Summary: | dev-libs/libiconv has an RPATH starting with $PORTAGE_TMPDIR value (similar to GLSA 200503-01) | ||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|
Product: | Gentoo Security | Reporter: | René Rhéaume (a.k.a. repzilon, rener) <rene.rheaume> | ||||||||
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> | ||||||||
Status: | RESOLVED FIXED | ||||||||||
Severity: | major | CC: | flameeyes, spb | ||||||||
Priority: | High | ||||||||||
Version: | unspecified | ||||||||||
Hardware: | x86 | ||||||||||
OS: | All | ||||||||||
Whiteboard: | ~3 [noglsa] jaervosz | ||||||||||
Package list: | Runtime testing required: | --- | |||||||||
Bug Depends on: | |||||||||||
Bug Blocks: | 81745 | ||||||||||
Attachments: |
|
Description
René Rhéaume (a.k.a. repzilon, rener)
2005-04-29 11:52:44 UTC
I originnaly thought a dosed or a patch would do the trick. Unfortunately, this issue more arcane. I found out that if libiconv was not installed (whether never on unmerged prior to emerging), the iconv executable will contain an RPATH. But if I emerge again without prior unmerging (a rebuild), RPATH is gone! Created attachment 57629 [details, diff]
libiconv-1.9.2-chrpath-ebuild.patch
This patch makes use of the chrpath command to remove the rpath in the
src_install() phase. chrpath is tiny (13k)
I'm going to test if chrpath works on g/fbsd, if it doesn't we need to find a new way to handle this. Please next time cc me as I'm libiconv's maintainer. Seems like the problem isn't there on g/fbsd but just on linux. Need KERNEL USE_EXPANDED to fix this, really need that ASAP now. Added a new revision which uses chrpath unconditionally but is masked on fbsd, waiting to have KERNEL in USE_EXPAND. Added sparc to cc as I had to drop ~sparc keyword as it misses chrpath. cant we fix this without resorting to chrpath ? Diego, we normally CC people on any security bugs as soon as it gets wrangled, which is now. Solar was just faster than me this time around. Created attachment 57664 [details, diff]
libiconv-1.9.2-RPATH-fix.patch
Whoever added the libtool support should be shot.
Created attachment 57666 [details, diff]
libiconv-1.9.2-RPATH-fix-2.patch
This works also if you want the more minimal solution.
Thanks I've added your patch and libiconv is happy both on linux and fbsd. It also has again the ~sparc keyword. As this is unstable -> closing with NO GLSA. |