This is blocking yubikey-manager cleanup which in turn is blocking dev-python/cryptography cleanup.
Unfortunately this is unlikely to be fixed any time soon, as upstream has only decided to address this in >=app-crypt/yubioath-desktop-6 - which features a complete rewrite of the UI in Flutter. I don't know about Soap but I have yet to get those versions build on Gentoo AT ALL, let alone to have Flutter packaged.
Given that cryptography is security-significant package, I'd really appreciate either figuring out yubioath-desktop or fixing old yubikey-manager to work with new cryptography (my educated guess is that their version pins are totally random and it just works).
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=2874c02ee275a309b90c993be83f5af6786aecdd commit 2874c02ee275a309b90c993be83f5af6786aecdd Author: Marek Szuba <marecki@gentoo.org> AuthorDate: 2023-02-21 23:28:56 +0000 Commit: Marek Szuba <marecki@gentoo.org> CommitDate: 2023-02-21 23:41:16 +0000 app-crypt/yubikey-manager: remove dev-python/cryptography version cap in 4.0.8 Seems to have no problems with 39.0.1: - all standard tests pass; - several device-specific PIV tests fail due to newer cryptography not allowing the use of SHA1, which could easily be fixed by patching the offending tests not to use that algorithm - and in any case we do not run any of these in src_test(); - rudimentary run-time testing has shown no issues yet. Going straight to stable due to Bug #893576. Bug: https://bugs.gentoo.org/893522 Signed-off-by: Marek Szuba <marecki@gentoo.org> .../{yubikey-manager-4.0.8.ebuild => yubikey-manager-4.0.8-r1.ebuild} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
Turns out your educated guess has been correct. Downgrading this issue from "security blocker" to "bloody nuisance".
# David Seifert <soap@gentoo.org> (2023-03-12) # Qt-based application is EOL, Yubico has switched to a Flutter-based # Googleware framework. Switch to app-crypt/yubioath-flutter-bin or use # your phone for TOTP. Blocks app-crypt/yubikey-manager-4 cleanups. # Removal on 2023-04-11. app-crypt/yubioath-desktop
The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c360ddbba0ac13f5993eb6b6328bffe1b706d8e1 commit c360ddbba0ac13f5993eb6b6328bffe1b706d8e1 Author: David Seifert <soap@gentoo.org> AuthorDate: 2023-04-15 09:22:59 +0000 Commit: David Seifert <soap@gentoo.org> CommitDate: 2023-04-15 09:22:59 +0000 app-crypt/yubioath-desktop: treeclean Closes: https://bugs.gentoo.org/893522 Closes: https://bugs.gentoo.org/895194 Signed-off-by: David Seifert <soap@gentoo.org> app-crypt/yubioath-desktop/Manifest | 1 - .../yubioath-desktop-5.1.0-bin-installdir.patch | 22 -------- .../yubioath-desktop-5.1.0-qtquickcontrols1.patch | 10 ---- app-crypt/yubioath-desktop/metadata.xml | 15 ------ .../yubioath-desktop-5.1.0-r3.ebuild | 60 ---------------------- profiles/package.mask | 7 --- 6 files changed, 115 deletions(-)
