Bug 118245

Summary:	net-snmp contains insecure RUNPATH/RPATH
Product:	Gentoo Security	Reporter:	Alan Strohm <acs+gentoo>
Component:	Runpath Issues	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	normal
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Alan Strohm 2006-01-07 19:39:12 UTC

scanelf: rpath_security_checks(): Security problem NULL RPATH in /var/tmp/portage/net-snmp-5.2.2/image//usr/lib/perl5/site_perl/5.8.7/x86_64-linux/auto/NetSNMP/TrapReceiver/TrapReceiver.so
scanelf: rpath_security_checks(): Security problem NULL RPATH in /var/tmp/portage/net-snmp-5.2.2/image//usr/lib/perl5/site_perl/5.8.7/x86_64-linux/auto/NetSNMP/TrapReceiver/TrapReceiver.so

QA Notice: the following files contain insecure RUNPATH's
 Please file a bug about this at http://bugs.gentoo.org/
 For more information on this issue, kindly review:
 http://bugs.gentoo.org/81745
/var/tmp/portage/net-snmp-5.2.2/work/net-snmp-5.2.2/perl/default_store/../../snmplib/.libs:/usr/lib64 usr/lib/perl5/site_perl/5.8.7/x86_64-linux/auto/NetSNMP/default_store/default_store.so
/var/tmp/portage/net-snmp-5.2.2/work/net-snmp-5.2.2/perl/ASN/../../snmplib/.libs:/usr/lib64 usr/lib/perl5/site_perl/5.8.7/x86_64-linux/auto/NetSNMP/ASN/ASN.so
/var/tmp/portage/net-snmp-5.2.2/work/net-snmp-5.2.2/perl/OID/../../snmplib/.libs:/usr/lib64 usr/lib/perl5/site_perl/5.8.7/x86_64-linux/auto/NetSNMP/OID/OID.so
/var/tmp/portage/net-snmp-5.2.2/work/net-snmp-5.2.2/perl/agent/../../agent/.libs:/var/tmp/portage/net-snmp-5.2.2/work/net-snmp-5.2.2/perl/agent/../../agent/helpers/.libs:/var/tmp/portage/net-snmp-5.2.2/work/net-snmp-5.2.2/perl/agent/../../snmplib/.libs:/usr/lib64 usr/lib/perl5/site_perl/5.8.7/x86_64-linux/auto/NetSNMP/agent/agent.so
/var/tmp/portage/net-snmp-5.2.2/work/net-snmp-5.2.2/perl/agent/default_store/../../../snmplib/.libs:/usr/lib64 usr/lib/perl5/site_perl/5.8.7/x86_64-linux/auto/NetSNMP/agent/default_store/default_store.so
/var/tmp/portage/net-snmp-5.2.2/work/net-snmp-5.2.2/perl/SNMP/../../snmplib/.libs:/usr/lib64 usr/lib/perl5/site_perl/5.8.7/x86_64-linux/auto/SNMP/SNMP.so

Relevant use flags:
% emerge -pv net-snmp

These are the packages that I would merge, in order:

Calculating dependencies ...done!
[ebuild     U ] net-analyzer/net-snmp-5.2.2 [5.2.1.2-r1] USE="X doc ipv6 perl ssl tcpd -elf -lm_sensors -minimal -rpm -smux" 0 kB

Comment 1 SpanKY gentoo-dev

2006-01-07 19:41:15 UTC


*** This bug has been marked as a duplicate of 103776 ***