Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 124297 - mupad-2.5.2-r2 insecure runpaths
Summary: mupad-2.5.2-r2 insecure runpaths
Status: RESOLVED DUPLICATE of bug 115892
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Runpath Issues (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Gentoo Security
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2006-02-27 12:54 UTC by R. May
Modified: 2006-03-01 08:08 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description R. May 2006-02-27 12:54:16 UTC
emerge mupad -pv

These are the packages that I would merge, in order:

Calculating dependencies ...done!
[ebuild   R   ] sci-mathematics/mupad-2.5.2-r2  -mupad-noscilab 0 kB


Calculating dependencies ...done!
>>> emerge (1 of 1) sci-mathematics/mupad-2.5.2-r2 to /
>>> md5 files   ;-) mupad-2.5.2-r2.ebuild
>>> md5 files   ;-) files/digest-mupad-2.5.2-r2
>>> md5 src_uri ;-) linux_libs.tgz
>>> md5 src_uri ;-) share_252.tgz
>>> md5 src_uri ;-) bin_linux_scilab_252.tgz
>>> md5 src_uri ;-) docpatch25x.tgz
>>> Unpacking source...
>>> Source unpacked.
>>> Test phase [not enabled]: sci-mathematics/mupad-2.5.2-r2

>>> Install mupad-2.5.2-r2 into /var/tmp/portage/mupad-2.5.2-r2/image/ category sci-mathematics
 * Unpacking binary distribution ...
 *   - Creating container directory ...
 *   - Unpacking common files ...
 *   - Unpacking Linux binaries for MuPAD and Scilab ...
 *   - Unpacking support libs for Linux binaries ...
 * Unpacking documentation patch for version 2.5.2 ...
 * Making wrapper scripts for executables ...
 *   - mupad
 *   - xmupad
man:
scanelf: rpath_security_checks(): Security problem NULL DT_RPATH in /var/tmp/portage/mupad-2.5.2-r2/image//usr/lib/mupad/linux/bin/mmg
scanelf: rpath_security_checks(): Security problem NULL DT_RPATH in /var/tmp/portage/mupad-2.5.2-r2/image//usr/lib/mupad/linux/bin/mupad
scanelf: rpath_security_checks(): Security problem NULL DT_RPATH in /var/tmp/portage/mupad-2.5.2-r2/image//usr/lib/mupad/linux/bin/mxdvi
scanelf: rpath_security_checks(): Security problem NULL DT_RPATH in /var/tmp/portage/mupad-2.5.2-r2/image//usr/lib/mupad/linux/bin/libkpathsea.so
scanelf: rpath_security_checks(): Security problem NULL DT_RPATH in /var/tmp/portage/mupad-2.5.2-r2/image//usr/lib/mupad/linux/bin/mxvcam
scanelf: rpath_security_checks(): Security problem NULL DT_RPATH in /var/tmp/portage/mupad-2.5.2-r2/image//usr/lib/mupad/linux/bin/mxmupad
scanelf: rpath_security_checks(): Security problem NULL DT_RPATH in /var/tmp/portage/mupad-2.5.2-r2/image//usr/lib/mupad/linux/modules/cdebug.mdm
scanelf: rpath_security_checks(): Security problem NULL DT_RPATH in /var/tmp/portage/mupad-2.5.2-r2/image//usr/lib/mupad/linux/modules/stdmod.mdm
scanelf: rpath_security_checks(): Security problem NULL DT_RPATH in /var/tmp/portage/mupad-2.5.2-r2/image//usr/lib/mupad/linux/modules/fetch.mdm
scanelf: rpath_security_checks(): Security problem NULL DT_RPATH in /var/tmp/portage/mupad-2.5.2-r2/image//usr/lib/mupad/linux/modules/util.mdm
scanelf: rpath_security_checks(): Security problem NULL DT_RPATH in /var/tmp/portage/mupad-2.5.2-r2/image//usr/lib/mupad/linux/modules/shell.mdm
scanelf: rpath_security_checks(): Security problem NULL DT_RPATH in /var/tmp/portage/mupad-2.5.2-r2/image//usr/lib/mupad/packages/scilab/modules/linux/scilab.mdm

QA Notice: the following files contain insecure RUNPATH's
 Please file a bug about this at http://bugs.gentoo.org/
 For more information on this issue, kindly review:
 http://bugs.gentoo.org/81745
/wiwianka/user/cube/gcc-3/linux/lib: usr/lib/mupad/linux/bin/mmg
/wiwianka/user/cube/gcc-3/linux/lib: usr/lib/mupad/linux/bin/mupad
/wiwianka/user/cube/gcc-3/linux/lib: usr/lib/mupad/linux/bin/mxdvi
/wiwianka/user/cube/gcc-3/linux/lib: usr/lib/mupad/linux/bin/libkpathsea.so
/wiwianka/user/cube/gcc-3/linux/lib: usr/lib/mupad/linux/bin/mxvcam
/wiwianka/user/cube/gcc-3/linux/lib: usr/lib/mupad/linux/bin/mxmupad
/wiwianka/user/cube/gcc-3/linux/lib: usr/lib/mupad/linux/modules/cdebug.mdm
/wiwianka/user/cube/gcc-3/linux/lib: usr/lib/mupad/linux/modules/stdmod.mdm
/wiwianka/user/cube/gcc-3/linux/lib: usr/lib/mupad/linux/modules/fetch.mdm
/wiwianka/user/cube/gcc-3/linux/lib: usr/lib/mupad/linux/modules/util.mdm
/wiwianka/user/cube/gcc-3/linux/lib: usr/lib/mupad/linux/modules/shell.mdm
Comment 1 Stefan Cornelius (RETIRED) gentoo-dev 2006-02-28 08:14:10 UTC
sci team, could you please verify this and fix it if needed?
Comment 2 Markus Dittrich (RETIRED) gentoo-dev 2006-02-28 14:26:30 UTC
Hi Stefan,

mupad is masked because of this (see #115892). Upstream has been
contacted but not responded. Since it is a binary package there's nothing
I can do at this point besides continuing to send them emails once in a while.
Sorry!

Thanks,
Markus
Comment 3 Stefan Cornelius (RETIRED) gentoo-dev 2006-03-01 08:08:29 UTC
Thanks Markus, marking this as duplicate. Blah, thats a good example why I hate non-free licences :/

*** This bug has been marked as a duplicate of 115892 ***