Bug 326063

Summary:	net-misc/nxclient-3.4.0.7 still depends on libpng12
Product:	Gentoo Linux	Reporter:	Helmut Jarausch <jarausch>
Component:	Current packages	Assignee:	Gentoo Linux bug wranglers <bug-wranglers>
Status:	RESOLVED INVALID
Severity:	normal	CC:	Lyall, roland.schnabel
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Helmut Jarausch 2010-06-28 20:21:48 UTC

The (binary) package  net-misc/nxclient-3.4.0.7 still contains libraries which
depend on libpng12 (the only one in my system)
Everything else uses libpng14.so

Reproducible: Always

Comment 1 Samuli Suominen (RETIRED) gentoo-dev

2010-06-28 20:25:05 UTC

Yes, and we have libpng-1.2.44 which can be installed SLOTted with libpng-1.4.3 for it. Also the ebuild has correct deps,

nxclient-3.4.0.5.ebuild:	=media-libs/libpng-1.2*
nxclient-3.4.0.7.ebuild:	=media-libs/libpng-1.2*

So there is no bug. You can mail nxclient upstream and ask them to release new version, though.

Comment 2 roltel 2010-10-26 09:06:16 UTC

Could you please reopen this bug. The problem here is that libpng < 1.4.3 has some severe security breaches (s. http://www.gentoo.org/security/en/glsa/glsa-201010-01.xml).

So this is a very urgent requirement, especially because nxserver is dependent on nxclient. That way every nxserver host might be compromised by privilege escalation or denial of service.

Is there a way to switch to the new libpng version without waiting for upstream?

Comment 3 Samuli Suominen (RETIRED) gentoo-dev

2011-02-01 22:46:08 UTC

*** Bug 353463 has been marked as a duplicate of this bug. ***