commit:     9ec3f9ffade45b3412e8b42a2fc89d9e4746b9af
Author:     Michał Górny <mgorny <AT> gentoo <DOT> org>
AuthorDate: Fri Dec 18 16:10:06 2015 +0000
Commit:     Michał Górny <mgorny <AT> gentoo <DOT> org>
CommitDate: Fri Dec 18 16:11:51 2015 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=9ec3f9ff

package.mask: Mask blueman due to vulnerability, #568644

 profiles/package.mask | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/profiles/package.mask b/profiles/package.mask
index 136b43d..8740ca2 100644
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -30,6 +30,11 @@
 
 #--- END OF EXAMPLES ---
 
+# Michał Górny <[email protected]> (18 Dec 2015)
+# Contains privilege escalation vulnerability that could be used to
+# execute random Python code passed via D-Bus as root. Bug #568644.
+<net-wireless/blueman-2.0.3
+
 # Michael Sterrett <[email protected]> (18 Dec 2015)
 # Unmaintained and no reason to use it or keep it around
 # when games-roguelike/rogue is a better choice.

Reply via email to