summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorVirgil Dupras <vdupras@gentoo.org>2018-08-23 08:13:25 -0400
committerVirgil Dupras <vdupras@gentoo.org>2018-08-23 08:14:48 -0400
commitef708bfa3da9a5d0ffa1485e16292723d4664e6b (patch)
treefbf65a575db26f02382e9ae5ba8a8b0acd9824ba /profiles
parentapp-admin/apg: restore RDEPEND (diff)
downloadgentoo-ef708bfa3da9a5d0ffa1485e16292723d4664e6b.tar.gz
gentoo-ef708bfa3da9a5d0ffa1485e16292723d4664e6b.tar.bz2
gentoo-ef708bfa3da9a5d0ffa1485e16292723d4664e6b.zip
profiles: mask vulnerable versions of dev-python/paramiko
Bug: https://bugs.gentoo.org/664346
Diffstat (limited to 'profiles')
-rw-r--r--profiles/arch/alpha/package.use.mask4
-rw-r--r--profiles/package.mask4
2 files changed, 8 insertions, 0 deletions
diff --git a/profiles/arch/alpha/package.use.mask b/profiles/arch/alpha/package.use.mask
index c3eb7a952f02..0686776d2811 100644
--- a/profiles/arch/alpha/package.use.mask
+++ b/profiles/arch/alpha/package.use.mask
@@ -1,6 +1,10 @@
# Copyright 1999-2018 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
+# Virgil Dupras <vdupras@gentoo.org> (23 Aug 2018)
+# Depends on vulnerable version of paramiko. Bug #664346
+dev-vcs/bzr sftp
+
# Joonas Niilola <juippis@gmail.com> (17 Jun 2018)
# Optional dependency not available for this arch
dev-libs/efl vlc
diff --git a/profiles/package.mask b/profiles/package.mask
index 777e380352b8..19702998f14a 100644
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -29,6 +29,10 @@
#--- END OF EXAMPLES ---
+# Virgil Dupras <vdupras@gentoo.org> (23 Aug 2018)
+# Vulnerable and can't be removed yet because of alpha. Bug #664346
+<dev-python/paramiko-2.4.1
+
# Bernard Cafarelli <voyageur@gentoo.org> (20 Aug 2018)
# Requires >=dev-libs/openssl-1.1.0
>=net-misc/nextcloud-client-2.5.0_beta1