Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 326063 - net-misc/nxclient-3.4.0.7 still depends on libpng12
Summary: net-misc/nxclient-3.4.0.7 still depends on libpng12
Status: RESOLVED INVALID
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Gentoo Linux bug wranglers
URL:
Whiteboard:
Keywords:
: 353463 (view as bug list)
Depends on:
Blocks:
 
Reported: 2010-06-28 20:21 UTC by Helmut Jarausch
Modified: 2011-02-01 22:46 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Helmut Jarausch 2010-06-28 20:21:48 UTC 
The (binary) package  net-misc/nxclient-3.4.0.7 still contains libraries which
depend on libpng12 (the only one in my system)
Everything else uses libpng14.so

Reproducible: Always
Comment 1 Samuli Suominen (RETIRED) gentoo-dev 2010-06-28 20:25:05 UTC 
Yes, and we have libpng-1.2.44 which can be installed SLOTted with libpng-1.4.3 for it. Also the ebuild has correct deps,

nxclient-3.4.0.5.ebuild:	=media-libs/libpng-1.2*
nxclient-3.4.0.7.ebuild:	=media-libs/libpng-1.2*

So there is no bug. You can mail nxclient upstream and ask them to release new version, though.
Comment 2 roltel 2010-10-26 09:06:16 UTC 
Could you please reopen this bug. The problem here is that libpng < 1.4.3 has some severe security breaches (s. http://www.gentoo.org/security/en/glsa/glsa-201010-01.xml).

So this is a very urgent requirement, especially because nxserver is dependent on nxclient. That way every nxserver host might be compromised by privilege escalation or denial of service.

Is there a way to switch to the new libpng version without waiting for upstream?
Comment 3 Samuli Suominen (RETIRED) gentoo-dev 2011-02-01 22:46:08 UTC 
*** Bug 353463 has been marked as a duplicate of this bug. ***