commit:     ef708bfa3da9a5d0ffa1485e16292723d4664e6b
Author:     Virgil Dupras <vdupras <AT> gentoo <DOT> org>
AuthorDate: Thu Aug 23 12:13:25 2018 +0000
Commit:     Virgil Dupras <vdupras <AT> gentoo <DOT> org>
CommitDate: Thu Aug 23 12:14:48 2018 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=ef708bfa

profiles: mask vulnerable versions of dev-python/paramiko

Bug: https://bugs.gentoo.org/664346

 profiles/arch/alpha/package.use.mask | 4 ++++
 profiles/package.mask                | 4 ++++
 2 files changed, 8 insertions(+)

diff --git a/profiles/arch/alpha/package.use.mask 
b/profiles/arch/alpha/package.use.mask
index c3eb7a952f0..0686776d281 100644
--- a/profiles/arch/alpha/package.use.mask
+++ b/profiles/arch/alpha/package.use.mask
@@ -1,6 +1,10 @@
 # Copyright 1999-2018 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
 
+# Virgil Dupras <[email protected]> (23 Aug 2018)
+# Depends on vulnerable version of paramiko. Bug #664346
+dev-vcs/bzr sftp
+
 # Joonas Niilola <[email protected]> (17 Jun 2018)
 # Optional dependency not available for this arch
 dev-libs/efl vlc

diff --git a/profiles/package.mask b/profiles/package.mask
index 777e380352b..19702998f14 100644
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -29,6 +29,10 @@
 
 #--- END OF EXAMPLES ---
 
+# Virgil Dupras <[email protected]> (23 Aug 2018)
+# Vulnerable and can't be removed yet because of alpha. Bug #664346
+<dev-python/paramiko-2.4.1
+
 # Bernard Cafarelli <[email protected]> (20 Aug 2018)
 # Requires >=dev-libs/openssl-1.1.0
 >=net-misc/nextcloud-client-2.5.0_beta1

Reply via email to