From owner-freebsd-pkg@freebsd.org Mon Jul 31 13:18:03 2017 Return-Path: Delivered-To: freebsd-pkg@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 36026DAD936 for ; Mon, 31 Jul 2017 13:18:03 +0000 (UTC) (envelope-from lifanov@FreeBSD.org) Received: from mail.lifanov.com (mail.lifanov.com [206.125.175.12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 0CF987682B for ; Mon, 31 Jul 2017 13:18:02 +0000 (UTC) (envelope-from lifanov@FreeBSD.org) Received: from lm0.local (rrcs-96-10-213-43.midsouth.biz.rr.com [96.10.213.43]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mail.lifanov.com (Postfix) with ESMTPSA id 91903239A28 for ; Mon, 31 Jul 2017 09:17:56 -0400 (EDT) Subject: Re: A lot of pkg ask to install compat6x-amd64 on current To: freebsd-pkg@freebsd.org References: From: Nikolai Lifanov Message-ID: <347fd6e9-e299-35b2-ada7-573cab3e06af@FreeBSD.org> Date: Mon, 31 Jul 2017 09:17:48 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Thunderbird/52.2.1 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="xchBGPwUC9xESasw0bqdJHP5xV5dIw21R" X-BeenThere: freebsd-pkg@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Binary package management and package tools discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 31 Jul 2017 13:18:03 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --xchBGPwUC9xESasw0bqdJHP5xV5dIw21R Content-Type: multipart/mixed; boundary="hT9R755RwCA2sHXqfrfRIu61rrU2TWoPg"; protected-headers="v1" From: Nikolai Lifanov To: freebsd-pkg@freebsd.org Message-ID: <347fd6e9-e299-35b2-ada7-573cab3e06af@FreeBSD.org> Subject: Re: A lot of pkg ask to install compat6x-amd64 on current References: In-Reply-To: --hT9R755RwCA2sHXqfrfRIu61rrU2TWoPg Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable > On 29/07/2017 11:50, Artyom Mirgorodsky wrote: >> Hi I see that a lot of pkg ask to install compat6x-amd64. But portmast= er >> doesn't require compat6x-amd64. I think this is a bag and possible has= >> security problem as this package is very old >=20 > How are you invoking pkg(8) that you see this requirement for compat6x,= > and what are you seeing that pulls in the compat6x dependency? >=20 > By my count there are 4 ports that depend directly on misc/compat6x. > This does not count any ports that depend on these indirectly: >=20 > % grep -R misc/compat6x * > devel/cscout/Makefile:LIB_DEPENDS+=3D libc.so.6:misc/compat6x > devel/eiffelstudio/Makefile:LIB_DEPENDS=3D libc.so.6:misc/compat6x > lang/cmucl/Makefile:LIB_DEPENDS=3D libc.so.6:misc/compat6x > misc/compat6x/pkg-descr:LIB_DEPENDS+=3D c.6:misc/compat6x > misc/compat6x/Makefile:# $FreeBSD: head/misc/compat6x/Makefile 444437 > 2017-06-27 00:05:15Z linimon $ > security/retranslator/Makefile:LIB_DEPENDS+=3D libm.so:misc/compat6x >=20 > Now, I wouldn't characterize four ports as "a lot", and I certainly > haven't see any ports myself that pull in compat6x on anything I've bee= n > managing recently. >=20 > Anything still requiring compat6x is probably pretty elderly and > unmaintained, but that's a question for ports@. >=20 > Cheers, >=20 > Matthew >=20 I can corroborate: I also have a system where pkg installs compat6x-amd64 on every update and then "pkg autoremove" removes it. There is even a bug open for it: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D220755 - Nikolai --hT9R755RwCA2sHXqfrfRIu61rrU2TWoPg-- --xchBGPwUC9xESasw0bqdJHP5xV5dIw21R Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEE5oT6TcuaWvG5gtjzZ6sv56ecR0UFAll/LgMUHGxpZmFub3ZA ZnJlZWJzZC5vcmcACgkQZ6sv56ecR0XMEBAAopRDMZy6Ih9P7QkvGE5egR3GJqrX rayLLx9BwIw4zahAtivLbUMR4VPiGcA188O6UmbwqIPqn7GRqG+++BWaNK0sE0nQ egoN4riJ3Cjh8VAaxoW6IYVDycQDPmnRch0jVxWGbttqpJ3Fno+dwu+6kZA+dTan e+HPzXfoA3nvP/6l+WR9oH32LDTBoFgUnX0FiVZvZXYeBvIL5NsUS/o3FdOhIXAZ vlTEvSIOdxLc85U4xpAmgV8YkC4B4MLvctKC9QQ18GNIJWX8Ztkzg6AlRTiGuofD 4c3zzZHSNL/uMff8umdkCcjyCzJTPqdoC36BgOl6RelljP+ln99noKkPcOQTqd9g PYx+A038yQFIEjJ2Rhj6NIL2mUxyNroGeMfVkLg1jjGJKtZO1XvGe3f8hMjWub8x Ns2+tPwWxRCBxxqZkO/O8QHfgPI8SxQwkmHxAYX+LR0qsDWtsYcBzfiUXNe479UU 1S1/S8wZizNmHCoxXNQgc/vrSqGTSTYad6jqu72PN/kdyxqMdTQvCLV1Vwc+nZJC tNEKWSTPHbVW08mWzBixa3OM+W2PgCo8Kc9DfOz6W31jL+z9iRXtlsVOwRx3AEks pgFjPH1kFZqRuCQ2s/79iyyIn3pWibTrczvscdQeeONRULhmWBSSzuePYlqJwJu5 pVaNfpas2IwP4E4= =8T97 -----END PGP SIGNATURE----- --xchBGPwUC9xESasw0bqdJHP5xV5dIw21R--