Created attachment 352030 [details] Build log Full build log attached.
Appears to be the result of that package moving from the bcmail dependency [1] to the bcpkix dependency [2, see URL]. Java herd, how do we proceed here? Slot >=1.49 into SLOT="1.49" and depend on || ( dev-java/bcmail:0 ( dev-java/bcmail:1.49 dev-java/bcpkix:1.49 ) ) if Portage supports that or do you have another idea? Alternatively we could try to remove the older versions, looking at the version numbers they are quite old and I wonder if there is a reason to keep them around. 2.0.8, 2.1.5, 2.1.5-r1 affected; 5.2.0 not affected. [1]: http://www.jarfinder.com/index.php/java/info/org.bouncycastle.cms.CMSEnvelopedData [2]: http://www.bouncycastle.org/docs/pkixdocs1.5on/index.html?org/bouncycastle/cms/CMSEnvelopedData.html
(In reply to Tom Wijsman (TomWij) from comment #1) > Alternatively we could try to remove the older versions, looking at the > version numbers they are quite old and I wonder if there is a reason to keep > them around. > > 2.0.8, 2.1.5, 2.1.5-r1 affected; 5.2.0 not affected. We need >=dev-java/itext-2.1.5:0 (note the ":0") to stick around for dev-java/jfreechart.
According to the pending revision bump on that package it appears we don't.
*itext-2.1.5-r2 (15 Aug 2013) *itext-2.0.8-r1 (15 Aug 2013) 15 Aug 2013; Tom Wijsman <TomWij@gentoo.org> +itext-2.0.8-r1.ebuild, +itext-2.1.5-r2.ebuild, -itext-2.0.8.ebuild, -itext-2.1.5-r1.ebuild: Revision bump. Slotted bcmail and bcprov dependencies. Punted old and broken version.