Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 526818 - media-gfx/f-spot: please remove dependency on media-libs/lcms:0
Summary: media-gfx/f-spot: please remove dependency on media-libs/lcms:0
Status: RESOLVED WONTFIX
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Denis Dupeyron (RETIRED)
URL:
Whiteboard: Pending removal: 2015-01-01
Keywords: PMASKED
Depends on:
Blocks: lcms-1
  Show dependency tree
 
Reported: 2014-10-25 22:50 UTC by Matthias Maier
Modified: 2015-01-07 19:29 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Matthias Maier gentoo-dev 2014-10-25 22:50:02 UTC
media-libs/lcms:0 is unmaintained, has seen no releases since 2009, and (according to upstream) is affected by unspecified serious security issues. Please 

* either upgrade your package to use media-libs/lcms:2, 
* or hard-disable an optional dependency on media-libs/lcms:0, 
* or mask your package for removal.

Thank you!
Comment 1 Pacho Ramos gentoo-dev 2014-11-22 10:31:22 UTC
Maybe should be treecleaned as it's dead for 4 ages and looks like there is no port to new lcms
Comment 2 Jack 2014-12-16 19:18:32 UTC
I've spent some time, and finally tracked down what's going on with f-spot.  I still don't completely understand the reasoning, but development has moved from gnome git to github and is now under mono/f-spot.  Development is still not extremely active, but they have converted to lcms2, and done some of the other cleanups.  I've successfully compiled from the new git master, but am still working through runtime errors.  I don't know if they can have a new release in less than another few months - would it be better to defer the treecleaning until a new release, or just remove this one, and then re-add the next version?
Comment 3 Pacho Ramos gentoo-dev 2014-12-16 21:28:14 UTC
I think the best option is to keep killing this (as the reasons are still there) and, if at some time the new f-spot is really usable, I guess won't be problems to include it again
Comment 4 Pacho Ramos gentoo-dev 2015-01-07 19:29:06 UTC
dropped