mask lcms:0 for removal; mask lcms use flag for media-gfx/dcraw-9.10

4 files changed, 20 insertions, 4 deletions

diff --git a/profiles/ChangeLog b/profiles/ChangeLog
index 100c75eeda5b..007c1a6c4227 100644
--- a/profiles/ChangeLog
+++ b/profiles/ChangeLog
@@ -1,11 +1,14 @@
 # ChangeLog for profile directory
 # Copyright 1999-2015 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/profiles/ChangeLog,v 1.10014 2015/05/26 21:06:30 dilfridge Exp $
+# $Header: /var/cvsroot/gentoo-x86/profiles/ChangeLog,v 1.10015 2015/05/27 20:52:44 tamiko Exp $
 #
 # This ChangeLog should include records for all changes in profiles directory.
 # Only typo fixes which don't affect portage/repoman behaviour could be avoided
 # here. If in doubt put a record here!
 
+  27 May 2015; Matthias Maier <tamiko@gentoo.org> package.mask:
+  mask lcms:0 for removal, bug #526642
+
   26 May 2015; Andreas K. Huettel <dilfridge@gentoo.org> package.mask:
   Clarify mask message
 
diff --git a/profiles/base/ChangeLog b/profiles/base/ChangeLog
index c2100129d73a..54d7049d4340 100644
--- a/profiles/base/ChangeLog
+++ b/profiles/base/ChangeLog
@@ -1,6 +1,9 @@
 # ChangeLog for Gentoo base-profile
 # Copyright 1999-2015 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/profiles/base/ChangeLog,v 1.801 2015/05/27 17:00:04 grknight Exp $
+# $Header: /var/cvsroot/gentoo-x86/profiles/base/ChangeLog,v 1.802 2015/05/27 20:52:44 tamiko Exp $
+
+  27 May 2015; Matthias Maier <tamiko@gentoo.org> package.use.mask:
+  mask lcms use flag for media-gfx/dcraw-9.10 that depends on lcms:0
 
   27 May 2015; <grknight@gentoo.org> package.use.mask:
   Mask s6 USE since all arches do not have sys-apps/s6 keyworded
diff --git a/profiles/base/package.use.mask b/profiles/base/package.use.mask
index 2db5671284a8..d28e7b6df1b7 100644
--- a/profiles/base/package.use.mask
+++ b/profiles/base/package.use.mask
@@ -1,10 +1,14 @@
 # Copyright 1999-2015 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/profiles/base/package.use.mask,v 1.678 2015/05/27 17:00:04 grknight Exp $
+# $Header: /var/cvsroot/gentoo-x86/profiles/base/package.use.mask,v 1.679 2015/05/27 20:52:44 tamiko Exp $
 
 # This file requires >=portage-2.1.1
 # New entries go on top.
 
+# Matthias Maier <tamiko@gentoo.org> (27 May 2015)
+# mask lcms use flag for old dcraw versions that depends on lcms:0
+=media-gfx/dcraw-9.10 lcms
+
 # Brian Evans <grknight@gentoo.org> (27 May 2015)
 # Mask s6 USE since all arches do not have sys-apps/s6 keyworded
 dev-db/mysql-init-scripts s6
diff --git a/profiles/package.mask b/profiles/package.mask
index 44b6feff662b..3676abffbe82 100644
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -1,5 +1,5 @@
 ####################################################################
-# $Header: /var/cvsroot/gentoo-x86/profiles/package.mask,v 1.16536 2015/05/26 21:06:30 dilfridge Exp $
+# $Header: /var/cvsroot/gentoo-x86/profiles/package.mask,v 1.16537 2015/05/27 20:52:44 tamiko Exp $
 #
 # When you add an entry to the top of this file, add your name, the date, and
 # an explanation of why something is getting masked. Please be extremely
@@ -30,6 +30,12 @@
 
 #--- END OF EXAMPLES ---
 
+# Matthias Maier <tamiko@gentoo.org> (27 May 2015)
+# on behalf of Andreas K. Huettel <dilfridge@gentoo.org>
+# media-libs/lcms:0 has serious security issues, is unmaintained
+# and will be removed in 30 days, see bug 526642
+media-libs/lcms:0
+
 # Hans de Graaff <graaff@gentoo.org> (25 May 2015)
 # With the wwwold services going offline gorg no longer plays a role
 # in Gentoo's web environment. The wwwold services went offline due to