From owner-freebsd-pkg@freebsd.org Mon Jul 31 13:34:25 2017 Return-Path: Delivered-To: freebsd-pkg@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 1A0D3DAE21A for ; Mon, 31 Jul 2017 13:34:25 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [81.2.117.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 9A62E7742A for ; Mon, 31 Jul 2017 13:34:24 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from liminal.local (unknown [IPv6:2001:8b0:151:1:1c1d:86a1:a200:b700]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: m.seaman@infracaninophile.co.uk) by smtp.infracaninophile.co.uk (Postfix) with ESMTPSA id DD71157B0 for ; Mon, 31 Jul 2017 13:34:21 +0000 (UTC) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=FreeBSD.org Authentication-Results: smtp.infracaninophile.co.uk/DD71157B0; dkim=none; dkim-atps=neutral Subject: Re: A lot of pkg ask to install compat6x-amd64 on current To: freebsd-pkg@freebsd.org References: <347fd6e9-e299-35b2-ada7-573cab3e06af@FreeBSD.org> From: Matthew Seaman Message-ID: Date: Mon, 31 Jul 2017 14:34:13 +0100 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Thunderbird/52.2.1 MIME-Version: 1.0 In-Reply-To: <347fd6e9-e299-35b2-ada7-573cab3e06af@FreeBSD.org> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="4XWqemgGhVRVfv9MqIHTnkIKrP80pRMiE" X-BeenThere: freebsd-pkg@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Binary package management and package tools discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 31 Jul 2017 13:34:25 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --4XWqemgGhVRVfv9MqIHTnkIKrP80pRMiE Content-Type: multipart/mixed; boundary="89WtQEp21J382GJ5l3HDpEJbVavbFkWSl"; protected-headers="v1" From: Matthew Seaman To: freebsd-pkg@freebsd.org Message-ID: Subject: Re: A lot of pkg ask to install compat6x-amd64 on current References: <347fd6e9-e299-35b2-ada7-573cab3e06af@FreeBSD.org> In-Reply-To: <347fd6e9-e299-35b2-ada7-573cab3e06af@FreeBSD.org> --89WtQEp21J382GJ5l3HDpEJbVavbFkWSl Content-Type: text/plain; charset=utf-8 Content-Language: en-GB Content-Transfer-Encoding: quoted-printable On 31/07/2017 14:17, Nikolai Lifanov wrote: >> On 29/07/2017 11:50, Artyom Mirgorodsky wrote: >>> Hi I see that a lot of pkg ask to install compat6x-amd64. But portmas= ter >>> doesn't require compat6x-amd64. I think this is a bag and possible ha= s >>> security problem as this package is very old >> >> How are you invoking pkg(8) that you see this requirement for compat6x= , >> and what are you seeing that pulls in the compat6x dependency? >> >> By my count there are 4 ports that depend directly on misc/compat6x. >> This does not count any ports that depend on these indirectly: >> >> % grep -R misc/compat6x * >> devel/cscout/Makefile:LIB_DEPENDS+=3D libc.so.6:misc/compat6x >> devel/eiffelstudio/Makefile:LIB_DEPENDS=3D libc.so.6:misc/compat6x >> lang/cmucl/Makefile:LIB_DEPENDS=3D libc.so.6:misc/compat6x >> misc/compat6x/pkg-descr:LIB_DEPENDS+=3D c.6:misc/compat6x >> misc/compat6x/Makefile:# $FreeBSD: head/misc/compat6x/Makefile 444437 >> 2017-06-27 00:05:15Z linimon $ >> security/retranslator/Makefile:LIB_DEPENDS+=3D libm.so:misc/compat6x >> >> Now, I wouldn't characterize four ports as "a lot", and I certainly >> haven't see any ports myself that pull in compat6x on anything I've be= en >> managing recently. >> >> Anything still requiring compat6x is probably pretty elderly and >> unmaintained, but that's a question for ports@. >> >> Cheers, >> >> Matthew >> >=20 > I can corroborate: I also have a system where pkg installs > compat6x-amd64 on every update and then "pkg autoremove" removes it. >=20 > There is even a bug open for it: > https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D220755 Hmmm... here's a wild idea. Have either of you been experimenting with base system packages? Have you rebuilt pkg(8)'s idea of shlib provides/requires to include base system libraries? I'm wondering if it's somehow to do with the versioned shlibs introduced in FreeBSD-7? Cheers, Matthew --89WtQEp21J382GJ5l3HDpEJbVavbFkWSl-- --4XWqemgGhVRVfv9MqIHTnkIKrP80pRMiE Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQJ8BAEBCgBmBQJZfzHdXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ2NTNBNjhCOTEzQTRFNkNGM0UxRTEzMjZC QjIzQUY1MThFMUE0MDEzAAoJELsjr1GOGkATH/MP/2YdF1Npnd+N0t37X+U2aTpZ ktqzOF22cw/zWvysCaXs1MQek9PHIJSJDkipAHzBACGCx0U/XVIiOevUrmAl39UI N3TsofJ/Jfajvjtu8mK+ZCvypNjowb3V2lhFTbU7Bbc+gjeDbw5gQ2N2xFrMEh/0 ACXjroTVJN76eTRCAhTFFO9uvfHP5cXOgC1JF3xsbqc9QtORQehJ2b8Cz4PyoZmA 7KLpU8KkDpTgo8ChFpeNhpyZaA1lBhvI0QfO7nv5uBA6SworuzGkYCjAfhMCFO+D dhqYcjT4eY3Z3ijXSTZ/NrXIn89SkE6Odsv9pF2o4U0jevAMVJVrwkdbrOxdSl70 23VI68czkIMe8qfCxVoNOo86RGYSzW+ipIH6u/BLQLhgzSjl8954NIX2xfSF33g8 VXmHqCbgc8vNmso6wRs+j/GnkpvY7akMeYPXviTr7Vz7ZSQSmsC5MwVovG3m6JJr sB4REdEdiabNstg/BqZL+6+i9wPwd0eaQYUUzcDUacHJBu98ce9+djQ4CrcgNvgK dmpanGIginsOTb8u8LiSZgqy9qayi/ho5KClFmsxNFxCag+G5x44bB2LoJ5F1Y1g 6ahnqP/Zf8C4ONSkgKS21hBv4zIKBrI1Ix29s2mcqQTgSSKIBASNle71wBgLuCC3 yRyY2c/jhyQwBzFYTat7 =90u7 -----END PGP SIGNATURE----- --4XWqemgGhVRVfv9MqIHTnkIKrP80pRMiE--