(Sorry if this is a duplicate, I was unable to find one like it right-off) I am seeing some odd behavior in the Portage system as of late. Here is an example of what is happening on my machine: First I pull a mirror: emerge rsync (nothing odd...just works as always) Now, I notice a security update to libpng in my mailbox so I do like so: emerge -pu world Which results in: [snip] Calculating world dependencies ...done! [ebuild U ] sys-devel/m4-1.4p-r1 [1.4p-r0] [snip] Ok, this can't be right, I have libpng on this box. Let's try something else: [snip] pigeon root # emerge -pu --deep world These are the packages that I would merge, in order: Calculating world dependencies ...done! [ebuild U ] sys-devel/m4-1.4p-r1 [1.4p-r0] [ebuild U ] media-libs/libpng-1.2.5-r2 [1.2.5-r1] [ebuild N ] sys-devel/gcc-config-1.2.7 [ebuild U ] sys-devel/gcc-3.2.1-r6 [2.95.3-r7] [ebuild U ] dev-perl/Net-SSLeay-1.19-r1 [1.19-r0] [ebuild U ] dev-perl/Time-HiRes-1.42 [1.38-r0] [snip] OK, there's libpng but...gcc-3.2? No, this is a Gentoo 1.2 machine. Well, that's not going to work. Lets try this: [snip] pigeon root # emerge -pu libpng These are the packages that I would merge, in order: Calculating dependencies ...done! [ebuild U ] media-libs/libpng-1.2.5-r2 [1.2.5-r1] [snip] Hmmm. There it is. Why didnt this show up when I tried to update 'world'? There is something strange afoot :) The version of portage here is: 2.0.46-r4 On Gentoo 1.2: Gentoo Base System version 1.4.2.8 Please let me know if I can supply any further data to you to remedy this odd situation. -Paul
please try emerge sync again
Ok, this time: [snip] pigeon root # emerge -pu world These are the packages that I would merge, in order: Calculating world dependencies ...done! [ebuild N ] sys-devel/gcc-config-1.2.7 [ebuild U ] sys-devel/gcc-2.95.3-r8 [2.95.3-r7] [snip] I have not updated the libpng package yet in order to test this (it's not -that- critical on this system)
you didnt explicitly emerge 'libpng' thus it is not in your world file ... the GLSA does not say 'emerge world -u', it says 'emerge libpng' ... this kind of request (updating due to GLSA) is another bug report ...
That is understandable, but, if this is a security update should it not update when a user specifies 'world'? I'll file as a different report.
the answer is no and you should see my previous comment
--deep is not fully functional, as far as I know, which is why it is undocumented. but you are correct -- since libpng was picked up and emerged as a dependency, it _needs_ to get updated on a world update. Nick?
That's what I was attempting to state. Maybe it was not clear enough ;-) If it is a -security- update it should update no matter how it was installed. If the old package is there, it needs updating.
and like i said a "security" is on the TODO list ... this bug now becomes one on the --deep option ... in order to track this --deep bug we'll need your world file and output of `qpkg -I -nc -v`
*** Bug 13628 has been marked as a duplicate of this bug. ***
Created attachment 7163 [details] Output of qpkg Here is the output of qpkg as requested.
Created attachment 7164 [details] World File Here is my world file as requested.
Updating world today (after portage update to 2.0.46-r9) requested the update of libpng. Not sure what changed but works now.
