Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 811765 - dev-libs/apr-1.7.0-r2: *-config are listing excessive libs (was: xfce-extra/thunar-vcs-plugin-0.2.0 installs binaries linked to libcrypt.so without depend on virtual/libcrypt)
Summary: dev-libs/apr-1.7.0-r2: *-config are listing excessive libs (was: xfce-extra/t...
Status: CONFIRMED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Apache Team - Bugzilla Reports
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: 798963
  Show dependency tree
 
Reported: 2021-09-05 19:55 UTC by Agostino Sarubbo
Modified: 2022-07-03 09:54 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
build.log (build.log,242.10 KB, text/plain)
2021-09-05 19:55 UTC, Agostino Sarubbo
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Agostino Sarubbo gentoo-dev 2021-09-05 19:55:46 UTC
https://blogs.gentoo.org/ago/2020/07/04/gentoo-tinderbox/

Issue: xfce-extra/thunar-vcs-plugin-0.2.0 installs binaries linked to libcrypt.so without depend on virtual/libcrypt.
Discovered on: amd64 (internal ref: tinderbox)

NOTE:
Please look for the relative QA notice.
Comment 1 Agostino Sarubbo gentoo-dev 2021-09-05 19:55:49 UTC
Created attachment 737740 [details]
build.log

build log and emerge --info
Comment 2 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2021-09-06 06:46:21 UTC
Sounds like an implicit dep from apr-libs:

checking for apr-1 >= 0.9.7... 1.7.0
checking APR_CFLAGS... -DLINUX -D_REENTRANT -D_GNU_SOURCE -pthread -I/usr/include/apr-1 
checking APR_LIBS... -lapr-1 -luuid -lrt -lcrypt -lpthread -ldl 

thunar-vcs-plugin doesn't seem to use -lcrypt anywhere.  It seems that apr-1-config and their pkg-config file are both listing excessive libraries.
Comment 3 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2021-09-29 00:38:43 UTC
Ping.

<@Polynomial-C> mgorny: any suggestions how to properly fix bug #811765?
<+willikins> Polynomial-C: https://bugs.gentoo.org/811765 "dev-libs/apr-1.7.0-r2: *-config are listing excessive libs (was: xfce-extra/thunar-vcs-plugin-0.2.0 installs binaries li
nked to libcrypt.so without depend on virtual/libcrypt)"; Gentoo Linux, Current packages; CONF; ago:polynomial-c
<@mgorny> Polynomial-C: i guess the first step would be to split Libs into Libs.private in pkg-config file