I'm trying to fix GLSA-2014 # glsa-check --fix affected Fixing GLSA 201401-21 >>> cannot fix GLSA, no unaffected packages available Instead, I tried to just 'emerge -1v poppler' but that resulted in conflicts which I resolved by bringing in other packages which resulted in a snowball. Right now, I'm in the state where I think that I should be able to do the following emerge, but portage claims there is a conflict where there isn't one. Note that the conflict states: (dev-libs/glib-2.36.4-r1::gentoo, installed) pulled in by <dev-libs/glib-2.38:2 required by (sys-auth/consolekit-0.4.6::gentoo, ebuild scheduled for merge) (dev-libs/glib-2.38.2-r1::gentoo, ebuild scheduled for merge) pulled in by >=dev-libs/glib-2.37.6:2 required by (x11-libs/gdk-pixbuf-2.30.6::gentoo, ebuild scheduled for merge) but consolekit will be perfectly happy with dev-libs/glib-2.38.2-r1 because its dependency is: || ( >=dev-libs/glib-2.38.2-r1:2 <dev-libs/glib-2.38:2 ) $ emerge -1v poppler evince luatex net-print/cups-filters net-print/cups app-text/texlive-core mail-client/thunderbird-bin cairo qtgui ksplash emacs '=dev-lang/php-5.3*' gdk-pixbuf libwebp tracker gwenview kdelibs '=media-libs/openjpeg-1.5*' links mjpegtools icedtea-bin consolekit --verbose-conflicts Calculating dependencies... done! [ebuild NS ] virtual/jpeg-62:62 [0:0] 0 kB [ebuild U ] media-libs/libpng-1.6.10:0/16 [1.5.17-r1:0/0] USE="apng (-neon) -static-libs" 887 kB [ebuild U ] kde-base/kde-env-4.11.5:4/4.11 [4.11.2:4/4] USE="(-aqua)" 0 kB [ebuild U ] dev-util/gtk-doc-am-1.20 [1.19] 629 kB [ebuild R ] www-client/links-2.8-r1:2 USE="X bzip2 gpm ipv6 jpeg ssl tiff unicode zlib -directfb -fbcon -livecd -lzma -suid -svga" 0 kB [ebuild U ] app-admin/eselect-php-0.7.1-r3 [0.7.1] USE="apache2 -fpm" 0 kB [ebuild U ] x11-libs/cairo-1.12.16 [1.12.14-r4] USE="X glib opengl svg (-aqua) -debug -directfb -doc (-drm) (-gallium) (-gles2) -legacy-drivers -openvg (-qt4) -static-libs -valgrind -xcb -xlib-xcb" 35,049 kB [ebuild U ] media-libs/libwebp-0.4.0:0/5 [0.3.1:0/0] USE="gif jpeg opengl png tiff -experimental -static-libs -swap-16bit-csp" 868 kB [ebuild R ] sys-auth/consolekit-0.4.6 USE="acl pam policykit -debug -doc (-selinux) -systemd-units {-test}" 12 kB [ebuild U ] dev-libs/glib-2.38.2-r1:2 [2.36.4-r1:2] USE="xattr -debug (-fam) (-selinux) -static-libs -systemtap {-test} -utils" PYTHON_TARGETS="python2_7 -python2_6" 6,561 kB [ebuild U ] x11-libs/gdk-pixbuf-2.30.6:2 [2.28.2:2] USE="X introspection jpeg jpeg2k tiff -debug {-test}" 1,299 kB [ebuild U ] mail-client/thunderbird-bin-24.4.0 [24.1.1] USE="crashreporter" LINGUAS="ja -ar -ast -be -bg -bn_BD -br -ca -cs -da -de -el -en_GB -es_AR -es_ES -et -eu -fi -fr -fy_NL -ga_IE -gd -gl -he -hu -id -is -it -ko -lt -nb_NO -nl -nn_NO -pa_IN -pl -pt_BR -pt_PT -rm -ro -ru -si -sk -sl -sq -sr -sv_SE -ta_LK -tr -uk -vi -zh_CN -zh_TW" 28,711 kB [ebuild R ] app-editors/emacs-24.3-r2:24 USE="X Xaw3d alsa dbus gif gnutls gpm gtk gtk3 jpeg pax_kernel png svg tiff xft xpm (-aqua) -athena -games -gconf -gsettings -gzip-el -hesiod -imagemagick -kerberos -libxml2 -livecd -m17n-lib -motif (-selinux) -sound -source -toolkit-scroll-bars -wide-int" 4 kB [ebuild U ] net-print/cups-1.7.1 [1.6.4] USE="X acl dbus gnutls java pam python ssl threads usb xinetd -debug -kerberos -lprng-compat (-selinux) -static-libs -zeroconf (-filters%*)" LINGUAS="es ja -ca -fr -it% -ru" PYTHON_SINGLE_TARGET="python2_7 -python2_6" PYTHON_TARGETS="python2_7 -python2_6" 8,534 kB [ebuild U ] app-text/ghostscript-gpl-9.10-r2 [9.05-r1] USE="X cups dbus gtk idn -bindist -djvu -static-libs (-jpeg2k%*)" LINGUAS="ja -de% -ko -zh_CN -zh_TW" 30,263 kB [ebuild U ] net-print/cups-filters-1.0.43-r1 [1.0.36-r1] USE="dbus%* foomatic%* jpeg perl png tiff -static-libs -zeroconf" 1,074 kB [ebuild U ] app-text/poppler-0.24.5:0/44 [0.24.3:0/43] USE="cairo cjk curl cxx introspection jpeg jpeg2k lcms png qt4 tiff utils -debug -doc" 1,478 kB [ebuild R ] dev-qt/qtgui-4.8.5-r1:4 USE="accessibility cups exceptions glib mng qt3support tiff xv (-aqua) -debug -egl -gtkstyle -nas -nis (-pch) -trace -xinerama" 0 kB [ebuild R ] dev-java/icedtea-bin-6.1.12.7:6 USE="X alsa cjk cups nsplugin -doc -examples -source" 0 kB [ebuild R ] dev-tex/luatex-0.70.1-r2 USE="-doc" 0 kB [ebuild R ] app-text/texlive-core-2012-r1 USE="X cjk -doc -source -tk -xetex" 0 kB [ebuild U ] kde-base/oxygen-icons-4.11.5:4/4.11 [4.11.2:4/4] USE="(-aqua) -bindist" 28,639 kB [ebuild R ] media-libs/openjpeg-1.5.1 USE="-doc -static-libs {-test}" 0 kB [ebuild U ] app-text/evince-3.10.3:0/evd3.4-evv3.3 [3.8.3:0/evd3.4-evv3.3] USE="introspection postscript tiff -debug -djvu -dvi -libsecret% -nautilus -t1lib -xps (-gnome-keyring%)" 6,319 kB [ebuild R ] app-misc/tracker-0.16.4:0/16 USE="exif flac gif gstreamer gtk iso jpeg miner-fs mp3 tiff vorbis xml -cue (-eds) -firefox-bookmarks -gsf -iptc -laptop -libsecret -nautilus -networkmanager -pdf -playlist -rss {-test} -thunderbird -upnp-av -xine -xmp -xps" 0 kB [ebuild U ] dev-lang/php-5.3.28-r3:5.3 [5.3.27:5.3] USE="apache2 berkdb bzip2 cgi cjk cli crypt ctype curl exif fileinfo filter ftp gd gdbm gmp hash iconv imap ipv6 json mhash mysql mysqli nls pcntl phar posix readline session simplexml sockets spell sqlite ssl threads tokenizer truetype unicode xml xmlreader xpm zip zlib -bcmath -calendar -cdb -curlwrappers -debug -embed -enchant -firebird -flatfile -fpm -inifile -intl -iodbc -kerberos -ldap -ldap-sasl -libedit -mssql -mysqlnd -oci8-instant-client -odbc -pdo -postgres -qdbm -recode (-selinux) -sharedmem -snmp -soap -sqlite2 -sybase-ct -sysvipc -tidy -wddx -xmlrpc -xmlwriter -xslt (-frontbase%)" 10,793 kB [ebuild U ] media-video/mjpegtools-2.1.0-r1:1 [2.1.0:1] USE="dga dv gtk mmx png quicktime sdl -sdlgfx -static-libs -v4l" 0 kB [ebuild U ] kde-base/kdelibs-4.11.5:4/4.11 [4.11.2-r1:4/4] USE="acl alsa bzip2 fam handbook jpeg2k mmx nls openexr opengl policykit semantic-desktop spell sse sse2 ssl udev udisks upower -3dnow (-altivec) (-aqua) -debug -doc -kerberos -lzma {-test} -zeroconf" 11,556 kB [ebuild U ] kde-base/nepomuk-core-4.11.5:4/4.11 [4.11.2:4/4] USE="exif ffmpeg (-aqua) -debug -epub -pdf -taglib" 377 kB [ebuild U ] kde-base/katepart-4.11.5:4/4.11 [4.11.2:4/4] USE="handbook (-aqua) -debug" 2,526 kB [ebuild U ] kde-base/nepomuk-widgets-4.11.5:4/4.11 [4.11.2:4/4] USE="(-aqua) -debug" 48 kB [ebuild U ] kde-base/kdesu-4.11.5:4/4.11 [4.11.2:4/4] USE="handbook (-aqua) -debug" 7,687 kB [ebuild U ] kde-base/khelpcenter-4.11.5:4/4.11 [4.11.2:4/4] USE="(-aqua) -debug" 0 kB [ebuild U ] kde-base/kactivities-4.11.5:4/4.11 [4.11.2-r1:4/4] USE="semantic-desktop (-aqua)" 86 kB [ebuild U ] kde-base/libkonq-4.11.5:4/4.11 [4.11.2:4/4] USE="(-aqua) -debug {-test}" 2,462 kB [ebuild U ] kde-base/ksplash-4.11.5:4/4.11 [4.11.2:4/4] USE="mmx sse sse2 -3dnow (-altivec) (-aqua) -debug -xinerama" 13,394 kB [ebuild U ] kde-base/gwenview-4.11.5:4/4.11 [4.11.2-r1:4/4] USE="handbook semantic-desktop (-aqua) -debug -kipi" 2,831 kB Total: 37 packages (27 upgrades, 1 in new slot, 9 reinstalls), Size of downloads: 202,073 kB !!! Multiple package instances within a single package slot have been pulled !!! into the dependency graph, resulting in a slot conflict: dev-libs/glib:2 (dev-libs/glib-2.36.4-r1::gentoo, installed) pulled in by <dev-libs/glib-2.38:2 required