Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 114320

Summary: openldap-2.2.28-r1 fails due to insecure RUNPATH
Product: Gentoo Linux Reporter: Spider (RETIRED) <spider>
Component: Current packagesAssignee: Robin Johnson <robbat2>
Status: RESOLVED DUPLICATE    
Severity: normal    
Priority: High    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---

Description Spider (RETIRED) gentoo-dev 2005-12-02 23:27:37 UTC
making executable: /usr/lib/liblber-2.2.so.7.0.21
making executable: /usr/lib/liblber.so.2.0.130
making executable: /usr/lib/libldap-2.2.so.7.0.21
making executable: /usr/lib/libldap_r-2.2.so.7.0.21
making executable: /usr/lib/libldap_r.so.2.0.130
making executable: /usr/lib/libldap.so.2.0.130

QA Notice: the following files contain insecure RUNPATH's
 Please file a bug about this at http://bugs.gentoo.org/
 For more information on this issue, kindly review:
 http://bugs.gentoo.org/81745
/var/tmp/portage/openldap-2.2.28-r1/work/openldap-2.1.30/libraries/liblber/.libs
usr/lib/libldap.so.2.0.130
/var/tmp/portage/openldap-2.2.28-r1/work/openldap-2.1.30/libraries/liblber/.libs
usr/lib/libldap_r.so.2.0.130


!!! ERROR: net-nds/openldap-2.2.28-r1 failed.
!!! Function dyn_install, Line 1058, Exitcode 0
!!! Insecure binaries detected
!!! If you need support, post the topmost build error, NOT this status message.



Reproducible: Always
Steps to Reproduce:
1.
2.
3.




Portage 2.0.53_rc7 (!/usr/portage/profiles/default-linux/x86/2005.0, gcc-3.4.4,
glibc-2.3.5-r3, 2.6.14-gentoo-r2 i686)
=================================================================
System uname: 2.6.14-gentoo-r2 i686 AMD Athlon(TM) XP 2500+
Gentoo Base System version 1.12.0_pre11
ccache version 2.4 [enabled]
dev-lang/python:     2.4.2
sys-apps/sandbox:    1.2.14
sys-devel/autoconf:  2.13, 2.59-r7
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1
sys-devel/binutils:  2.16.1-r1
sys-devel/libtool:   1.5.20-r1
virtual/os-headers:  2.6.11-r3
ACCEPT_KEYWORDS="x86 ~x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=athlon-xp -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3.4/env
/usr/kde/3.4/share/config /usr/kde/3.4/shutdown /usr/kde/3.5/env
/usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/kde/3/share/config
/usr/lib/X11/xkb /usr/lib/mozilla/defaults/pref /usr/share/config /var/bind
/var/qmail/control"
CONFIG_PROTECT_MASK="/etc/X11/rstart /etc/X11/xdm /etc/gconf /etc/terminfo
/usr/X11R6/lib/X11/xkb /etc/env.d"
CXXFLAGS="-O2 -march=athlon-xp -pipe"
DISTDIR="/mnt/devel/distfiles"
FEATURES="autoconfig candy ccache cvs distlocks sandbox sfperms sign strict
userpriv usersandbox"
GENTOO_MIRRORS="http://distfiles.gentoo.org
http://distro.ibiblio.org/pub/linux/distributions/gentoo"
LANG="en_GB.UTF-8"
LC_ALL=""
LDFLAGS="-Wl,-O1"
MAKEOPTS="-j2"
PKGDIR="/mnt/devel/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/mnt/devel/cvstree/gentoo-x86"
PORTDIR_OVERLAY="/mnt/devel/portage"
SYNC=""
USE="x86 3dnow 3dnowex X a52 aac aalib adns alsa apm asf audiofile avahi avi
berkdb bzip2 cdparanoia cdr crypt css cups curl dbus dga dts dvb dvd dvdr
dvdread eds emboss encode ethereal exif expat faad fam ffmpeg firefox flac
foomaticdb fortran freetype gcj gd gdbm gif glitz glut gmp gnome gphoto2 gpm
gstreamer gtk gtk2 gtkhtml guile hal id3 idn ieee1394 imagemagick imlib ipv6
jpeg jpeg2k kdeenablefinal lame lcms libcaca libg++ libwww live logitech-mouse
mad matroska mikmod mmx mmxext mng mozilla moznoirc moznomail mp3 mp4live mpeg
mpeg2 mpeg4 musepack musicbrainz ncurses nethack nls nptl nsplugin nvidia objc
ogg oggvorbis openal opengl oss pam pcre pda perl png python quicktime readline
recode samba sdl slang spell sse ssl startup-notification svg tcpd theora tiff
truetype truetype-fonts type1-fonts udev unicode usb vorbis win32codecs wmf
xgetdefault xine xml xml2 xv xvid zeroconf zlib userland_GNU kernel_linux
elibc_glibc"
Unset:  ASFLAGS, CTARGET, LINGUAS


[ebuild  N    ] net-nds/openldap-2.2.28-r1  +berkdb +crypt -debug +gdbm +ipv6
-kerberos +minimal -odbc -perl +readline -samba -sasl -slp +ssl +tcpd 0 kB
Comment 1 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2005-12-02 23:29:20 UTC

*** This bug has been marked as a duplicate of 105380 ***