Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 534102 - app-emulation/emul-linux-x86-baselibs - Please remove media-libs/lcms:0 libraries
Summary: app-emulation/emul-linux-x86-baselibs - Please remove media-libs/lcms:0 libra...
Status: RESOLVED OBSOLETE
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Multilib team
URL:
Whiteboard:
Keywords:
: 534104 (view as bug list)
Depends on:
Blocks:
 
Reported: 2014-12-31 14:30 UTC by Matthias Maier
Modified: 2015-06-02 08:33 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Matthias Maier gentoo-dev 2014-12-31 14:30:51 UTC 
media-libs/lcms:0 is unmaintained, has seen no releases since 2009, and (according to upstream) is affected by unspecified serious security issues.

As the tree is pretty much cleaned up at this point, please drop

  >=media-libs/lcms-1.19-r2:0[abi_x86_32(-)]

from emul-linux-x86-baselibs and drop binary versions of lcms-1* as well.
Comment 1 Pacho Ramos gentoo-dev 2014-12-31 20:44:31 UTC 
*** Bug 534104 has been marked as a duplicate of this bug. ***
Comment 2 Andreas K. Hüttel archtester gentoo-dev 2015-03-06 20:04:43 UTC 
lcms:0 is going away this weekend
Comment 3 Andreas K. Hüttel archtester gentoo-dev 2015-03-07 00:09:17 UTC 
Dropped the dependency so lcms itself can be removed. 

This means for abi_x86_32 everything is fine (the library is not pulled in separately anymore and won't be installed from the bundled file).

I'll leave it to you to remove the vulnerable libraries from the tarball for the -abi_x86_32 case.
Comment 4 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2015-06-02 08:33:46 UTC 
The emul-linux-x86 packages have been removed.