Bug 464254

Summary:	>=media-libs/oyranos-0.9.4 - Insecure RUNPATHs
Product:	Gentoo Linux	Reporter:	Andreas Sturmlechner <asturm>
Component:	[OLD] Library	Assignee:	Michael Weber (RETIRED) <xmw>
Status:	RESOLVED FIXED
Severity:	normal	Keywords:	PATCH
Priority:	Normal
Version:	10.1
Hardware:	All
OS:	Linux
URL:	http://www.oyranos.org/scm?p=oyranos.git;a=commit;h=b8f4a5fe0cea02878de106f5d02751e922438275
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	oyranos-0.9.4-buildsystem-1.patch upstream fix, backported to oyranos-0.9.4

Description Andreas Sturmlechner gentoo-dev

2013-04-02 22:04:26 UTC

Created attachment 344126 [details, diff]
oyranos-0.9.4-buildsystem-1.patch

oyranos git is also affected.


scanelf: rpath_security_checks(): Security problem NULL DT_RPATH in /var/tmp/portage/media-libs/oyranos-9999/image/usr/bin/oyranos-xforms-modules
scanelf: rpath_security_checks(): Security problem NULL DT_RUNPATH in /var/tmp/portage/media-libs/oyranos-9999/image/usr/bin/oyranos-xforms-modules
Auto fixing rpaths for /var/tmp/portage/media-libs/oyranos-9999/image/usr/bin/oyranos-xforms-modules

 * QA Notice: The following files contain insecure RUNPATHs
 *  Please file a bug about this at http://bugs.gentoo.org/
 *  with the maintaining herd of the package.
 *   /var/tmp/portage/media-libs/oyranos-9999/image/usr/bin/oyranos-xforms-modules
 *



Attaching a patch that attempts to fix this. Builds without complaint at least.

Comment 1 Andreas Sturmlechner gentoo-dev

2013-04-03 11:31:00 UTC

Created attachment 344194 [details, diff]
upstream fix, backported to oyranos-0.9.4

Comment 2 Andreas Sturmlechner gentoo-dev

2013-04-24 20:52:18 UTC

Fixed via bug 447246