commit:     50377a1996dc8e19e54e1d7322733eff93b90938
Author:     Andrew Savchenko <bircoph <AT> gentoo <DOT> org>
AuthorDate: Wed Aug 11 14:51:46 2021 +0000
Commit:     Andrew Savchenko <bircoph <AT> gentoo <DOT> org>
CommitDate: Wed Aug 11 14:54:55 2021 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=50377a19

profiles: apply net-proxy/polipo mask only to vulnerable versions

Bug: https://bugs.gentoo.org/755896
Bug: https://bugs.gentoo.org/781467

Signed-off-by: Andrew Savchenko <bircoph <AT> gentoo.org>

 profiles/package.mask | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/profiles/package.mask b/profiles/package.mask
index d5c89bbcc1f..1e7e34f3e1d 100644
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -32,6 +32,10 @@
 
 #--- END OF EXAMPLES ---
 
+# Andrew Savchenko <[email protected]> (2021-08-11)
+# Affected by CVE-2020-36420. #755896
+<net-proxy/polipo-1.1.1-r5
+
 # Joonas Niilola <[email protected]> (2021-08-11)
 # Broken since 2016. Latest upstream release 2014, no ebuild activity
 # from maintainer since 2016, EAPI-5 and the rest. HOMEPAGE leads to
@@ -375,11 +379,6 @@ net-p2p/go-ipfs-bin
 # Masked for removal in 30 days.
 dev-ruby/spork
 
-# John Helmert III <[email protected]> (2021-07-14)
-# Dead upstream, unfixed security issue.
-# Removal on 2021-08-13.  Bugs #755896, #781467.
-net-proxy/polipo
-
 # Marco Scardovi <[email protected]> (2021-07-13)
 # These packages were only ported for netbox. Not useful for anything else
 # No revdeps. Removal in 30 days (Bug #801991)

Reply via email to