commit:     8dac54528398bcd32c75fedc037bbe388b192e1f
Author:     Sam James <sam <AT> gentoo <DOT> org>
AuthorDate: Wed Aug 11 21:14:20 2021 +0000
Commit:     Sam James <sam <AT> gentoo <DOT> org>
CommitDate: Wed Aug 11 21:14:46 2021 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=8dac5452

Revert "profiles: apply net-proxy/polipo mask only to vulnerable versions"

See bug for explanation; package is still vulnerable.

This reverts commit 50377a1996dc8e19e54e1d7322733eff93b90938.

Bug: https://bugs.gentoo.org/755896
Signed-off-by: Sam James <sam <AT> gentoo.org>

 profiles/package.mask | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/profiles/package.mask b/profiles/package.mask
index 8941bd0fe8e..9ac9190c81b 100644
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -32,10 +32,6 @@
 
 #--- END OF EXAMPLES ---
 
-# Andrew Savchenko <[email protected]> (2021-08-11)
-# Affected by CVE-2020-36420. #755896
-<net-proxy/polipo-1.1.1-r5
-
 # Joonas Niilola <[email protected]> (2021-08-11)
 # Broken since 2016. Latest upstream release 2014, no ebuild activity
 # from maintainer since 2016, EAPI-5 and the rest. HOMEPAGE leads to
@@ -374,6 +370,11 @@ net-p2p/go-ipfs-bin
 # Masked for removal in 30 days.
 dev-ruby/spork
 
+# John Helmert III <[email protected]> (2021-07-14)
+# Dead upstream, unfixed security issue.
+# Removal on 2021-08-13.  Bugs #755896, #781467.
+net-proxy/polipo
+
 # Marco Scardovi <[email protected]> (2021-07-13)
 # These packages were only ported for netbox. Not useful for anything else
 # No revdeps. Removal in 30 days (Bug #801991)

Reply via email to