Re: has the sun set ?

On Mon, Jun 1, 2015 at 11:33 AM, Philip Webb <[email protected]> wrote:
> Yesterday, while doing my weekly system update, I encountered a msg :
>
>   !!! The following installed packages are masked:
>   - media-libs/lcms-1.19-r1::gentoo (masked by: package.mask)
>   /usr/portage/profiles/package.mask:
>   # Matthias Maier <[email protected]> (27 May 2015)
>   # on behalf of Andreas K. Huettel <[email protected]>
>   # media-libs/lcms:0 has serious security issues and is unmaintained,
>   # see bug 526642. Please uninstall it and/or upgrade to media-libs/lcms:2
>
> I looked at the bug, which explains the reason for dropping Lcms:0 .
>
> Unfortunately, Kde-Sunset appears to require Lcms:0 for Libmng:0 ,
> which is required by Qt-Meta:3 & which aren't included in Kde-Sunset itself.
> For now, I can simply ignore the warning, but it looks
> as if it wb no longer possible to install Kde-Sunset on a new machine.
>
> I realise Gentoo itself doesn't provide support for Kde-Sunset,
> but does anyone know of a way round this obstacle or have other advice ?

IIRC mng support in Qt3 is optional. And I doubt you need it, so you
can easily patch the Qt3 ebuild to pass -no-libmng to configure (or
something like that), and you should be able to get rid of the
dependency.

The other (more obvious) alternative is importing lcms:0 in kde-sunset
or in a local overlay, but as the announcement says, it "has serious
security issues"...

Cheers,
Davide