Perl 5.8.5-r4 to 5.8.7-r3 upgrade fails - Insecure Binaries

Message

DannoNZ · Post by **DannoNZ** » Sat Mar 25, 2006 2:54 pm

I've been searching the forums and other sources for a while, and have noticed people with similar issues - but most of them are people who already have 5.8.7 of perl installed, and are trying to install subversion.... I'm trying to get towards starting to install subversion, but the problem occurs on the upgrade of perl.

*lots* of scanelf stuff here, let me know if you'd like me to post all of it, here's the very tail:
scanelf: rpath_security_checks(): Security problem NULL DT_RPATH in /var/tmp/portage/perl-5.8.7-r3/image//usr/lib/perl5/5.8.7/i686-linux/auto/re/re.so
scanelf: rpath_security_checks(): Security problem NULL DT_RUNPATH in /var/tmp/portage/perl-5.8.7-r3/image//usr/lib/perl5/5.8.7/i686-linux/auto/re/re.so
scanelf: rpath_security_checks(): Security problem NULL DT_RPATH in /var/tmp/portage/perl-5.8.7-r3/image//usr/lib/perl5/5.8.7/i686-linux/auto/threads/threads.so
scanelf: rpath_security_checks(): Security problem NULL DT_RUNPATH in /var/tmp/portage/perl-5.8.7-r3/image//usr/lib/perl5/5.8.7/i686-linux/auto/threads/threads.so
scanelf: rpath_security_checks(): Security problem NULL DT_RPATH in /var/tmp/portage/perl-5.8.7-r3/image//usr/lib/perl5/5.8.7/i686-linux/auto/threads/shared/shared.so
scanelf: rpath_security_checks(): Security problem NULL DT_RUNPATH in /var/tmp/portage/perl-5.8.7-r3/image//usr/lib/perl5/5.8.7/i686-linux/auto/threads/shared/shared.so

QA Notice: the following files contain insecure RUNPATH's
Please file a bug about this at http://bugs.gentoo.org/
For more information on this issue, kindly review:
http://bugs.gentoo.org/81745
usr/lib/perl5/5.8.7/i686-linux/auto/B/B.so
usr/lib/perl5/5.8.7/i686-linux/auto/B/C/C.so
usr/lib/perl5/5.8.7/i686-linux/auto/ByteLoader/ByteLoader.so
usr/lib/perl5/5.8.7/i686-linux/auto/Cwd/Cwd.so
usr/lib/perl5/5.8.7/i686-linux/auto/Data/Dumper/Dumper.so
usr/lib/perl5/5.8.7/i686-linux/auto/Devel/DProf/DProf.so
usr/lib/perl5/5.8.7/i686-linux/auto/Devel/PPPort/PPPort.so
usr/lib/perl5/5.8.7/i686-linux/auto/Devel/Peek/Peek.so
usr/lib/perl5/5.8.7/i686-linux/auto/Digest/MD5/MD5.so
usr/lib/perl5/5.8.7/i686-linux/auto/Encode/Encode.so
usr/lib/perl5/5.8.7/i686-linux/auto/Encode/Byte/Byte.so
usr/lib/perl5/5.8.7/i686-linux/auto/Encode/CN/CN.so
usr/lib/perl5/5.8.7/i686-linux/auto/Encode/EBCDIC/EBCDIC.so
usr/lib/perl5/5.8.7/i686-linux/auto/Encode/JP/JP.so
usr/lib/perl5/5.8.7/i686-linux/auto/Encode/KR/KR.so
usr/lib/perl5/5.8.7/i686-linux/auto/Encode/Symbol/Symbol.so
usr/lib/perl5/5.8.7/i686-linux/auto/Encode/TW/TW.so
usr/lib/perl5/5.8.7/i686-linux/auto/Encode/Unicode/Unicode.so
usr/lib/perl5/5.8.7/i686-linux/auto/Fcntl/Fcntl.so
usr/lib/perl5/5.8.7/i686-linux/auto/File/Glob/Glob.so
usr/lib/perl5/5.8.7/i686-linux/auto/Filter/Util/Call/Call.so
usr/lib/perl5/5.8.7/i686-linux/auto/I18N/Langinfo/Langinfo.so
usr/lib/perl5/5.8.7/i686-linux/auto/IO/IO.so
usr/lib/perl5/5.8.7/i686-linux/auto/IPC/SysV/SysV.so
usr/lib/perl5/5.8.7/i686-linux/auto/List/Util/Util.so
usr/lib/perl5/5.8.7/i686-linux/auto/MIME/Base64/Base64.so
usr/lib/perl5/5.8.7/i686-linux/auto/Opcode/Opcode.so
usr/lib/perl5/5.8.7/i686-linux/auto/POSIX/POSIX.so
usr/lib/perl5/5.8.7/i686-linux/auto/PerlIO/encoding/encoding.so
usr/lib/perl5/5.8.7/i686-linux/auto/PerlIO/scalar/scalar.so
usr/lib/perl5/5.8.7/i686-linux/auto/PerlIO/via/via.so
usr/lib/perl5/5.8.7/i686-linux/auto/SDBM_File/SDBM_File.so
usr/lib/perl5/5.8.7/i686-linux/auto/Socket/Socket.so
usr/lib/perl5/5.8.7/i686-linux/auto/Storable/Storable.so
usr/lib/perl5/5.8.7/i686-linux/auto/Sys/Hostname/Hostname.so
usr/lib/perl5/5.8.7/i686-linux/auto/Sys/Syslog/Syslog.so
usr/lib/perl5/5.8.7/i686-linux/auto/Time/HiRes/HiRes.so
usr/lib/perl5/5.8.7/i686-linux/auto/Unicode/Normalize/Normalize.so
usr/lib/perl5/5.8.7/i686-linux/auto/XS/APItest/APItest.so
usr/lib/perl5/5.8.7/i686-linux/auto/XS/Typemap/Typemap.so
usr/lib/perl5/5.8.7/i686-linux/auto/attrs/attrs.so
usr/lib/perl5/5.8.7/i686-linux/auto/re/re.so
usr/lib/perl5/5.8.7/i686-linux/auto/threads/threads.so
usr/lib/perl5/5.8.7/i686-linux/auto/threads/shared/shared.so

!!! ERROR: dev-lang/perl-5.8.7-r3 failed.
!!! Function dyn_install, Line 1057, Exitcode 0
!!! Insecure binaries detected
!!! If you need support, post the topmost build error, NOT this status message.

Regarding one suggested fix already:
localhost perl # emerge unmerge ExtUtils-MakeMaker

--- Couldn't find ExtUtils-MakeMaker to unmerge.

>>> unmerge: No packages selected for removal.

For reference:
localhost perl # emerge -p perl

These are the packages that I would merge, in order:

Calculating dependencies ...done!
[ebuild U ] dev-lang/perl-5.8.7-r3 [5.8.5-r4]

I've tried 5.8.6-r6 instead, with the same sort of error messages resulting...

Any suggestions?

thundersteele · Post by **thundersteele** » Sun Mar 26, 2006 10:20 pm

same problem here, updating from 5.8.5

Maedhros · Post by **Maedhros** » Mon Mar 27, 2006 7:18 am

File a bug report.

thundersteele · Post by **thundersteele** » Mon Mar 27, 2006 8:47 am

Solution:

Upgrade to ~x86 portage (2.1 something) solves the problem

It seems to solve most (if not all) insecure RUNPATH problems, so perhaps there should be a sticky until the new portage becomes stable.

DannoNZ · Post by **DannoNZ** » Mon Mar 27, 2006 9:10 am

thundersteele wrote:Solution:

Upgrade to ~x86 portage (2.1 something) solves the problem

It seems to solve most (if not all) insecure RUNPATH problems, so perhaps there should be a sticky until the new portage becomes stable.

I considered this, but I take it there's a reason why this is still marked as unstable...

jancha · Post by **jancha** » Tue Apr 04, 2006 5:06 am

yes. upgraded portage really helped. bad, though, that couple of hours went to knowhere