplayer musepack musicbrainz ncurses netcdf networkmanager nls nntp nptl offensive ofx ogg openexr opengl openmp opus pam pcre pdf php pie plasma plotutils png policykit posix postgres postscript ppds python qml qt5 quicktime raw readline rss sasl scanner sctp seccomp selinux semantic-desktop slp smp sndfile snmp sockets socks5 sound sox speex spell sqlite ssl ssp startup-notification svg sybase syslog szip taglib theora threads tiff truetype udev udisks unicode upower usb utils v4l vaapi vcd vdpau vhosts vim-syntax vnc vorbis wavpack wayland webp wmf wxwidgets x264 xattr xcb xcomposite xface xft xml xmlrpc xmp xmpp xpm xtpax xv xvid yaz zeroconf zlib" ABI_X86="64" ALSA_CARDS="hda-intel" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="karbon sheets words" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="avx f16c mmx mmxext pclmul popcnt sse sse2 sse3 sse4_1 sse4_2 ssse3" CURL_SSL="libressl" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock isync itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="evdev synaptics" KERNEL="linux" L10N="en en-US" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" NGINX_MODULES_HTTP="access auth_basic auth_ldap auth_pam autoindex browser cache_purge charset dav dav_ext echo empty_gif fancyindex fastcgi geo gzip limit_conn limit_req map memc memcached metrics proxy realip referer rewrite scgi secure_link split_clients ssi stub_status upload_progress upstream_check upstream_ip_hash userid uwsgi vhost_traffic_status xslt" NGINX_MODULES_MAIL="imap pop3 smtp" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-6 php7-1" POSTGRES_TARGETS="postgres9_5 postgres10" PYTHON_SINGLE_TARGET="python3_6" PYTHON_TARGETS="python2_7 python3_6" QEMU_SOFTMMU_TARGETS="aarch64 ppc64 riscv64 x86_64" QEMU_USER_TARGETS="x86_64" RUBY_TARGETS="ruby24" USERLAND="GNU" VIDEO_CARDS="i965 intel" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, LINGUAS, PORTAGE_BINHOST, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=0e5f4be65afbd78b427fde3116ad74057e3297a4 commit 0e5f4be65afbd78b427fde3116ad74057e3297a4 Author: Sergei Trofimovich <slyfox@gentoo.org> AuthorDate: 2019-02-02 20:07:03 +0000 Commit: Sergei Trofimovich <slyfox@gentoo.org> CommitDate: 2019-02-02 20:07:03 +0000 sys-devel/autogen: fix RPATH poisoning, bug #676692 autogen sets '-no-install' on installed binaries: autogen_LDFLAGS = ... -no-install columns_LDFLAGS = -no-install getdefs_LDFLAGS = -no-install Reported-by: Progenyx Closes: https://bugs.gentoo.org/676692 Package-Manager: Portage-2.3.59, Repoman-2.3.12 Signed-off-by: Sergei Trofimovich <slyfox@gentoo.org> sys-devel/autogen/autogen-5.18.16-r1.ebuild | 56 +++++++++++++++ .../autogen/files/autogen-5.18.16-rpath.patch | 80 ++++++++++++++++++++++ 2 files changed, 136 insertions(+)
Thanks for the report!
Thanks for the fix!
