Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 948103 - sys-devel/gcc-15.0.1_pre20250126 installs files that contain insecure RUNPATHs
Summary: sys-devel/gcc-15.0.1_pre20250126 installs files that contain insecure RUNPATHs
Status: CONFIRMED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Gentoo Toolchain Maintainers
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: gcc-15
  Show dependency tree
 
Reported: 2025-01-14 18:02 UTC by Agostino Sarubbo
Modified: 2025-06-01 10:20 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
build.log.xz (build.log.xz,315.32 KB, application/x-xz)
2025-01-14 18:02 UTC, Agostino Sarubbo
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Agostino Sarubbo gentoo-dev 2025-01-14 18:02:55 UTC
https://blogs.gentoo.org/ago/2020/07/04/gentoo-tinderbox/

Issue: sys-devel/gcc-15.0.0_pre20250112-r2 installs files that contain insecure RUNPATHs.
Discovered on: amd64 (internal ref: gcc15_tinderbox)
System: GCC-15-SYSTEM (https://wiki.gentoo.org/wiki/Project:Tinderbox/Common_Issues_Helper#GCC-15)

Info about the issue:
https://wiki.gentoo.org/wiki/Project:Tinderbox/Common_Issues_Helper#QA0024
Comment 1 Agostino Sarubbo gentoo-dev 2025-01-14 18:02:58 UTC
Created attachment 916537 [details]
build.log.xz

build log and emerge --info (compressed because it exceeds attachment limit, use 'xzless' to read it)
Comment 2 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2025-01-14 18:04:39 UTC
This might be caused by the libatomic autolink patch...
Comment 3 Agostino Sarubbo gentoo-dev 2025-01-17 10:44:09 UTC
gcc15_tinderbox has reproduced this issue with version 15.0.0_pre20250112-r3 - Updating summary.
Comment 4 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2025-01-17 12:38:19 UTC
I've reported this at https://inbox.sourceware.org/gcc-patches/8734hhlioy.fsf@gentoo.org/.
Comment 5 Agostino Sarubbo gentoo-dev 2025-01-20 07:53:13 UTC
tinderbox_x86 has reproduced this issue with version 15.0.1_pre20250119 - Updating summary.
Comment 6 Agostino Sarubbo gentoo-dev 2025-01-28 15:59:14 UTC
tinderbox_x86 has reproduced this issue with version 15.0.1_pre20250126 - Updating summary.
Comment 7 Larry the Git Cow gentoo-dev 2025-03-11 10:32:03 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/proj/gcc-patches.git/commit/?id=9e712cac5576ed07beadba86b7f0d9e9dad76f8c

commit 9e712cac5576ed07beadba86b7f0d9e9dad76f8c
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2025-03-11 10:31:12 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2025-03-11 10:32:00 +0000

    15.0.0: drop libatomic patch
    
    It clashes with cobol which just got committed and the patch needs work
    for RPATH anyway. I've pinged the author to ask if they plan on refining
    it for 15 or retrying in 16.
    
    Bug: https://bugs.gentoo.org/948103
    Signed-off-by: Sam James <sam@gentoo.org>

 ...358-Enable-automatic-linking-of-libatomic.patch | 3683 --------------------
 15.0.0/gentoo/README.history                       |    4 +
 2 files changed, 4 insertions(+), 3683 deletions(-)