Bug 198036 - security/gnupg: hidden dependency on devel/readline
Summary: security/gnupg: hidden dependency on devel/readline
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Some People
Assignee: Jun Kuriyama
Keywords: needs-patch, needs-qa
Depends on:
Reported: 2015-02-25 16:25 UTC by Dmitry Marakasov
Modified: 2015-04-13 02:56 UTC (History)
2 users (show)

See Also:
koobs: maintainer-feedback? (kuriyama)


Note You need to log in before you can comment on or make changes to this bug.
Description Dmitry Marakasov freebsd_committer 2015-02-25 16:25:03 UTC
If gnupg2 is built with devel/readline installed, it's picked as a hidden library dependency, and if readline is removed afterwards, gnupg would break.

% pkg info | grep readline
readline-6.3.8                 Library for editing command lines as they are typed
% ldd /usr/local/bin/gpg2 | grep readline
        libreadline.so.6 => /usr/local/lib/libreadline.so.6 (0x8011dd000)
% pkg info -d gnupg-2.1.2 | grep readline
% pkg delete readline
% ldd /usr/local/bin/gpg2 | grep readline
        libreadline.so.6 => not found (0)
% portmaster gnuplot
% ldd /usr/local/bin/gpg2 | grep readline
        libreadline.so.8 => /lib/libreadline.so.8 (0x8011dd000)
Comment 1 Bugzilla Automation freebsd_committer 2015-02-25 16:25:03 UTC
Maintainers CC'd
Comment 2 Jun Kuriyama freebsd_committer 2015-04-13 02:55:54 UTC
Fix committed, thanks!
Comment 3 commit-hook freebsd_committer 2015-04-13 02:56:23 UTC
A commit references this bug:

Author: kuriyama
Date: Mon Apr 13 02:55:30 UTC 2015
New revision: 383891
URL: https://svnweb.freebsd.org/changeset/ports/383891

  - Add CPE information [1].
  - Fix accidentally linking devel/readline if installed [2].

  # I'm working on 2.1.3 update, but it requires LDAP header even if
  # disabled.  Stay tuned (or patches are welcome).

  PR:		ports/198849 [1], ports/198036 and ports/198354 [2]
  Submitted by:	shun.fbsd.pr@dropcut.net [1], amdmi3 and jf@fahrner.name [2]