117926 – Subversion 1.3.0 insecure RPATHS

Bug 117926 - Subversion 1.3.0 insecure RPATHS

Summary: Subversion 1.3.0 insecure RPATHS

Status:	RESOLVED DUPLICATE of bug 105054

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	x86 Linux

Importance:	Normal normal (vote)
Assignee:	Gentoo Security

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2006-01-05 12:46 UTC by Troy Telford
Modified:	2011-10-30 22:38 UTC (History)
CC List:	0 users

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Troy Telford 2006-01-05 12:46:42 UTC

SVN 1.3.0 fails to emerge (on x86).  Note, however, I've emerged SVN 1.3.0 with no issues on multiple amd64 (opteron) systems.

Emerge output follows:  (No idea /how/ the path became so long...)
***
making executable: /usr/lib/libsvn_swig_py-1.so.0.0.0
making executable: /usr/lib/libsvn_wc-1.so.0.0.0
making executable: /usr/lib/libsvnjavahl-1.so.0.0.0


QA Notice: the following files contain insecure RUNPATH''s
 Please file a bug about this at http://bugs.gentoo.org/
 For more information on this issue, kindly review:
 http://bugs.gentoo.org/81745
/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_client/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_delta/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_fs/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_ra/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_repos/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_wc/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_diff/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_subr/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/bindings/swig/perl/libsvn_swig_perl/.libs usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/SVN/_Fs/_Fs.so
/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_client/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_delta/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_fs/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_ra/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_repos/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_wc/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_diff/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_subr/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/bindings/swig/perl/libsvn_swig_perl/.libs usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/SVN/_Ra/_Ra.so
/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_client/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_delta/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_fs/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_ra/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_repos/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_wc/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_diff/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_subr/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/bindings/swig/perl/libsvn_swig_perl/.libs usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/SVN/_Wc/_Wc.so
/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_client/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_delta/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_fs/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_ra/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_repos/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_wc/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_diff/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_subr/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/bindings/swig/perl/libsvn_swig_perl/.libs usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/SVN/_Core/_Core.so
/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_client/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_delta/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_fs/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_ra/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_repos/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_wc/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_diff/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_subr/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/bindings/swig/perl/libsvn_swig_perl/.libs usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/SVN/_Delta/_Delta.so
/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_client/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_delta/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_fs/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_ra/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_repos/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_wc/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_diff/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_subr/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/bindings/swig/perl/libsvn_swig_perl/.libs usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/SVN/_Repos/_Repos.so
/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_client/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_delta/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_fs/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_ra/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_repos/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_wc/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_diff/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/libsvn_subr/.libs:/var/tmp/portage/subversion-1.3.0/work/subversion-1.3.0/subversion/bindings/swig/perl/libsvn_swig_perl/.libs usr/lib/perl5/vendor_perl/5.8.6/i686-linux/auto/SVN/_Client/_Client.so


!!! ERROR: dev-util/subversion-1.3.0 failed.
!!! Function dyn_install, Line 1057, Exitcode 0
!!! Insecure binaries detected
!!! If you need support, post the topmost build error, NOT this status message.

***

Comment 1 Troy Telford 2006-01-05 12:48:14 UTC

Adding blocker to 81745, as instructed in #81745, Comment #53

http://bugs.gentoo.org/show_bug.cgi?id=81745#c53

Comment 2 SpanKY gentoo-dev

2006-01-05 16:55:11 UTC


*** This bug has been marked as a duplicate of 105054 ***