Bug 198036

Summary: security/gnupg: hidden dependency on devel/readline
Product: Ports & Packages Reporter: Dmitry Marakasov <amdmi3>
Component: Individual Port(s)Assignee: Jun Kuriyama <kuriyama>
Status: Closed FIXED    
Severity: Affects Some People CC: johans, kuriyama
Priority: --- Keywords: needs-patch, needs-qa
Version: LatestFlags: koobs: maintainer-feedback? (kuriyama)
Hardware: Any   
OS: Any   

Description Dmitry Marakasov freebsd_committer freebsd_triage 2015-02-25 16:25:03 UTC
If gnupg2 is built with devel/readline installed, it's picked as a hidden library dependency, and if readline is removed afterwards, gnupg would break.

% pkg info | grep readline
readline-6.3.8                 Library for editing command lines as they are typed
% ldd /usr/local/bin/gpg2 | grep readline
        libreadline.so.6 => /usr/local/lib/libreadline.so.6 (0x8011dd000)
% pkg info -d gnupg-2.1.2 | grep readline
% pkg delete readline
% ldd /usr/local/bin/gpg2 | grep readline
        libreadline.so.6 => not found (0)
% portmaster gnuplot
% ldd /usr/local/bin/gpg2 | grep readline
        libreadline.so.8 => /lib/libreadline.so.8 (0x8011dd000)
Comment 1 Bugzilla Automation freebsd_committer freebsd_triage 2015-02-25 16:25:03 UTC
Maintainers CC'd
Comment 2 Jun Kuriyama freebsd_committer freebsd_triage 2015-04-13 02:55:54 UTC
Fix committed, thanks!
Comment 3 commit-hook freebsd_committer freebsd_triage 2015-04-13 02:56:23 UTC
A commit references this bug:

Author: kuriyama
Date: Mon Apr 13 02:55:30 UTC 2015
New revision: 383891
URL: https://svnweb.freebsd.org/changeset/ports/383891

Log:
  - Add CPE information [1].
  - Fix accidentally linking devel/readline if installed [2].

  # I'm working on 2.1.3 update, but it requires LDAP header even if
  # disabled.  Stay tuned (or patches are welcome).

  PR:		ports/198849 [1], ports/198036 and ports/198354 [2]
  Submitted by:	shun.fbsd.pr@dropcut.net [1], amdmi3 and jf@fahrner.name [2]

Changes:
  head/security/gnupg/Makefile