Bug 125791

Summary:	Insecure RPATH: dev-ruby/ruby-gtk2-0.14.1
Product:	Gentoo Security	Reporter:	Craig Andrews <candrews>
Component:	Runpath Issues	Assignee:	Gentoo Ruby Team <ruby>
Status:	RESOLVED WORKSFORME
Severity:	normal
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:
Bug Blocks:	81745

Description Craig Andrews gentoo-dev

2006-03-10 22:39:15 UTC

Merging dev-ruby/ruby-gtk2-0.14.1 failed with the following:
QA Notice: the following files contain insecure RUNPATH's
 Please file a bug about this at http://bugs.gentoo.org/
 For more information on this issue, kindly review:
 http://bugs.gentoo.org/81745
/var/tmp/portage/ruby-gtk2-0.14.1/image//usr/lib usr/lib/ruby/site_ruby/1.8/i686-linux/gtk2.so


!!! ERROR: dev-ruby/ruby-gtk2-0.14.1 failed.
Call stack:
  ebuild.sh, line 1933:   Called dyn_install

!!! Aborting due to serious QA concerns with RUNPATH/RPATH

Comment 1 Jakub Moc (RETIRED) gentoo-dev

2006-09-21 03:52:10 UTC

No longer a security issue with current stable portage (see Bug 124962), re-assigning to maintainer.

Comment 2 Nguyen Thai Ngoc Duy (RETIRED) gentoo-dev

2006-09-30 12:16:56 UTC

I can't reproduce this. Could you please post your 'emerge --info' along with version numbers of ruby and rubygems?

Comment 3 Craig Andrews gentoo-dev

2006-10-01 18:59:40 UTC

I haven't tried to emerge this package again until now, and now it works. I have no idea what changed, or what fixed it, but this error no longer occurs.

Thanks bug trackers for looking into this, though.