Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 19 Apr 2021 19:32:17 +0000
From:      bugzilla-noreply@freebsd.org
To:        perl@FreeBSD.org
Subject:   [Bug 255230] security/p5-Crypt-CBC 3.01 pulls in lots of dependencies
Message-ID:  <bug-255230-14331-KCXBEVHfZq@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-255230-14331@https.bugs.freebsd.org/bugzilla/>
References:  <bug-255230-14331@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D255230

parv <parv.0zero9+freebsd@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |parv.0zero9+freebsd@gmail.c
                   |                            |om

--- Comment #2 from parv <parv.0zero9+freebsd@gmail.com> ---
I am not the maintainer.

Module Crypt::CBC::PKDF::pbkdf2 ...

https://metacpan.org/source/LDS/Crypt-CBC-3.03/lib/Crypt/CBC/PBKDF/pbkdf2.pm

... uses Crypt::PBKDF2. So Crypt::CBC needs Crypt::PBKDF2 module (and its
dependencies by extension).

Gert may opt to not upgrade and/or break up the module in their custom inst=
all
to remove Crypt::CBC::PKDF::pbkdf2 module.

The method of breaking of core perl & modules has made a sane, usable Perl
install on some Linux distributions horrendously painful to use as is; requ=
ires
many hoops to jump to make things work. I sincerely hope that FreeBSD proje=
ct
does not join them in that quest.

--=20
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-255230-14331-KCXBEVHfZq>