Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 114415

Summary: dev-util/subversion should block perl-core/ExtUtils-MakeMaker (insecure RUNPATHs issue)
Product: Gentoo Linux Reporter: Heinz Hombergs <Heinz.Hombergs>
Component: [OLD] ServerAssignee: Paul de Vrieze (RETIRED) <pauldv>
Status: RESOLVED FIXED    
Severity: normal CC: jakub, moixa
Priority: High    
Version: unspecified   
Hardware: x86   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---

Description Heinz Hombergs 2005-12-03 21:17:34 UTC
After compiling subversion-1.3.0_rc4 I got this message:

QA Notice: the following files contain insecure RUNPATH's
 Please file a bug about this at http://bugs.gentoo.org/
 For more information on this issue, kindly review:
 http://bugs.gentoo.org/81745
/var/tmp/portage/subversion-1.3.0_rc4/work/subversion-1.3.0-rc4/subversion/libsvn_client/.libs:/var/tmp/portage/subversion-1.3.0_rc4/work/subversion-1.3.0-rc4/subversion/libsvn_delta/.libs:/var/tmp/portage/subversion-1.3.0_rc4/work/subversion-1.3.0-rc4/subversion/libsvn_fs/.libs:/var/tmp/portage/subversion-1.3.0_rc4/work/subversion-1.3.0-rc4/subversion/libsvn_ra/.libs:/var/tmp/portage/subversion-1.3.0_rc4/work/subversion-1.3.0-rc4/subversion/libsvn_repos/.libs:/var/tmp/portage/subversion-1.3.0_rc4/work/subversion-1.3.0-rc4/subversion/libsvn_wc/.libs:/var/tmp/portage/subversion-1.3.0_rc4/work/subversion-1.3.0-rc4/subversion/libsvn_diff/.libs:/var/tmp/portage/subversion-1.3.0_rc4/work/subversion-1.3.0-rc4/subversion/libsvn_subr/.libs:/var/tmp/portage/subversion-1.3.0_rc4/work/subversion-1.3.0-rc4/subversion/bindings/swig/perl/libsvn_swig_perl/.libs
usr/lib/perl5/vendor_perl/5.8.7/i686-linux/auto/SVN/_Fs/_Fs.so
/var/tmp/portage/subversion-1.3.0_rc4/work/subversion-1.3.0-rc4/subversion/libsvn_client/.libs:/var/tmp/portage/subversion-1.3.0_rc4/work/subversion-1.3.0-rc4/subversion/libsvn_delta/.libs:/var/tmp/portage/subversion-1.3.0_rc4/work/subversion-1.3.0-rc4/subversion/libsvn_fs/.libs:/var/tmp/portage/subversion-1.3.0_rc4/work/subversion-1.3.0-rc4/subversion/libsvn_ra/.libs:/var/tmp/portage/subversion-1.3.0_rc4/work/subversion-1.3.0-rc4/subversion/libsvn_repos/.libs:/var/tmp/portage/subversion-1.3.0_rc4/work/subversion-1.3.0-rc4/subversion/libsvn_wc/.libs:/var/tmp/portage/subversion-1.3.0_rc4/work/subversion-1.3.0-rc4/subversion/libsvn_diff/.libs:/var/tmp/portage/subversion-1.3.0_rc4/work/subversion-1.3.0-rc4/subversion/libsvn_subr/.libs:/var/tmp/portage/subversion-1.3.0_rc4/work/subversion-1.3.0-rc4/subversion/bindings/swig/perl/libsvn_swig_perl/.libs
usr/lib/perl5/vendor_perl/5.8.7/i686-linux/auto/SVN/_Ra/_Ra.so
/var/tmp/portage/subversion-1.3.0_rc4/work/subversion-1.3.0-rc4/subversion/libsvn_client/.libs:/var/tmp/portage/subversion-1.3.0_rc4/work/subversion-1.3.0-rc4/subversion/libsvn_delta/.libs:/var/tmp/portag

Reproducible: Always
Steps to Reproduce:
Comment 1 Jakub Moc (RETIRED) gentoo-dev 2005-12-03 23:14:10 UTC

*** This bug has been marked as a duplicate of 105054 ***
Comment 2 Jakub Moc (RETIRED) gentoo-dev 2005-12-04 08:21:01 UTC
Reopening this to reuse the bug, the fix from Bug 105054 is no good for people
who still have perl-core/ExtUtils-MakeMaker installed.

subversions needs to block perl-core/ExtUtils-MakeMaker.
Comment 3 Michael Cummings (RETIRED) gentoo-dev 2005-12-06 03:37:32 UTC
Better than that - the ebuild for MakeMaker will be coming out of the tree
shortly, its no longer needed as a glue between 5.6 and 5.8.
Comment 4 Jakub Moc (RETIRED) gentoo-dev 2005-12-06 08:16:23 UTC
(In reply to comment #3)
> Better than that - the ebuild for MakeMaker will be coming out of the tree
> shortly, its no longer needed as a glue between 5.6 and 5.8.

That won't help, unfortunately. Removing an ebuild from portage will not force
people to unmerge it.
Comment 5 Paul de Vrieze (RETIRED) gentoo-dev 2005-12-06 13:21:21 UTC
I've blocked makemaker in subversion for now. If you make a fixed makemaker, let
me know and I'll remove the blocker.
Comment 6 Jakub Moc (RETIRED) gentoo-dev 2005-12-06 16:24:08 UTC
(In reply to comment #5)
> I've blocked makemaker in subversion for now. If you make a fixed makemaker, let
> me know and I'll remove the blocker.

Ugh? Block, *not* DEPEND! (And perl-core/ExtUtils-MakeMaker should block
subversion as well). 

http://viewcvstest.gentoo.org/viewcvs.py/gentoo-x86/dev-util/subversion/subversion-1.3.0_rc4.ebuild?r1=1.1&r2=1.2
Comment 7 Jakub Moc (RETIRED) gentoo-dev 2005-12-06 17:20:20 UTC
EU::MM now has a patch for the runpath issue (Bug 105054, comment #55), so
please just remove the mistakenly added dependency and close this bug; no need
for the block any more... ;)
Comment 8 Paul de Vrieze (RETIRED) gentoo-dev 2005-12-07 01:33:57 UTC
I'm sorry for the mistake. In any case I've removed the blocker.
Comment 9 Tobias Sager 2006-01-11 04:12:25 UTC
I hit this problem with subversion 1.3.0.
Subversion had no block for ExtUtils-MakeMaker.
I had installed:
- ExtUtils-MakeMaker-6.20 (which has the patch)
- perl-5.8.6-r8 (which has a patch as well)

Removing ExtUtils-MakeMaker helped so I can now compile
subversion.

Maybe the blocker for ExtUtils-MakeMaker is still needed in subversion
or what else could be the problem?