Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 526810 - dev-python/pillow: please remove dependency on media-libs/lcms:0
Summary: dev-python/pillow: please remove dependency on media-libs/lcms:0
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Python Gentoo Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: lcms-1
  Show dependency tree
 
Reported: 2014-10-25 22:39 UTC by Matthias Maier
Modified: 2014-10-26 03:08 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Matthias Maier gentoo-dev 2014-10-25 22:39:55 UTC 
media-libs/lcms:0 is unmaintained, has seen no releases since 2009, and (according to upstream) is affected by unspecified serious security issues. Please 

* either upgrade your package to use media-libs/lcms:2, 
* or hard-disable an optional dependency on media-libs/lcms:0, 
* or mask your package for removal.

Thank you!
Comment 1 Mike Gilbert gentoo-dev 2014-10-26 03:08:51 UTC 
+*pillow-2.4.0-r1 (26 Oct 2014)
+*pillow-2.5.3-r1 (26 Oct 2014)
+
+  26 Oct 2014; Mike Gilbert <floppym@gentoo.org> +pillow-2.4.0-r1.ebuild,
+  +pillow-2.5.3-r1.ebuild, -pillow-2.3.1.ebuild, -pillow-2.4.0.ebuild,
+  -pillow-2.5.3.ebuild:
+  Recent versions of pillow use lcms:2. Bug 526810.