Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 118245 - net-snmp contains insecure RUNPATH/RPATH
Summary: net-snmp contains insecure RUNPATH/RPATH
Status: RESOLVED DUPLICATE of bug 103776
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Runpath Issues (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Gentoo Security
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2006-01-07 19:39 UTC by Alan Strohm
Modified: 2006-01-07 19:41 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Alan Strohm 2006-01-07 19:39:12 UTC 
scanelf: rpath_security_checks(): Security problem NULL RPATH in /var/tmp/portage/net-snmp-5.2.2/image//usr/lib/perl5/site_perl/5.8.7/x86_64-linux/auto/NetSNMP/TrapReceiver/TrapReceiver.so
scanelf: rpath_security_checks(): Security problem NULL RPATH in /var/tmp/portage/net-snmp-5.2.2/image//usr/lib/perl5/site_perl/5.8.7/x86_64-linux/auto/NetSNMP/TrapReceiver/TrapReceiver.so

QA Notice: the following files contain insecure RUNPATH's
 Please file a bug about this at http://bugs.gentoo.org/
 For more information on this issue, kindly review:
 http://bugs.gentoo.org/81745
/var/tmp/portage/net-snmp-5.2.2/work/net-snmp-5.2.2/perl/default_store/../../snmplib/.libs:/usr/lib64 usr/lib/perl5/site_perl/5.8.7/x86_64-linux/auto/NetSNMP/default_store/default_store.so
/var/tmp/portage/net-snmp-5.2.2/work/net-snmp-5.2.2/perl/ASN/../../snmplib/.libs:/usr/lib64 usr/lib/perl5/site_perl/5.8.7/x86_64-linux/auto/NetSNMP/ASN/ASN.so
/var/tmp/portage/net-snmp-5.2.2/work/net-snmp-5.2.2/perl/OID/../../snmplib/.libs:/usr/lib64 usr/lib/perl5/site_perl/5.8.7/x86_64-linux/auto/NetSNMP/OID/OID.so
/var/tmp/portage/net-snmp-5.2.2/work/net-snmp-5.2.2/perl/agent/../../agent/.libs:/var/tmp/portage/net-snmp-5.2.2/work/net-snmp-5.2.2/perl/agent/../../agent/helpers/.libs:/var/tmp/portage/net-snmp-5.2.2/work/net-snmp-5.2.2/perl/agent/../../snmplib/.libs:/usr/lib64 usr/lib/perl5/site_perl/5.8.7/x86_64-linux/auto/NetSNMP/agent/agent.so
/var/tmp/portage/net-snmp-5.2.2/work/net-snmp-5.2.2/perl/agent/default_store/../../../snmplib/.libs:/usr/lib64 usr/lib/perl5/site_perl/5.8.7/x86_64-linux/auto/NetSNMP/agent/default_store/default_store.so
/var/tmp/portage/net-snmp-5.2.2/work/net-snmp-5.2.2/perl/SNMP/../../snmplib/.libs:/usr/lib64 usr/lib/perl5/site_perl/5.8.7/x86_64-linux/auto/SNMP/SNMP.so

Relevant use flags:
% emerge -pv net-snmp

These are the packages that I would merge, in order:

Calculating dependencies ...done!
[ebuild     U ] net-analyzer/net-snmp-5.2.2 [5.2.1.2-r1] USE="X doc ipv6 perl ssl tcpd -elf -lm_sensors -minimal -rpm -smux" 0 kB
Comment 1 SpanKY gentoo-dev 2006-01-07 19:41:15 UTC 

*** This bug has been marked as a duplicate of 103776 ***