by (sys-auth/consolekit-0.4.6::gentoo, ebuild scheduled for merge) (dev-libs/glib-2.38.2-r1::gentoo, ebuild scheduled for merge) pulled in by >=dev-libs/glib-2.37.6:2 required by (x11-libs/gdk-pixbuf-2.30.6::gentoo, ebuild scheduled for merge) dev-util/gtk-doc-am:0 (dev-util/gtk-doc-am-1.19::gentoo, installed) pulled in by (no parents that aren't satisfied by other packages in this slot) (dev-util/gtk-doc-am-1.20::gentoo, ebuild scheduled for merge) pulled in by >=dev-util/gtk-doc-am-1.20 required by (x11-libs/gdk-pixbuf-2.30.6::gentoo, ebuild scheduled for merge) media-libs/libpng:0 (media-libs/libpng-1.6.10::gentoo, ebuild scheduled for merge) pulled in by =media-libs/libpng-1.6* required by (mail-client/thunderbird-bin-24.4.0::gentoo, ebuild scheduled for merge) >=media-libs/libpng-1.6.2:0= required by (app-text/ghostscript-gpl-9.10-r2::gentoo, ebuild scheduled for merge) (media-libs/libpng-1.5.17-r1::gentoo, installed) pulled in by (no parents that aren't satisfied by other packages in this slot) app-text/ghostscript-gpl:0 (app-text/ghostscript-gpl-9.10-r2::gentoo, ebuild scheduled for merge) pulled in by >=app-text/ghostscript-gpl-9.09 required by (net-print/cups-filters-1.0.43-r1::gentoo, ebuild scheduled for merge) (app-text/ghostscript-gpl-9.05-r1::gentoo, installed) pulled in by (no parents that aren't satisfied by other packages in this slot) It may be possible to solve this problem by using package.mask to prevent one of those packages from being selected. However, it is also possible that conflicting dependencies exist such that they are impossible to satisfy simultaneously. If such a conflict exists in the dependencies of two different packages, then those packages can not be installed simultaneously. You may want to try a larger value of the --backtrack option, such as --backtrack=30, in order to see if that will solve this conflict automatically. For more information, see MASKED PACKAGES section in the emerge man page or refer to the Gentoo Handbook. # emerge --info Portage 2.2.8-r1 (hardened/linux/x86, gcc-4.7.3, glibc-2.16.0, 3.2.53-hardened-r1 i686) ================================================================= System uname: Linux-3.2.53-hardened-r1-i686-Intel-R-_Pentium-R-_4_CPU_2.80GHz-with-gentoo-2.2 KiB Mem: 1011596 total, 143036 free KiB Swap: 2104504 total, 1878736 free Timestamp of tree: Thu, 17 Apr 2014 01:15:01 +0000 ld GNU ld (GNU Binutils) 2.23.2 app-shells/bash: 4.2_p45 dev-java/java-config: 2.1.12-r1 dev-lang/python: 2.7.5-r3, 3.2.5-r3, 3.3.2-r2 dev-util/cmake: 2.8.11.2 dev-util/pkgconfig: 0.28 sys-apps/baselayout: 2.2 sys-apps/openrc: 0.12.4 sys-apps/sandbox: 2.6-r1::anarchy sys-devel/autoconf: 2.13, 2.69 sys-devel/automake: 1.11.6, 1.12.6, 1.13.4 sys-devel/binutils: 2.22-r1, 2.23.1, 2.23.2 sys-devel/gcc: 4.6.3, 4.7.3-r1 sys-devel/gcc-config: 1.7.3 sys-devel/libtool: 2.4.2 sys-devel/make: 3.82-r4 sys-kernel/linux-headers: 3.9 (virtual/os-headers) sys-libs/glibc: 2.16.0 Repositories: gentoo Installed sets: @system ACCEPT_KEYWORDS="x86" ACCEPT_LICENSE="*" CBUILD="i686-pc-linux-gnu" CFLAGS="-march=i686 -O2 -pipe -march=pentium4 -fomit-frame-pointer -O2 -pipe" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/share/config /usr/share/gnupg/qualified.txt /var/lib/hsqldb" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5.3/ext-active/ /etc/php/apache2-php5.5/ext-active/ /etc/php/cgi-php5.3/ext-active/ /etc/php/cgi-php5.5/ext-active/ /etc/php/cli-php5.3/ext-active/ /etc/php/cli-php5.5/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c" CXXFLAGS="-march=i686 -O2 -pipe -march=pentium4 -fomit-frame-pointer -O2 -pipe" DISTDIR="/var/tmp/distfiles" FCFLAGS="-march=i686 -O2 -pipe" FEATURES="assume-digests binpkg-logs config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync news nostrip parallel-fetch preserve-libs protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr" FFLAGS="-march=i686 -O2 -pipe" GENTOO_MIRRORS="http://distfiles.gentoo.org" LC_ALL="en_US.utf8" LDFLAGS="-Wl,-O1 -Wl,--as-needed" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/var/portage" PORTDIR_OVERLAY="" SYNC="rsync://rsync.us.gentoo.org/gentoo-portage" USE="X Xaw3d a52 aac aalib acl acpi alsa amrnb ao apache2 apng asf audiofile avahi bash-completion berkdb bidi bitmap-fonts bl browserplugin bzip2 cairo cdda cddb cdparanoia cjk clamav clamdtop cli consolekit cracklib crypt cups curl cxx dba dbus declarative deprecated device-mapper dga dri dts dv dvd eds elf emacs enca encode enscript erandom esd exif expat extensions fam fame fat ffmpeg firefox flac flash font-server fontconfig fortran fpx ftp fts3 g3dvl gd gd-external gdbm gdu gif git glibc-omitfp glut glx gmp gnome gnutls gpm graphviz gs gstreamer gtk gtk2 gtk3 gtkhtml guild guile gzip hardened hardenedphp hdri i8x0 iconv icq idn imap imlib imlib2 iproute2 ipsec ipv6 jack java jbig jp2 jpeg jpeg2k kcal kde keymap kmod lame lcms libcaca libclamav libgda libkms libvisual linuxthreads-tls live lm_sensors logitech-mouse logrotate lzo mad maildir mbstring md5sum mdnsresponder-compat mercurial mhash midi ming mixer mjpeg mmx mmxext mng mod mod_python modperl modplug modules mouse mp2 mp3 mp4 mpeg mpeg2 mplayer multislot musepack musicbrainz mysql mysqli ncurses network networking new-login nfs nls nptl nsplugin oav objc ocaml ogg oggvorbis openal opendoc openexr opengl openmp openrc oss pam pam_chroot passenger pax_kernel pcntl pcre perl php pic png pnm policykit portaudio postfix povray ppds pvr python pyzor q32 qca qt qt3 qt3support qt4 quicktime quotas radio rar razor readline realmedia regex reports rtc ruby ruby-bindings samba sasl script sdk sdl semantic-desktop sensord session sndfile sockets sox spamassassin speex spell sql sqlite sqlite3 srt sse sse2 ssl startup-notification subtitles subversion suexec suhosin svg sysfs syslog tcpd teletext tga theora threads tiff timidity tivo transcode truetype type1 udev unicode urandom usb utf8 vcd vcdimager vfat vim vim-pager vim-with-x virus-scan visualization vorbis webkit win32codecs wma wmf wxwindows x264 x86 xanim xattr xchat xfs xft xine xinetd xml xml2 xmlreader xpm xrandr xscreensaver xtpax xulrunner xv xvid xvmc yahoo zip zlib zoran" ABI_X86="32" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias auth_digest authn_dbd dbd ident imagemap" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CURL_SSL="openssl" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LINGUAS="en es ja" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-3 php5-5" PYTHON_SINGLE_TARGET="python2_7" PYTHON_TARGETS="python2_7 python3_2 python3_3" RUBY_TARGETS="ruby19 ruby20" USERLAND="GNU" VIDEO_CARDS="intel" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" USE_PYTHON="2.7 3.2 3.3" Unset: CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, MAKEOPTS, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
I edited the dependency in consolekit and the next emerge revealed that there was a conflict between glib and dev-libs/gobject-introspection. Adding gir to the list (with the edited consolekit ebuild) allowed me to build. Perhaps it would've worked if I included dev-libs/gobject-introspection prior to the edit, but I no longer have the state to test that out. I suspect that is the case and the issue here is that the conflict was just not reported.
