From owner-freebsd-questions@freebsd.org Mon Mar 6 08:51:37 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 02042CFB234 for ; Mon, 6 Mar 2017 08:51:37 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [81.2.117.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 85A591DE9 for ; Mon, 6 Mar 2017 08:51:36 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from liminal.local (unknown [IPv6:2001:8b0:151:1:1c1d:86a1:a200:b700]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: m.seaman@infracaninophile.co.uk) by smtp.infracaninophile.co.uk (Postfix) with ESMTPSA id 822D0EC9E for ; Mon, 6 Mar 2017 08:51:31 +0000 (UTC) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=FreeBSD.org Authentication-Results: smtp.infracaninophile.co.uk/822D0EC9E; dkim=none; dkim-atps=neutral Subject: Re: Deprecated Package Dependency... what now? To: freebsd-questions@freebsd.org References: From: Matthew Seaman Message-ID: <092916dc-cb42-a0f0-cb2f-0deb7d95012c@FreeBSD.org> Date: Mon, 6 Mar 2017 08:51:24 +0000 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:45.0) Gecko/20100101 Thunderbird/45.7.1 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="oIXUOf70Gv7kIX9qjo3ViH37g0kPHns7E" X-Spam-Status: No, score=-0.4 required=5.0 tests=BAYES_00,RDNS_NONE, SPF_SOFTFAIL autolearn=no autolearn_force=no version=3.4.1 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on smtp.infracaninophile.co.uk X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Mar 2017 08:51:37 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --oIXUOf70Gv7kIX9qjo3ViH37g0kPHns7E Content-Type: multipart/mixed; boundary="W6OpnODmFIs6V1017LmpMfoBIbOhgVGsO"; protected-headers="v1" From: Matthew Seaman To: freebsd-questions@freebsd.org Message-ID: <092916dc-cb42-a0f0-cb2f-0deb7d95012c@FreeBSD.org> Subject: Re: Deprecated Package Dependency... what now? References: In-Reply-To: --W6OpnODmFIs6V1017LmpMfoBIbOhgVGsO Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 05/03/2017 15:36, Christofer C. Bell wrote: > I'm not sure how to proceed here. I use git on my system. It depends = on > package p5-Net-SMTP-SSL-1.04. This package is set to expire and be > removed. For information on my system, I'm using FreeBSD 11.0-RELEASE-= p8, > amd64, and all binary packages (not ports). >=20 > From the daily security report: >=20 > Checking for packages with security vulnerabilities: > p5-Net-SMTP-SSL-1.04: Tag: expiration_date Value: 2017-03-31 > p5-Net-SMTP-SSL-1.04: Tag: deprecated Value: Deprecated by upstream, us= e > Net::SMTP instead >=20 > Here's where I can see that git depends on this: >=20 > $ pkg info -D p5-Net-SMTP-SSL-1.04 > p5-Net-SMTP-SSL-1.04: > Always: > =3D=3D=3D> NOTICE: >=20 > This port is deprecated; you may wish to reconsider installing it: >=20 > Deprecated by upstream, use Net::SMTP instead. >=20 > It is scheduled to be removed on or after 2017-03-31. Yes, the functionality of the Net::SMTP::SSL perl module has been rolled into Net::SMTP. However, git upstream are apparently reluctant to patch the one included perl script that is affected because they don't want to break compatibility with some Linux distribution that has not updated their perl modules for several years. There are patches floating about to fix that one script in git -- not sure whats happening with regard to getting those committed to the ports tree. Even if those patches don't get committed, the lifetime of p5-Net-SMTP-SSL would be extended instead: the git port is too simply important to be allowed to be broken. So, for the time being, sit tight and wait for developments. Cheers, Matthew --W6OpnODmFIs6V1017LmpMfoBIbOhgVGsO-- --oIXUOf70Gv7kIX9qjo3ViH37g0kPHns7E Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQJ8BAEBCgBmBQJYvSMTXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ2NTNBNjhCOTEzQTRFNkNGM0UxRTEzMjZC QjIzQUY1MThFMUE0MDEzAAoJELsjr1GOGkATQU4P/0RqcQb6JKMmnZGy5ogczpp6 dRApoSgdrwzckJSTNUx/Zs6wBz2SAC9xTddUFGcBE5Zhup23NgCgtz003p/BmzWh ZIwNTXWW89tRmJavzUWPWnYq7M0XNOZgZVO0xBTCYljgVBUu1huC1bQThYo2M+jI Mp1Hs6stgVgUab/JpfCfys7X71KRHViHqYo+TaPwZwvARUNUeyKI7839wROuQhqi nnQ4fa68kCok1ryCFzhLw83uQ45TJ6IdGZU7RrnO6hbqwOn7kW8s969JITgoumQu laLcNOpRLpHKQ+6cef/SgTN649+iEmI82a79fi/hthDIWvk8ENniuVnId2MkAEgV cVhhO4Bjxf9F/JT5Sh8T2J4eu+Wao3i8srYIw4zvBhrZoxNnA/t4TBXICe0dkuRM q/+xjjFd/Da4HbYgARZGXg5OzGzgbnMx07Hu1utVKQ8D7MNiNzTE3yYkfhW/AtSd +EbqtCR2fMG4GX2ouolNispla5kSof67mUlXRkxcU9VSjr35BT0pj4vh48wA9FOG QCup+lvBq2HX4/Bp5bl76MRjytJllmnobgQCRO/vJouJsQ2vKpQLEBcD3h1AOWLR JFP5sQPfaHNBbMqnw4cS/qr0ujXwGayjW/8vWB2CtfkKxLsDWVEdwR0556zNzIo4 wJa2UKYW3lB3BTnRvdHB =PpUG -----END PGP SIGNATURE----- --oIXUOf70Gv7kIX9qjo3ViH37g0kPHns7E--