Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 526642 (lcms-1)

Summary: [TRACKER] media-libs/lcms:0 removal
Product: Gentoo Linux Reporter: Agostino Sarubbo <ago>
Component: Current packagesAssignee: Printing Team <printing>
Status: RESOLVED FIXED    
Severity: normal CC: nikoli, vivo75
Priority: Normal Keywords: Tracker
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---
Bug Depends on: 526800, 526806, 526808, 526810, 526812, 526814, 526816, 526818, 526820, 526822, 526824, 526826, 526830, 526834, 526836, 526838, 526840, 526844, 526846, 526848, 526852, 526854, 526856, 526858, 534104, 546250    
Bug Blocks: 479874    

Description Agostino Sarubbo gentoo-dev 2014-10-24 13:38:19 UTC
1.x is not anymore maintained. The last release is from 2009.

see also:
https://github.com/mm2/Little-CMS/issues/29#issuecomment-40654981
Comment 1 Manuel Rüger (RETIRED) gentoo-dev 2014-10-24 14:09:30 UTC
Should we mask these, too?

./app-emulation/crossover-bin/crossover-bin-13.1.0.ebuild:      lcms? ( media-libs/lcms:0 )
./app-emulation/crossover-bin/crossover-bin-12.2.0-r1.ebuild:   lcms? ( media-libs/lcms:0 )
./app-emulation/crossover-bin/crossover-bin-13.1.2.ebuild:      lcms? ( media-libs/lcms:0 )
./app-emulation/crossover-bin/crossover-bin-13.0.1.ebuild:      lcms? ( media-libs/lcms:0 )
./app-emulation/crossover-bin/crossover-bin-12.2.2.ebuild:      lcms? ( media-libs/lcms:0 )
./app-emulation/crossover-bin/crossover-bin-12.5.0.ebuild:      lcms? ( media-libs/lcms:0 )
./app-emulation/crossover-bin/crossover-bin-12.5.1.ebuild:      lcms? ( media-libs/lcms:0 )
./app-emulation/crossover-bin/crossover-bin-12.2.1-r1.ebuild:   lcms? ( media-libs/lcms:0 )
./app-emulation/crossover-bin/crossover-bin-13.1.3.ebuild:      lcms? ( media-libs/lcms:0 )
./app-emulation/crossover-bin/crossover-bin-12.1.2-r1.ebuild:   lcms? ( media-libs/lcms:0 )
./app-emulation/crossover-bin/crossover-bin-13.2.0.ebuild:      lcms? ( media-libs/lcms:0 )
./app-emulation/crossover-bin/crossover-bin-13.0.0.ebuild:      lcms? ( media-libs/lcms:0 )
./app-emulation/wine/wine-1.4.1.ebuild: lcms? ( media-libs/lcms:0= )
./app-emulation/wine/wine-1.2.3.ebuild: lcms? ( media-libs/lcms:0= )
./app-emulation/wine/wine-1.3.28.ebuild:        lcms? ( media-libs/lcms:0= )
./app-emulation/wine/wine-1.6.1.ebuild: lcms? ( media-libs/lcms:0= )
./gnome-extra/gnome-color-manager/gnome-color-manager-2.32.0.ebuild:    media-libs/lcms:0
./www-client/netsurf/netsurf-2.9.ebuild:                media-libs/lcms:0
./www-client/netsurf/netsurf-3.0-r1.ebuild:             media-libs/lcms:0
./www-client/netsurf/netsurf-3.0.ebuild:                media-libs/lcms:0
./media-gfx/rawstudio/rawstudio-2.0-r1.ebuild:  media-libs/lcms:0
./media-gfx/dcraw/dcraw-9.20.ebuild:    lcms? ( media-libs/lcms:0 )
./media-gfx/dcraw/dcraw-9.21.ebuild:    lcms? ( media-libs/lcms:0 )
./media-gfx/dcraw/dcraw-9.17.ebuild:    lcms? ( media-libs/lcms:0 )
./media-gfx/dcraw/dcraw-9.19.ebuild:    lcms? ( media-libs/lcms:0 )
./media-gfx/dcraw/dcraw-9.22.ebuild:    lcms? ( media-libs/lcms:0 )
./media-gfx/splashutils/splashutils-1.5.4.4-r1.ebuild:          media-libs/lcms:0[static-libs]
./media-gfx/splashutils/splashutils-1.5.4.4-r2.ebuild:          media-libs/lcms:0[static-libs]
./media-gfx/splashutils/splashutils-1.5.4.4-r4.ebuild:          media-libs/lcms:0[static-libs]
./media-gfx/splashutils/splashutils-1.5.4.4-r3.ebuild:          media-libs/lcms:0[static-libs]
./media-gfx/ufraw/ufraw-0.19.2.ebuild:  media-libs/lcms:0
./media-gfx/mate-image-viewer/mate-image-viewer-1.6.2.ebuild:   lcms? ( media-libs/lcms:0 )
./media-gfx/gqview/gqview-2.1.5.ebuild: lcms? ( media-libs/lcms:0 )
./media-gfx/photoprint/photoprint-0.4.2_pre2.ebuild:    media-libs/lcms:0
./sys-apps/tuxonice-userui/tuxonice-userui-1.1-r2.ebuild:               media-libs/lcms:0[static-libs]
./dev-python/pillow/pillow-2.5.3.ebuild:        lcms? ( media-libs/lcms:0= )
./dev-python/pillow/pillow-2.3.1.ebuild:        lcms? ( media-libs/lcms:0= )
./dev-python/pillow/pillow-2.4.0.ebuild:        lcms? ( media-libs/lcms:0= )
./dev-python/imaging/imaging-1.1.7-r4.ebuild:   lcms? ( media-libs/lcms:0 )
./dev-python/imaging/imaging-1.1.7-r1.ebuild:   lcms? ( media-libs/lcms:0 )
./dev-python/imaging/imaging-1.1.7-r2.ebuild:   lcms? ( media-libs/lcms:0 )
Comment 2 Matthias Maier gentoo-dev 2014-10-24 19:55:54 UTC
I have identified the following packages currently in tree with exclusive
dependencies on lcms:0 (usually depending on use flag):

