Bugzilla Bug 123925

QA checks for package directory media-fonts/acroread-asianfonts:
media-fonts/acroread-asianfonts: digest collisions:
  major:  Digest conflict on 'chsfont.tar.gz' in
'media-fonts/acroread-asianfonts/files/digest-acroread-asianfonts-7.0.20050728'
(original was
'media-fonts/acroread-asianfonts/files/digest-acroread-asianfonts-5.0.20020815')
  major:  Digest conflict on 'chtfont.tar.gz' in
'media-fonts/acroread-asianfonts/files/digest-acroread-asianfonts-7.0.20050728'
(original was
'media-fonts/acroread-asianfonts/files/digest-acroread-asianfonts-5.0.20020815')
  major:  Digest conflict on 'jpnfont.tar.gz' in
'media-fonts/acroread-asianfonts/files/digest-acroread-asianfonts-7.0.20050728'
(original was
'media-fonts/acroread-asianfonts/files/digest-acroread-asianfonts-5.0.20020815')
  major:  Digest conflict on 'korfont.tar.gz' in
'media-fonts/acroread-asianfonts/files/digest-acroread-asianfonts-7.0.20050728'
(original was
'media-fonts/acroread-asianfonts/files/digest-acroread-asianfonts-5.0.20020815')


Unversioned tarballs are bad!

cjk: any movement on this issue?

Please, remove media-fonts/acroread-asianfonts-5.0.20020815 and
app-text/acroread-5.10 from the tree, so that this can be closed. It's been
package.masked for over one year and is vulnerable to GLSAs 200507-09 and
200508-11.

# Stefan Schweizer <genstef@gentoo.org> (08 Jul 2005)
# Masked because of "UnixAppOpenFilePerform() Buffer Overflow", #98101
<=app-text/acroread-5.10
=media-fonts/acroread-asianfonts-5.0.20020815 

Treecleaners doesn't do per-version stuff at the moment, if you want the whole
package punted, put us back on, if it's per-version obviously someone still
cares ;)

a little complicated because there is also a security advisory for 7.08 at the
moment. anyway, whoever masked acroread-asianfonts-5.0 forgot to put 7.0 fonts
into stable. not sure how this managed to escape us for so long as this was
nearly a year ago.

(In reply to comment #4)
> a little complicated because there is also a security advisory for 7.08 at the
> moment. anyway, whoever masked acroread-asianfonts-5.0 forgot to put 7.0 fonts
> into stable. 

AFAICS, acroread-7* no longer depends on those fonts... if it's intentional, I
don't see why those fonts are still in the tree.

It's an additional font pack for eastern characters. You only install it if you
find some japanese pdf that you want to read under acroread. acroread doesn't
depend on it explicitly.

i've removed acroread-asianfonts-5.0 from the tree now. we'll just live with
amd64 being unstable for that package at the moment since no one has complained
when we marked it unstable back in 2005.

i suppose that should fix this bug for now. acroread 7.0 does download the
fonts on demand if it can't find them on the system, but some system
administrators may want to preinstall these fonts to save users having to
download them.