Bug 753506

Summary:	media-gfx/imagemagick-7.0.10.35 contain insecure RUNPATHs
Product:	Gentoo Linux	Reporter:	Masoch Von Sade <brenosilveira1>
Component:	Current packages	Assignee:	Codec Project <codec>
Status:	RESOLVED FIXED
Severity:	normal	CC:	dilfridge, jstein
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	emerge --info and buid log

Description Masoch Von Sade 2020-11-07 18:53:29 UTC

Issue: package media-gfx/imagemagick installs files that contain insecure RUNPATHs.
Discovered on: amd64

* Messages for package media-gfx/imagemagick-7.0.10.35:
 * Log file: /var/log/portage/build/media-gfx/imagemagick-7.0.10.35:20201107-183301.log

 * Package:    media-gfx/imagemagick-7.0.10.35
 * Repository: gentoo
 * Maintainer: dilfridge@gentoo.org
 * USE:        X abi_x86_64 amd64 bzip2 cxx elibc_glibc jpeg kernel_linux lcms openmp pango perl png userland_GNU zlib
 * FEATURES:   network-sandbox preserve-libs sandbox userpriv usersandbox
 * policy.xml hardened
 * Skipping make test/check due to ebuild restriction.
 * Final size of build directory: 92396 KiB (90.2 MiB)
 * Final size of installed tree:  26536 KiB (25.9 MiB)
 * QA Notice: The following files contain insecure RUNPATHs
 *  Please file a bug about this at https://bugs.gentoo.org/
 *  with the maintainer of the package.
 *   /var/tmp/portage/media-gfx/imagemagick-7.0.10.35/image/usr/lib64/perl5/vendor_perl/5.30.3/x86_64-linux-thread-multi/auto/Image/Magick/Q16/Q16.so
 *     RPATH: /var/tmp/portage/media-gfx/imagemagick-7.0.10.35/work/ImageMagick-7.0.10-35/PerlMagick/quantum/../../MagickCore/.libs:/usr/lib64
 *

Comment 1 Masoch Von Sade 2020-11-07 18:57:54 UTC

Created attachment 670349 [details]
emerge --info and buid log

Comment 2 Masoch Von Sade 2020-11-07 19:12:00 UTC

Comment on attachment 670349 [details]
emerge --info and buid log

I couldn't upload the build log because the file have 1.3 mb.

Comment 3 Andreas K. Hüttel archtester

2022-03-04 23:16:29 UTC

This seems to be fixed in 7.1