media-libs/lcms:0 is unmaintained, has seen no releases since 2009, and (according to upstream) is affected by unspecified serious security issues. Please * either upgrade your package to use media-libs/lcms:2, * or hard-disable an optional dependency on media-libs/lcms:0, * or mask your package for removal. Thank you!
I've just investigated the code a bit, its located in color-man.c The code is very small, only a couple of functions used in order to load color profiles. In fact its easily port over to lcms2 - the only thing which is incompatible is the error handler function (which is not existing in lcms2). I simply did a build which links against lcms2 - seems to work so far. I just wrote to the upstream... maybe they will change it.