Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 526834 - media-gfx/splashutils: please remove dependency on media-libs/lcms:0
Summary: media-gfx/splashutils: please remove dependency on media-libs/lcms:0
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal critical (vote)
Assignee: Proxy Maintainers
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: lcms-1
  Show dependency tree
 
Reported: 2014-10-25 23:03 UTC by Matthias Maier
Modified: 2015-01-06 09:05 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Matthias Maier gentoo-dev 2014-10-25 23:03:22 UTC
media-libs/lcms:0 is unmaintained, has seen no releases since 2009, and (according to upstream) is affected by unspecified serious security issues. Please 

* either upgrade your package to use media-libs/lcms:2, 
* or hard-disable an optional dependency on media-libs/lcms:0, 
* or mask your package for removal.

Thank you!
Comment 1 Andreas K. Hüttel archtester gentoo-dev 2014-12-26 20:14:05 UTC
Package will be masked for security reasons on 30/12/2014.
Comment 2 Andreas K. Hüttel archtester gentoo-dev 2014-12-30 22:22:21 UTC
Support for mng images has been dropped, since that feature only requires lcms:0.
Comment 3 i.Dark_Templar 2015-01-05 16:07:38 UTC
Why drop support for MNG images?
splashutils does not directly depend on lcms. It depends on libmng, which in turn depends on lcms. The only reason the dependency was direct, AFAIK, is that libmng does not ensure availability of static libs of lcms it depends on when you request static libs of libmng.

https://bugs.gentoo.org/show_bug.cgi?id=534784

And libmng already links to lcms:2, so there is no reason to drop mng support in splashutils.
Comment 4 i.Dark_Templar 2015-01-05 16:13:33 UTC
Ok, I've created separate bug for that: #534786
Comment 5 i.Dark_Templar 2015-01-05 16:14:23 UTC
Sorry, it didn't turn into a link. Here it is:

https://bugs.gentoo.org/show_bug.cgi?id=534786