Subject: make update breaks everything
To: None <tech-pkg@netbsd.org>
From: Xavier HUMBERT <xavier.humbert@xavhome.fr.eu.org>
List: tech-pkg
Date: 07/27/2002 14:35:07
Well, I've been warned that make update should have potential side
effects. But this is not a side effect, this is a bloody collateral
dommage !

An obscure security problem in graphics/png lead me to update it, at
least to get rid of the message from auditpackages ...

Unfortunately, when I did "make update", it deleted **without asking,
neither warning me** mrtg and gd, which depends on it.

I was in fact warned by security check next night :

> ======
> /var/backups/work/pkgs diffs (OLD < > NEW)
> ======
> 14d13
> < gd-1.8.4nb1         graphics library for fast PNG creation
> 31d29
> < mrtg-2.9.17nb1      The Multi-Router Traffic Grapher
> 50c48
> < png-1.2.1           Library for manipulating PNG images
> ---
>> png-1.2.4           Library for manipulating PNG images
> 75,77c73
> < -rw-r--r--  1 root  wheel      27 Jun 24 07:50:17 2002
>freetype-lib-1.3.1/+REQUIRED_BY
> < -rw-r--r--  1 root  wheel    1405 May 18 11:53:48 2002
>gd-1.8.4nb1/+CONTENTS
> < -rw-r--r--  1 root  wheel      15 Jun 24 07:50:17 2002
>gd-1.8.4nb1/+REQUIRED_BY
> ---
>> -rw-r--r--  1 root  wheel       0 Jul 24 08:16:11 2002
>>freetype-lib-1.3.1/+REQUIRED_BY
> 91c87
> < -rw-r--r--  1 root  wheel      27 Jun 24 07:50:17 2002
>jpeg-6b/+REQUIRED_BY
> ---
>> -rw-r--r--  1 root  wheel       0 Jul 24 08:16:11 2002
>>jpeg-6b/+REQUIRED_BY
> 105d100
> < -rw-r--r--  1 root  wheel    6941 Jun 24 07:50:17 2002
>mrtg-2.9.17nb1/+CONTENTS
> 118c113
> < -rw-r--r--  1 root  wheel     176 Jun 24 07:51:03 2002
>perl-5.6.1nb7/+REQUIRED_BY
> ---
>> -rw-r--r--  1 root  wheel     161 Jul 24 08:16:10 2002
>>perl-5.6.1nb7/+REQUIRED_BY
> 135,136c130
> < -rw-r--r--  1 root  wheel     629 May 18 11:53:05 2002
>png-1.2.1/+CONTENTS
> < -rw-r--r--  1 root  wheel      27 Jun 24 07:50:17 2002
>png-1.2.1/+REQUIRED_BY
> ---
>> -rw-r--r--  1 root  wheel     629 Jul 24 08:18:03 2002
>>png-1.2.4/+CONTENTS

That should never, never, happen !

Is there some flag, variable, or something I missed,  to avoid this ?

Thanks,

-- 
Xavier HUMBERT  -  Systemes et Reseaux     |     labo-info@injep.fr
INJEP                                      |     humbert@injep.fr