Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 753506 - media-gfx/imagemagick-7.0.10.35 contain insecure RUNPATHs
Summary: media-gfx/imagemagick-7.0.10.35 contain insecure RUNPATHs
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Codec Project
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-11-07 18:53 UTC by Masoch Von Sade
Modified: 2022-03-04 23:16 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
emerge --info and buid log (emerge_info.txt,16.67 KB, text/plain)
2020-11-07 18:57 UTC, Masoch Von Sade
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Masoch Von Sade 2020-11-07 18:53:29 UTC
Issue: package media-gfx/imagemagick installs files that contain insecure RUNPATHs.
Discovered on: amd64

* Messages for package media-gfx/imagemagick-7.0.10.35:
 * Log file: /var/log/portage/build/media-gfx/imagemagick-7.0.10.35:20201107-183301.log

 * Package:    media-gfx/imagemagick-7.0.10.35
 * Repository: gentoo
 * Maintainer: dilfridge@gentoo.org
 * USE:        X abi_x86_64 amd64 bzip2 cxx elibc_glibc jpeg kernel_linux lcms openmp pango perl png userland_GNU zlib
 * FEATURES:   network-sandbox preserve-libs sandbox userpriv usersandbox
 * policy.xml hardened
 * Skipping make test/check due to ebuild restriction.
 * Final size of build directory: 92396 KiB (90.2 MiB)
 * Final size of installed tree:  26536 KiB (25.9 MiB)
 * QA Notice: The following files contain insecure RUNPATHs
 *  Please file a bug about this at https://bugs.gentoo.org/
 *  with the maintainer of the package.
 *   /var/tmp/portage/media-gfx/imagemagick-7.0.10.35/image/usr/lib64/perl5/vendor_perl/5.30.3/x86_64-linux-thread-multi/auto/Image/Magick/Q16/Q16.so
 *     RPATH: /var/tmp/portage/media-gfx/imagemagick-7.0.10.35/work/ImageMagick-7.0.10-35/PerlMagick/quantum/../../MagickCore/.libs:/usr/lib64
 *
Comment 1 Masoch Von Sade 2020-11-07 18:57:54 UTC
Created attachment 670349 [details]
emerge --info and buid log
Comment 2 Masoch Von Sade 2020-11-07 19:12:00 UTC
Comment on attachment 670349 [details]
emerge --info and buid log

I couldn't upload the build log because the file have 1.3 mb.
Comment 3 Andreas K. Hüttel archtester gentoo-dev 2022-03-04 23:16:29 UTC
This seems to be fixed in 7.1