  app-emulation/crossover-bin
  dev-python/imaging
  dev-python/pillow
  media-gfx/dcraw
  media-gfx/entangle
  media-gfx/exact-image
  media-gfx/f-spot
  media-gfx/geeqie
  media-gfx/gqview
  media-gfx/mate-image-viewer
  media-gfx/photoprint
  media-gfx/rawstudio
  media-gfx/splashutils
  media-libs/devil
  media-libs/sk1libs
  sci-libs/libecwj2
  sys-apps/tuxonice-userui
  www-client/netsurf


Packages with old or specific versions depending on lcms:0

  <app-emulation/wine-1.6.2
  <gnome-extra/gnome-color-manager-3.10.1
  <media-gfx/eog-3.10.2
  <media-gfx/gimp-2.8.8
  <media-gfx/ufraw-0.20
  =media-gfx/xsane-0.999


With optional dependency on lcms:0

  media-libs/oyranos


Also needs update:

  app-emulation/emul-linux-x86-baselibs
Comment 3 Andreas K. Hüttel archtester gentoo-dev 2014-10-25 21:39:33 UTC
So, gentlemen, let's do this properly: convert the bug here to a tracker and file a bug per affected package.
Comment 4 Andreas K. Hüttel archtester gentoo-dev 2014-10-25 21:44:48 UTC
Template bug text:

==============
media-libs/lcms:0 is unmaintained, has seen no releases since 2009, and (according to upstream) is affected by unspecified serious security issues. Please 

* either upgrade your package to use media-libs/lcms:2, 
* or hard-disable an optional dependency on media-libs/lcms:0, 
* or mask your package for removal.

Thank you!
==============
Comment 5 Matthias Maier gentoo-dev 2014-10-25 23:29:05 UTC
individual bug reports filed. Excluding
  media-libs/oyranos

After all individual bugs are resolved
  app-emulation/emul-linux-x86-baselibs
has to be fixed as well. Omitting a bugreport for the moment.
Comment 6 Andreas K. Hüttel archtester gentoo-dev 2015-03-07 00:12:45 UTC
+  07 Mar 2015; Andreas K. Huettel <dilfridge@gentoo.org>
+  -crossover-bin-12.1.2-r2.ebuild, -crossover-bin-12.2.0-r2.ebuild,
+  -crossover-bin-12.2.1-r2.ebuild, -crossover-bin-12.2.2-r1.ebuild:
+  Drop old versions, see bug 526806
+
Comment 7 Andreas K. Hüttel archtester gentoo-dev 2015-03-07 00:13:12 UTC
eek wrong bug
Comment 8 Andreas K. Hüttel archtester gentoo-dev 2015-04-10 22:31:23 UTC
Masked for removal
Comment 9 Andreas K. Hüttel archtester gentoo-dev 2015-04-11 12:28:23 UTC
Future mask message (corrected):

# Andreas K. Huettel <dilfridge@gentoo.org>
# media-libs/lcms:0 has serious security issues, is unmaintained
# and will be removed in 30 days, see bug 526642
# With it we remove its last reverse dependencies,
# media-libs/sk1libs media-gfx/uniconvw sci-libs/libecwj2, 
# see bug 526838
media-libs/lcms:0
media-gfx/uniconvw
media-libs/sk1libs
sci-libs/libecwj2
Comment 10 Matthias Maier gentoo-dev 2015-05-27 20:55:25 UTC
Masked for removal

  27 May 2015; Matthias Maier <tamiko@gentoo.org> package.mask:
  mask lcms:0 for removal, bug #526642
Comment 11 Andreas K. Hüttel archtester gentoo-dev 2015-05-28 18:08:35 UTC
Aaaand lcms:0 is gone. :)