[Bug 284278] security/sudo: 1.9.16p2_1 pkg now pulls in 500MiB of dependencies

From: <bugzilla-noreply_at_freebsd.org>
Date: Wed, 22 Jan 2025 21:59:13 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=284278

            Bug ID: 284278
           Summary: security/sudo: 1.9.16p2_1 pkg now pulls in 500MiB of
                    dependencies
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: garga@FreeBSD.org
          Reporter: dch@freebsd.org
          Assignee: garga@FreeBSD.org
             Flags: maintainer-feedback?(garga@FreeBSD.org)

from vanilla 14.2-RELEASE amd64, using /latest/ packages, sudo pulls in
additional
500MiB of dependencies. Ideally the default sudo should not need so many
packages,
these are included in every Cloud release, so this would bloat things
significantly.

compare 1.9.16p2, with gettext, indexinfo + sudo:

```
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
The following 3 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
        gettext-runtime: 0.23 [FreeBSD]
        indexinfo: 0.3.1 [FreeBSD]
        sudo: 1.9.16p2 [FreeBSD]

Number of packages to be installed: 3

The process will require 9 MiB more space.
2 MiB to be downloaded.

Proceed with this action? [y/N]:
```

vs 1.9.16p2_1 with much more

```
# pkg install -r FreeBSD security/sudo
The package management tool is not yet installed on your system.
Do you want to fetch and install it now? [y/N]: y
Bootstrapping pkg from http://pkg0.fra.FreeBSD.org/FreeBSD:14:amd64/latest,
please wait...
Verifying signature with trusted certificate pkg.freebsd.org.2013102301... done
[picard.skunkwerks.at] Installing pkg-1.21.3...
[picard.skunkwerks.at] Extracting pkg-1.21.3: 100%
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
Updating database digests format: 100%
Checking integrity... done (1 conflicting)
  - sudo-1.9.16p2_1 [FreeBSD] conflicts with sudo-sssd-1.9.16p2_1 [FreeBSD] on
/usr/local/bin/cvtsudoers
Cannot solve problem using SAT solver, trying another plan
Checking integrity... done (0 conflicting)
The following 98 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
        adcli: 0.9.2_3 [FreeBSD]
        avahi-app: 0.8_2 [FreeBSD]
        brotli: 1.1.0,1 [FreeBSD]
        c-ares: 1.34.4 [FreeBSD]
        curl: 8.11.1_1 [FreeBSD]
        cyrus-sasl: 2.1.28_5 [FreeBSD]
        cyrus-sasl-gssapi: 2.1.28 [FreeBSD]
        dbus: 1.14.10_5,1 [FreeBSD]
        dbus-glib: 0.112_1 [FreeBSD]
        ding-libs: 0.6.1 [FreeBSD]
        e2fsprogs-libuuid: 1.47.2 [FreeBSD]
        expat: 2.6.4 [FreeBSD]
        gamin: 0.1.10_10 [FreeBSD]
        gdbm: 1.24 [FreeBSD]
        gettext-runtime: 0.23.1 [FreeBSD]
        glib: 2.80.5_1,2 [FreeBSD]
        gmp: 6.3.0 [FreeBSD]
        gnome_subr: 1.0 [FreeBSD]
        gnutls: 3.8.8 [FreeBSD]
        indexinfo: 0.3.1 [FreeBSD]
        jansson: 2.14 [FreeBSD]
        jose: 14 [FreeBSD]
        krb5: 1.21.3 [FreeBSD]
        ldb25: 2.5.3 [FreeBSD]
        libICE: 1.1.1,1 [FreeBSD]
