commit:     b925c0292e68ade7bfddb23896fc858539236899
Author:     Matthew Smith <matthew <AT> gentoo <DOT> org>
AuthorDate: Fri Apr 19 07:34:01 2024 +0000
Commit:     Matthew Smith <matthew <AT> gentoo <DOT> org>
CommitDate: Tue Apr 23 13:10:26 2024 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b925c029

profiles: mask <net-misc/rabbitmq-server-3.13.1

Older versions are blocking dev-lang/erlang cleanup, and
<3.12.9 is vulnerable to CVE-2023-46118.

Bug: https://bugs.gentoo.org/918527
Signed-off-by: Matthew Smith <matthew <AT> gentoo.org>

 profiles/package.mask | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/profiles/package.mask b/profiles/package.mask
index 7efdbb769a87..ce2f91c8aa8e 100644
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -33,6 +33,13 @@
 
 #--- END OF EXAMPLES ---
 
+# Matthew Smith <[email protected]> (2024-04-23)
+# Security issues (Bug #918527) and blocking cleanup of vulnerable
+# dev-lang/erlang versions. Please upgrade.
+# https://www.rabbitmq.com/docs/upgrade
+# Removal on 2024-05-23
+<net-misc/rabbitmq-server-3.13.1
+
 # Arthur Zamarin <[email protected]> (2024-04-20)
 # EAPI6 package, with no reverse dependencies. Not really maintained
 # since gentoo's transition to git. Distfile is fetch and mirror

Reply via email to