Date: Mon, 19 Apr 2021 19:32:17 +0000 From: bugzilla-noreply@freebsd.org To: perl@FreeBSD.org Subject: [Bug 255230] security/p5-Crypt-CBC 3.01 pulls in lots of dependencies Message-ID: <bug-255230-14331-KCXBEVHfZq@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-255230-14331@https.bugs.freebsd.org/bugzilla/> References: <bug-255230-14331@https.bugs.freebsd.org/bugzilla/>
index | next in thread | previous in thread | raw e-mail
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=255230 parv <parv.0zero9+freebsd@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |parv.0zero9+freebsd@gmail.c | |om --- Comment #2 from parv <parv.0zero9+freebsd@gmail.com> --- I am not the maintainer. Module Crypt::CBC::PKDF::pbkdf2 ... https://metacpan.org/source/LDS/Crypt-CBC-3.03/lib/Crypt/CBC/PBKDF/pbkdf2.pm ... uses Crypt::PBKDF2. So Crypt::CBC needs Crypt::PBKDF2 module (and its dependencies by extension). Gert may opt to not upgrade and/or break up the module in their custom install to remove Crypt::CBC::PKDF::pbkdf2 module. The method of breaking of core perl & modules has made a sane, usable Perl install on some Linux distributions horrendously painful to use as is; requires many hoops to jump to make things work. I sincerely hope that FreeBSD project does not join them in that quest. -- You are receiving this mail because: You are on the CC list for the bug. You are the assignee for the bug.help
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-255230-14331-KCXBEVHfZq>