        libSM: 1.2.4,1 [FreeBSD]
        libX11: 1.8.9,1 [FreeBSD]
        libXau: 1.0.11 [FreeBSD]
        libXdmcp: 1.1.5 [FreeBSD]
        libarchive: 3.7.7_1,1 [FreeBSD]
        libcbor: 0.11.0 [FreeBSD]
        libcjson: 1.7.18_2 [FreeBSD]
        libdaemon: 0.14_1 [FreeBSD]
        libevent: 2.1.12 [FreeBSD]
        libffi: 3.4.6 [FreeBSD]
        libfido2: 1.15.0 [FreeBSD]
        libgcrypt: 1.11.0 [FreeBSD]
        libgpg-error: 1.51 [FreeBSD]
        libiconv: 1.17_1 [FreeBSD]
        libidn2: 2.3.7 [FreeBSD]
        libinotify: 20240724 [FreeBSD]
        liblz4: 1.10.0,1 [FreeBSD]
        libnghttp2: 1.64.0 [FreeBSD]
        libpsl: 0.21.5_1 [FreeBSD]
        libssh2: 1.11.1,3 [FreeBSD]
        libsunacl: 1.0.1_1 [FreeBSD]
        libtasn1: 4.19.0_1 [FreeBSD]
        libunistring: 1.3 [FreeBSD]
        libunwind: 20240221_1 [FreeBSD]
        libxcb: 1.17.0 [FreeBSD]
        lmdb: 0.9.33,1 [FreeBSD]
        mpdecimal: 4.0.0 [FreeBSD]
        nettle: 3.10.1 [FreeBSD]
        openldap26-client: 2.6.9 [FreeBSD]
        p11-kit: 0.25.5 [FreeBSD]
        pcre2: 10.43 [FreeBSD]
        popt: 1.19_1 [FreeBSD]
        py311-aioquic: 1.2.0 [FreeBSD]
        py311-anyio: 4.7.0 [FreeBSD]
        py311-async_generator: 1.10 [FreeBSD]
        py311-attrs: 24.3.0 [FreeBSD]
        py311-certifi: 2024.12.14 [FreeBSD]
        py311-cffi: 1.17.1 [FreeBSD]
        py311-cryptography: 42.0.8_6,1 [FreeBSD]
        py311-dnspython: 2.7.0,1 [FreeBSD]
        py311-h11: 0.14.0 [FreeBSD]
        py311-h2: 4.1.0 [FreeBSD]
        py311-hpack: 4.0.0 [FreeBSD]
        py311-httpcore: 1.0.7 [FreeBSD]
        py311-httpx: 0.28.1 [FreeBSD]
        py311-hyperframe: 6.0.0 [FreeBSD]
        py311-idna: 3.10 [FreeBSD]
        py311-markdown: 3.6 [FreeBSD]
        py311-openssl: 24.1.0,1 [FreeBSD]
        py311-outcome: 1.3.0_1 [FreeBSD]
        py311-packaging: 24.2 [FreeBSD]
        py311-pyasn1: 0.6.0 [FreeBSD]
        py311-pyasn1-modules: 0.4.0 [FreeBSD]
        py311-pycparser: 2.22 [FreeBSD]
        py311-pylsqpack: 0.3.18 [FreeBSD]
        py311-service-identity: 24.2.0 [FreeBSD]
        py311-setuptools: 63.1.0_1 [FreeBSD]
        py311-sniffio: 1.3.1 [FreeBSD]
        py311-socksio: 1.0.0_1 [FreeBSD]
        py311-sortedcontainers: 2.4.0 [FreeBSD]
        py311-trio: 0.28.0 [FreeBSD]
        py311-truststore: 0.10.0 [FreeBSD]
        py311-typing-extensions: 4.12.2 [FreeBSD]
        python311: 3.11.11 [FreeBSD]
        readline: 8.2.13_2 [FreeBSD]
        samba416: 4.16.11_5 [FreeBSD]
        sssd2: 2.9.6 [FreeBSD]
        sudo-sssd: 1.9.16p2_1 [FreeBSD]
        talloc: 2.4.1 [FreeBSD]
        tdb: 1.4.9,1 [FreeBSD]
        tevent: 0.15.0 [FreeBSD]
        xorgproto: 2024.1 [FreeBSD]
        zstd: 1.5.6 [FreeBSD]

Number of packages to be installed: 98

The process will require 472 MiB more space.

Proceed with this action? [y/N]: n

-- 
You are receiving this mail because:
You are the assignee for the bug.