From owner-freebsd-gnome@FreeBSD.ORG  Sat Jan 31 06:08:21 2004
Return-Path: <owner-freebsd-gnome@FreeBSD.ORG>
Delivered-To: freebsd-gnome@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id D275C16A4CE; Sat, 31 Jan 2004 06:08:21 -0800 (PST)
Received: from mail.dt.e-technik.uni-dortmund.de
	(krusty.dt.E-Technik.Uni-Dortmund.DE [129.217.163.1])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id D0BD243D2D; Sat, 31 Jan 2004 06:08:20 -0800 (PST)
	(envelope-from matthias.andree@gmx.de)
Received: from m2a2.dyndns.org (krusty.dt.e-technik.uni-dortmund.de
	[129.217.163.1])D9F2A1BD19;	Sat, 31 Jan 2004 15:08:19 +0100 (CET)
Received: from libertas.emma.line.org (libertas.emma.line.org [192.168.0.2])
	by merlin.emma.line.org (Postfix) with ESMTP id 1337E1AA4;
	Sat, 31 Jan 2004 15:08:18 +0100 (CET)
Received: from emma by libertas.emma.line.org with local (Exim 4.30; FreeBSD)
	id 1AmvnF-0009fU-LT; Sat, 31 Jan 2004 15:08:17 +0100
To: FreeBSD-gnats-submit@freebsd.org, gnome@freebsd.org
From: Matthias Andree <matthias.andree@gmx.de>
X-send-pr-version: 3.113
X-GNATS-Notify: 
Message-Id: <E1AmvnF-0009fU-LT@libertas.emma.line.org>
Date: Sat, 31 Jan 2004 15:08:17 +0100
cc: gnome@freebsd.org
Subject: untrusted RPATH in xmlcatalog 
X-BeenThere: freebsd-gnome@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: Matthias Andree <matthias.andree@gmx.de>
List-Id: GNOME for FreeBSD -- porting and maintaining
	<freebsd-gnome.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-gnome>,
	<mailto:freebsd-gnome-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-gnome>
List-Post: <mailto:freebsd-gnome@freebsd.org>
List-Help: <mailto:freebsd-gnome-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-gnome>,
	<mailto:freebsd-gnome-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 31 Jan 2004 14:08:22 -0000


>Submitter-Id:	current-users
>Originator:	Matthias Andree
>Organization:	
>Confidential:	no 
>Synopsis:	untrusted RPATH in xmlcatalog 
>Severity:	serious 
>Priority:	low 
>Category:	ports 
>Class:		sw-bug 
>Release:	FreeBSD 4.9-STABLE i386
>Environment:
System: FreeBSD libertas.emma.line.org 4.9-STABLE FreeBSD 4.9-STABLE #78: Wed Jan 28 22:34:32 CET 2004 toor@libertas.emma.line.org:/usr/src/sys/compile/LIBERTAS i386


	
>Description:
The libxml2 port installs lib/python2.3/site-packages/libxml2mod.so 
which lists
/usr/ports/textproc/libxml2/work/libxml2-2.6.5/.libs in its RPATH.
This shouldn't happen.

	
>How-To-Repeat:
install libxml2 package
readelf -d /usr/local/lib/python2.3/site-packages/libxml2mod.so | grep RPATH
	
>Fix: