On 2019.12.07 19:37, Walter Dnes wrote:
  I just ran a system update and got the following warning...

!!! The following installed packages are masked:
- sys-devel/automake-1.9.6-r5::gentoo (masked by: package.mask)
/usr/portage/profiles/package.mask:
# Andreas K. Hüttel <dilfri...@gentoo.org> (2017-10-18)
# sys-devel/automake versions 1.4, 1.5, 1.6, 1.7, 1.8
# have known security vulnerabilities, are broken with
# recent Perl (>=5.26.0), and are not used by anything in
# the Gentoo repository. Please uninstall.

1)  It says that 1.4-to-1.8 have problems.  So why is 1.9.6-r5 masked?
If you look at package.mask, it does say 1.4 to 1.8 have the vulnerability, but it did mask 1.4 through 1.10. I don't know if it was a typo (excluding 1.9 and 1.10 from having problems, or including them in the mask.) Might a bug be warranted?

2)  It says that no apps use 1.9.6-r5, but...

[d531][root][~] equery d =sys-devel/automake-1.9.6-r5
 * These packages depend on sys-devel/automake-1.9.6-r5:
mail-mta/ssmtp-2.64-r3 (sys-devel/automake)
net-misc/openrdate-1.2 (=sys-devel/automake-1.9*)
Have you tried updating or reinstalling either of those? Have you tried depcleaning automake to see if it agrees with these dependencies? (I'm grabbing at straws, and won't predict any particular result.) That version of ssmtp does not (from the ebuild) require any particular version of automake, so might that just be because that was the version used to build it? I don't see openrdate in the main tree, so that could be why he missed it.

  ssmtp would probably be OK with a higher version, but openrdate
specifically wants automake-1.9*.  The next version upwards in
/usr/portage/sys-devel/automake is 1.10.3-r3

  I currently have 1.9.6-r5 and 1.15.1-r2 and 1.16.1-r1 installed.
I obviously have a very different world file from you, but I've got 1.11.6-r3, 1.13.4-r2, and 1.16.1-r1 installed. "emerge -pc automake" says two packages need the 1.11, one needs 1.13, and a whole bunch need 1.16.

--
Walter Dnes <waltd...@waltdnes.org>
I don't run "desktop environments"; I run useful applications

Jack

Reply via email to