Summary: | media-video/mjpegtools-1.8.0-r1 contains insecure RUNPATHs | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Peyman Pourkermani <peyman.pourkermani> |
Component: | Runpath Issues | Assignee: | Gentoo Security <security> |
Status: | RESOLVED INVALID | ||
Severity: | minor | CC: | media-tv, media-video, peyman.pourkermani |
Priority: | High | ||
Version: | unspecified | ||
Hardware: | x86 | ||
OS: | Linux | ||
Whiteboard: | [needpatch] | ||
Package list: | Runtime testing required: | --- | |
Bug Depends on: | |||
Bug Blocks: | 81745 | ||
Attachments: |
emerge log of mjpegtools-1.8.0-r1
New emerge log showing libtool warnings |
Description
Peyman Pourkermani
2006-01-02 21:28:00 UTC
works fine for me ... please run `emerge mjpegtools >& log` and post the log as an attachment Created attachment 76465 [details]
emerge log of mjpegtools-1.8.0-r1
Here is the log as you requested
Ccing maintainers. vapier: does the requested log talk to you ? Cannot reproduce here. Created attachment 79498 [details]
New emerge log showing libtool warnings
I have attached a new emerge log (after upgrading gcc and the latest emerge -uDv world). There are a lot of libtool warnings. Is that normal? The insecure RUNPATH error at the bottom of the log is also different.
if you're referring to the -mcpu warning, that is from gcc, not libtool ... and it's normal, read the warning message and you should be able to figure out what's wrong this looks screwed up to me: make[1]: Warning: File `/usr/include/SDL/SDL.h' has modification time 5.4e+08 s in the future make sure your clock isnt broken, run `touch /usr/include/SDL/SDL.h`, and then re-emerge mjpegtools My clock is correct. For whatever reason /usr/include/SDL/SDL.h must have had the wrong timestamp but now it has a valid date and time. So I emerged mjpegtools and it builds fine :) I understand the -mcpu warning but I have not set it. This is what my make.conf file looks like: CHOST="i686-pc-linux-gnu" CFLAGS="-O2 -march=pentium-m -pipe -fomit-frame-pointer" CXXFLAGS="${CFLAGS}" I have not set -mcpu so I assume it's set by the ebuild or in the source ?? The libtool warnings I refer to could be normal but they look like this: libtool: install: warning: `/var/tmp/portage/mjpegtools-1.8.0-r1/work/mjpegtools-1.8.0/utils/libmjpegutils.la' has not been installed in `/usr/lib' You can see them around line 1380 in the log. Thanks. > My clock is correct. For whatever reason /usr/include/SDL/SDL.h must have had > the wrong timestamp but now it has a valid date and time. So I emerged > mjpegtools and it builds fine :) ok, marking bug as INVALID then > I understand the -mcpu warning but I have not set it. This is what my > make.conf file looks like: ah, this is the configure script misbehaving ... i'll fix this in portage > The libtool warnings I refer to could be normal but they look like this: > libtool: install: warning: `/var/tmp/portage/mjpegtools-1.8.0-r1/work/mjpegtools-1.8.0/utils/libmjpegutils.la' > has not been installed in `/usr/lib' that is normal, just ignore it |