commit:     6628f528a54ba37e93bd794822b2b8f8d3af11e8
Author:     Michał Górny <mgorny <AT> gentoo <DOT> org>
AuthorDate: Sun Apr 14 08:46:43 2019 +0000
Commit:     Michał Górny <mgorny <AT> gentoo <DOT> org>
CommitDate: Sun Apr 14 08:46:43 2019 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=6628f528

package.mask: Last rite app-text/active-dvi

Bug: https://bugs.gentoo.org/651430
Signed-off-by: Michał Górny <mgorny <AT> gentoo.org>

 profiles/package.mask | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/profiles/package.mask b/profiles/package.mask
index 0b1a12ef363..78f1de10cfc 100644
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -29,6 +29,14 @@
 
 #--- END OF EXAMPLES ---
 
+# Michał Górny <[email protected]> (14 Apr 2019)
+# The ebuild violates EAPI and relies on STRIP_MASK.  The default
+# behavior makes it capable of executing arbitrary commands when running
+# files from untrusted sources.  Last maintainer activity in 2015.  Last
+# upstream release in 2011.
+# Removal in 30 days.  Bug #651430.
+app-text/active-dvi
+
 # Michał Górny <[email protected]> (14 Apr 2019)
 # The ebuild violates EAPI and relies on STRIP_MASK.  Also has
 # suspicious USE=debug logic.  Not touched since 2016.

Reply via email to