Bug 534102

Summary:	app-emulation/emul-linux-x86-baselibs - Please remove media-libs/lcms:0 libraries
Product:	Gentoo Linux	Reporter:	Matthias Maier <tamiko>
Component:	Current packages	Assignee:	Multilib team <multilib+disabled>
Status:	RESOLVED OBSOLETE
Severity:	normal	CC:	dilfridge, printing
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Matthias Maier gentoo-dev

2014-12-31 14:30:51 UTC

media-libs/lcms:0 is unmaintained, has seen no releases since 2009, and (according to upstream) is affected by unspecified serious security issues.

As the tree is pretty much cleaned up at this point, please drop

  >=media-libs/lcms-1.19-r2:0[abi_x86_32(-)]

from emul-linux-x86-baselibs and drop binary versions of lcms-1* as well.

Comment 1 Pacho Ramos gentoo-dev

2014-12-31 20:44:31 UTC

*** Bug 534104 has been marked as a duplicate of this bug. ***

Comment 2 Andreas K. Hüttel archtester

2015-03-06 20:04:43 UTC

lcms:0 is going away this weekend

Comment 3 Andreas K. Hüttel archtester

2015-03-07 00:09:17 UTC

Dropped the dependency so lcms itself can be removed. 

This means for abi_x86_32 everything is fine (the library is not pulled in separately anymore and won't be installed from the bundled file).

I'll leave it to you to remove the vulnerable libraries from the tarball for the -abi_x86_32 case.

Comment 4 Michał Górny archtester

2015-06-02 08:33:46 UTC

The emul-linux-x86 packages have been removed.