Bug 300408

Summary:	[tracker] www-client/seamonkey-2 p.mask removal
Product:	Gentoo Linux	Reporter:	Lars Wendler (Polynomial-C) (RETIRED) <polynomial-c>
Component:	Current packages	Assignee:	Lars Wendler (Polynomial-C) (RETIRED) <polynomial-c>
Status:	RESOLVED FIXED
Severity:	critical	CC:	mmokrejs, mozilla, pacho
Priority:	High	Keywords:	SECURITY, Tracker
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://tinderbox.dev.gentoo.org/misc/rindex/www-client/seamonkey
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:	300409, 300411, 300412, 300414, 300418, 300422, 300423, 300432, 300433, 300437, 300439, 300444, 300445, 300446, 300448, 300450, 300456, 300457, 300458, 300459, 300461, 300463, 300464
Bug Blocks:	305789

Description Lars Wendler (Polynomial-C) (RETIRED) gentoo-dev

2010-01-10 13:18:50 UTC

With the release of seamonkey-2.0 all older versions have been discontinued. This means there will be no more security-fixes for any version older than 2.x.
One big change in the 2.x series is that it no longer ships with any pkg-config files so any software which could use seamonkey-1.1.x as a replacement of xulrunner cannot be compiled against seamonkey-2.x.
In order to remove the package mask of seamonkey-2.x all packages which depend on seamonkey need this dependency to be removed (see URL for a list of affected packages).

Reproducible: Always

Steps to Reproduce:

Comment 1 Lars Wendler (Polynomial-C) (RETIRED) gentoo-dev

2010-01-10 15:01:04 UTC

Further explanation: I'm planing to remove seamonkey-1* as soon as seamonkey-2 has a stable version in tree. That's why I already request seamonkey dependency removal from stable versions of packages.

Comment 2 Lars Wendler (Polynomial-C) (RETIRED) gentoo-dev

2010-03-21 07:38:32 UTC

This now becomes even more urgent. Upstream officially discontinued seamonkey-1 and also wrote about known unfixed security vulnerabilities. See this news post for reference: 
http://www.seamonkey-project.org/news#2010-03-16

Comment 3 Lars Wendler (Polynomial-C) (RETIRED) gentoo-dev

2010-04-06 18:34:18 UTC

This is fixed. bug #300418 needs just all arched to have ponyprog stabilized before it can be closed...
seamonkey-2 has been unleashed into ~arch...

Comment 4 Linear Systems Tech Svcs. 2010-04-06 22:26:17 UTC

As of a sync at 1200hrs PDT (2000hrs GMT), this is still hard-masked for ~amd64:


localhost ~ # ls /usr/portage/www-client/seamonkey/
ChangeLog                files/                   seamonkey-1.1.18.ebuild
Manifest                 metadata.xml             seamonkey-2.0.4.ebuild
localhost ~ # emerge -pv =www-client/seamonkey-2.0.4

These are the packages that would be merged, in order:

Calculating dependencies... done!

!!! All ebuilds that could satisfy "=www-client/seamonkey-2.0.4" have been masked.
!!! One of the following masked packages is required to complete your request:
- www-client/seamonkey-2.0.4 (masked by: package.mask, ~amd64 keyword)
/usr/portage/profiles/package.mask:
# Jory A. Pratt <anarchy@gentoo.org> (24 Sep 2009)
# Much testing needed, not ready for mainline by any means.
...

Comment 5 Lars Wendler (Polynomial-C) (RETIRED) gentoo-dev

2010-04-06 22:56:11 UTC

* gentoo-x86/profiles/package.mask: unleash seamonkey-2 into ~arch (hopefully this time for real...)

Please wait a while and sync again...