commit:     e8aafec1405e01bf54cad2225f7b9ba156413454
Author:     Hans de Graaff <graaff <AT> gentoo <DOT> org>
AuthorDate: Sun Mar 29 07:48:07 2020 +0000
Commit:     Hans de Graaff <graaff <AT> gentoo <DOT> org>
CommitDate: Sun Mar 29 17:34:53 2020 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=e8aafec1

profiles/package.mask: mask dev-ruby/rails:4.2 for removal

Signed-off-by: Hans de Graaff <graaff <AT> gentoo.org>

 profiles/package.mask | 49 +++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 49 insertions(+)

diff --git a/profiles/package.mask b/profiles/package.mask
index e7f74217a76..d747e966717 100644
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -32,6 +32,55 @@
 
 #--- END OF EXAMPLES ---
 
+# Hans de Graaff <[email protected]> (2020-03-29)
+# Old ruby24-only rails version that is no longer supported upstream
+# and has known security issues, including dependencies and slots
+# specific to Rails 4.2.
+# Migrate to Rails 5.2.
+# Masked for removal in 30 days.
+dev-ruby/rails:4.2
+dev-ruby/railties:4.2
+dev-ruby/activerecord:4.2
+dev-ruby/actionmailer:4.2
+dev-ruby/actionpack:4.2
+dev-ruby/actionview:4.2
+dev-ruby/activejob:4.2
+dev-ruby/activemodel:4.2
+dev-ruby/activesupport:4.2
+dev-ruby/arel:6.0
+dev-ruby/actionpack-xml_parser:0
+dev-ruby/jquery-rails:3
+dev-ruby/postgres_ext
+dev-ruby/protected_attributes
+dev-ruby/rails-dom-testing:1
+dev-ruby/web-console:0
+# Metasploit is a reverse dependency on Rails 4.2 Upstream shows no
+# sign of moving to a supported Rails version. Metasploit will most
+# likely be moved to an overlay.
+dev-ruby/metasploit-concern
+dev-ruby/metasploit-credential
+dev-ruby/metasploit-model
+dev-ruby/metasploit_data_models
+net-analyzer/metasploit
+dev-ruby/rex-arch
+dev-ruby/rex-bin_tools
+dev-ruby/rex-core
+dev-ruby/rex-encoder
+dev-ruby/rex-exploitation
+dev-ruby/rex-java
+dev-ruby/rex-mime
+dev-ruby/rex-nop
+dev-ruby/rex-ole
+dev-ruby/rex-powershell
+dev-ruby/rex-random_identifier
+dev-ruby/rex-registry
+dev-ruby/rex-rop_builder
+dev-ruby/rex-socket
+dev-ruby/rex-sslscan
+dev-ruby/rex-struct2
+dev-ruby/rex-text
+dev-ruby/rex-zip
+
 # Michał Górny <[email protected]> (2020-03-29)
 # Unmaintained, seriously outdated, vulnerable.  Multiple bugs reported.
 # Stuck on Python 3.6.

Reply via email to