Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 526822 - media-gfx/gqview: please remove dependency on media-libs/lcms:0
Summary: media-gfx/gqview: please remove dependency on media-libs/lcms:0
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Mr. Bones. (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on: 529166
Blocks: lcms-1
  Show dependency tree
 
Reported: 2014-10-25 22:53 UTC by Matthias Maier
Modified: 2014-12-30 07:30 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Matthias Maier gentoo-dev 2014-10-25 22:53:45 UTC
media-libs/lcms:0 is unmaintained, has seen no releases since 2009, and (according to upstream) is affected by unspecified serious security issues. Please 

* either upgrade your package to use media-libs/lcms:2, 
* or hard-disable an optional dependency on media-libs/lcms:0, 
* or mask your package for removal.

Thank you!
Comment 1 Georg Bege 2014-12-30 07:30:57 UTC
I've just investigated the code a bit, its located in color-man.c
The code is very small, only a couple of functions used in order to load color profiles.

In fact its easily port over to lcms2 - the only thing which is incompatible is the error handler function (which is not existing in lcms2).
I simply did a build which links against lcms2 - seems to work so far.
I just wrote to the upstream... maybe they will change it.