Bug 578380

Summary:	[steam-overlay] games-util/steam-games-meta-0-r20141109::steam-overlay depends on media-libs/libpng-1.2.56:1.2::gentoo
Product:	Gentoo Linux	Reporter:	ephemer0l <om>
Component:	[OLD] Unspecified	Assignee:	Mario Kicherer <dev>
Status:	RESOLVED INVALID
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description ephemer0l 2016-03-27 17:14:52 UTC

See GLSA 201206-15 and 201010-01

Thanks.

Comment 1 Mario Kicherer 2016-04-04 16:32:40 UTC

If I don't read those GLSAs wrong, 1.2.56 is not affected. This might be also the reason why it is still available in portage.

Anyways, if Valve still wants this version, there is nothing we can do. If you do not want to use this version, you could check if Source games are also accepting more recent versions. If yes, we can lessen the version restriction.

Comment 2 James Le Cuirot gentoo-dev

2016-08-20 19:04:31 UTC

(In reply to Mario Kicherer from comment #1)
> If I don't read those GLSAs wrong, 1.2.56 is not affected. This might be
> also the reason why it is still available in portage.
> 
> Anyways, if Valve still wants this version, there is nothing we can do.

Agreed. This version is not vulnerable and if a problem were to arise in future, it would almost certainly be fixed because so much software relies on it.