Bugzilla – Bug 1109470
noarch post-build-checks contains arch-dependent /etc/suse-ignored-rpaths.conf
Last modified: 2023-04-06 09:20:12 UTC
When using osc build to build zziplib or 4ti2 (or ~760 others) it can happen that in build-root there is cat /etc/suse-ignored-rpaths.conf /usr/lib /usr/local/lib lib /usr/lib/Xaw3d /usr/x86_64-suse-linux/lib /opt/kde3/lib instead of /usr/lib64 /usr/local/lib64 lib64 /usr/lib64/Xaw3d /usr/x86_64-suse-linux/lib /opt/kde3/lib64 This is related to https://github.com/openSUSE/open-build-service/issues/5784 This caused local `osc build` to produce binaries with readelf -aW showing an extra 0x000000000000001d (RUNPATH) Library runpath: [/usr/lib64] IMHO /etc/suse-ignored-rpaths.conf should not be in a noarch package. We could split it off into an arch-dependent package and Require it in post-build-checks (or somewhere else)
Or it could simply include both lib and lib64...
Proposing https://github.com/openSUSE/post-build-checks/pull/23 as part of a fix. are lines 4 and 5 in there really a good thing?
This is an autogenerated message for OBS integration: This bug (1109470) was mentioned in https://build.opensuse.org/request/show/642056 Factory / post-build-checks
This now reached Factory, but can we also get it into SLE-15 (mostly for SP1). The alternative would be to change the order of archs so that x86_64 is first like it is in Factory. Few people care about i586 today.
SUSE-RU-2019:0373-1: An update that has one recommended fix can now be installed. Category: recommended (moderate) Bug References: 1109470 CVE References: Sources used: SUSE Linux Enterprise Module for Development Tools 15 (src): post-build-checks-84.88+git20181015.ceb5c96-3.4.1
openSUSE-RU-2019:0222-1: An update that has one recommended fix can now be installed. Category: recommended (moderate) Bug References: 1109470 CVE References: Sources used: openSUSE Leap 15.0 (src): post-build-checks-84.88+git20181015.ceb5c96-lp150.2.3.1
Fix is in Factory and likely also helped those packages that were rebuilt for SLE-15-SP1 - tested OK with zypper and nginx