(sorry, in the first version of this mail the Cc was to [EMAIL PROTECTED]
instead of the bugnumber)
Bill Allombert <[EMAIL PROTECTED]> wrote:
> Package: yacas
> Version: 1.0.57-2.4
> Severity: serious
> Tags: security
>
> Hello Gopal,
> yacas includes a binary with a rpath pointing to /tmp/yacas/usr/bin/yacas.
>
> chrpath /usr/bin/yacas
> /usr/bin/yacas: RPATH=/tmp/buildd/yacas-1.0.57/debian/yacas/usr/lib
I tried to fix this by removing all instances of "-rpath $(libdir)" or
"-rpath $(pkglibdir)" in the Makefile.in's that are generated by calling
./makemake:
RPATH_SED_MAKEFILES = src/Makefile.in libltdl/Makefile.in
plugins/example/Makefile.in \
plugins/filescanner/Makefile.in plugins/forth/Makefile.in
plugins/opengl/Makefile.in \
plugins/pcre/Makefile.in plugins/yacas_gsl/Makefile.in
for file in $(RPATH_SED_MAKEFILES); do \
echo "Fixing rpath options in $${file}"; \
sed -i -e 's/-rpath \$$(libdir)//;s/-rpath \$$(pkglibdir)//' $$file;
\
done
However, this does not work, the resulting package FTBFS with a strange
error:
make[3]: Entering directory `/tmp/buildd/yacas-1.0.57/src'
test -z "/tmp/buildd/yacas-1.0.57/debian/yacas/usr/lib" || mkdir -p --
"/tmp/buildd/yacas-1.0.57/debian/yacas/usr/lib"
/bin/sh ../libtool --mode=install /usr/bin/install -c 'libyacas.la'
'/tmp/buildd/yacas-1.0.57/debian/yacas/usr/lib/lib
yacas.la'
/usr/bin/install -c .libs/libyacas.lai
/tmp/buildd/yacas-1.0.57/debian/yacas/usr/lib/libyacas.la
/usr/bin/install: cannot stat `.libs/libyacas.lai': No such file or directory
No idea where the "i" after libyacas.la is coming from.
On the other hand, I'm unsure whether it's necessary to run ./makemake
(in other words, aclocal, autoheader, automake and autoconf) at all.
Regards, Frank
--
Dr. Frank Küster
Single Molecule Spectroscopy, Protein Folding @ Inst. f. Biochemie, Univ. Zürich
Debian Developer (teTeX/TeXLive)