*** Bug 14431 has been marked as a duplicate of this bug. ***
My systems are all encounternig this bug, or similar (dependancies / packages not being updated) to an extreme; `emerge world -u` no longer catches ANY updates to be installed, even though there are clearly several. Vis; The output of `emerge world -u` on my primary workstation; skylla:~ # emerge world -up These are the packages that I would merge, in order: Calculating world dependencies ...done! I created a shell script using `qpkg -I -nc > pkgs.sh` to run emerge against the full list of installed packages with the `-up` flag which resulted in the following list (which is being updated as I write this); skylla:~ # sh pkgs.sh These are the packages that I would merge, in order: Calculating dependencies ...done! [ebuild U ] app-admin/gentoolkit-0.1.17-r11 [0.1.16] [ebuild U ] app-admin/sysklogd-1.4.1-r3 [1.4.1-r2] [ebuild U ] app-emulation/vmware-workstation-3.2.0.2230-r1 [3.1.1.1790] [ebuild U ] app-misc/mc-4.6.0_pre1 [4.5.55-r5] [ebuild U ] dev-java/java-config-0.2.7 [0.2.4-r1] [ebuild U ] dev-libs/atk-1.2.0 [1.0.2] [ebuild U ] dev-util/cvs-1.11.5-r1 [1.11.2] [ebuild U ] media-libs/libart_lgpl-2.3.10 [2.3.8-r2] [ebuild U ] media-libs/libdvdcss-1.2.3 [1.2.2] [ebuild U ] media-libs/netpbm-9.12-r4 [9.12-r2] [ebuild U ] media-libs/xpm-3.4k-r1 [3.4k] [ebuild U ] media-sound/lame-3.93.1-r1 [3.93.1] [ebuild U ] media-video/avifile-0.7.15.20020816-r1 [0.7.14.20020802] [ebuild U ] net-ftp/curl-7.10.2 [7.9.7] [ebuild U ] net-ftp/ncftp-3.1.5 [3.1.4] [ebuild U ] net-mail/mailbase-0.00-r4 [0.00-r3] [ebuild U ] net-mail/pine-4.50-r4 [4.44-r4] [ebuild U ] net-mail/procmail-3.22-r5 [3.22-r2] [ebuild N ] net-dns/bind-9.2.2_rc1-r1 [ebuild U ] net-misc/ntp-4.1.1b-r4 [4.1.1a] [ebuild U ] net-misc/whois-4.6.1 [4.5.28-r1] [ebuild N ] sys-apps/usbutils-0.11 [ebuild N ] sys-apps/hotplug-20020401-r1 [ebuild U ] net-print/cups-1.1.18-r2 [1.1.15] [ebuild U ] net-www/links-2.1_pre3 [2.1_pre2-r1] [ebuild N ] app-admin/addpatches-0.2 [ebuild N ] sys-kernel/gentoo-sources-2.4.19-r10 [ebuild U ] sys-apps/acpid-1.0.1-r1 [1.0.1] [ebuild U ] sys-apps/lilo-22.3.3-r1 [22.1-r3] [ebuild UD] sys-apps/xfsprogs-2.3.6 [20020330-r1] [ebuild U ] sys-libs/lib-compat-1.1 [1.0-r2] [ebuild N ] x11-libs/xft-2.0.1 [ebuild U ] x11-libs/pango-1.2.0 [1.0.3] [ebuild U ] x11-libs/gtk+-2.2.0 [2.0.5] [ebuild U ] x11-libs/wxGTK-2.4.0 [2.2.9-r1] [ebuild U ] x11-themes/mosfet-liquid-widgets-0.9.5-r1 [0.9.5] As you can see, there are a lot of updates to be applied. Output of `emerge info` follows; skylla:~ # emerge info Portage 2.0.46-r9 (default-1.0, gcc-2.95.3, glibc-2.2.5-r7) ================================================================= System uname: 2.4.20-xfs i686 AMD Athlon(tm) XP 1800+ GENTOO_MIRRORS="http://www.ibiblio.org/pub/Linux/distributions/gentoo" CONFIG_PROTECT="/etc /var/qmail/control /usr/kde/2/share/config /usr/X11R6/lib/X11/xkb /usr/kde/3.1/share/config /usr/kde/3/share/config /usr/share/config" CONFIG_PROTECT_MASK="/etc/gconf /etc/env.d" PORTDIR="/usr/portage" DISTDIR="/usr/portage/distfiles" PKGDIR="/usr/portage/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR_OVERLAY="/usr/local/portage" USE="x86 oss apm crypt encode java jpeg libg++ libwww mikmod mmx mpeg ncurses pdflib quicktime spell truetype xml2 xmms berkdb cdr gdbm gif gpm gtk imlib motif oggvorbis pam perl png python readline slang svga tcltk tcpd tiff -avi -gnome -nls -alsa -esd -arts -cups ssl 3dnow sse X dga sdl glide voodoo3 3dfx opengl xv kde qt qtmt" COMPILER="" CHOST="i686-pc-linux-gnu" CFLAGS="-march=i686 -O3 -pipe" CXXFLAGS="-march=i686 -O3 -pipe" ACCEPT_KEYWORDS="x86" MAKEOPTS="-j2" AUTOCLEAN="yes" SYNC="rsync://rsync.snerk.org/gentoo-portage" FEATURES="ccache sandbox"
please _attach_ the output of 'emerge -p depclean' and /var/cache/edb/world
Created attachment 7753 [details] Output of `emerge -p depclean`
Created attachment 7754 [details] world file
Comment on attachment 7754 [details] world file Note that the state of the world file is, unfortunately, after I have already updated all packages manually. I'm not sure if this makes a difference or not, but thought it pertinent.
Not sure what direction this bug went in. The only problems I see with the deep option on my system as of late is portage's obsession with wanting to downgrade many apps. Other than that it does what it's meant to do as far as I can tell. If you guys need me to run any tests, feel free to let me know. -P
*** Bug 27800 has been marked as a duplicate of this bug. ***
*** Bug 24269 has been marked as a duplicate of this bug. ***
The bug here was related to world-file-depleting bugs.
