Add mask for old and vulnerable xorg-server.

diff --git a/profiles/ChangeLog b/profiles/ChangeLog
index a8af91636936dc7327df524c175cbf8123e0fe6d..a018e62495ab0787caed4f59f843e496602a1484 100644 (file)
--- a/profiles/ChangeLog
+++ b/profiles/ChangeLog
@@ -1,11 +1,15 @@
 # ChangeLog for profile directory
 # Copyright 1999-2015 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/profiles/ChangeLog,v 1.9674 2015/01/10 06:46:51 radhermit Exp $
+# $Header: /var/cvsroot/gentoo-x86/profiles/ChangeLog,v 1.9675 2015/01/10 13:44:28 chithanh Exp $
 #
 # This ChangeLog should include records for all changes in profiles directory.
 # Only typo fixes which don't affect portage/repoman behaviour could be avoided
 # here. If in doubt put a record here!
 
+  10 Jan 2015; Chí-Thanh Christopher Nguyễn <chithanh@gentoo.org>
+  package.mask:
+  Add mask for old and vulnerable xorg-server.
+
   10 Jan 2015; Tim Harder <radhermit@gentoo.org> package.mask:
   Mask dev-libs/protobuf-c-1.1.0 until protobuf-2.6.0 is unmasked.
 

diff --git a/profiles/package.mask b/profiles/package.mask
index e7423c7ff23621d2c0edf7abb16dd5310ad3b808..9c2d4436208520d0f975645708fb9cb5e3058f6b 100644 (file)
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -1,5 +1,5 @@
 ####################################################################
-# $Header: /var/cvsroot/gentoo-x86/profiles/package.mask,v 1.16280 2015/01/10 06:46:51 radhermit Exp $
+# $Header: /var/cvsroot/gentoo-x86/profiles/package.mask,v 1.16281 2015/01/10 13:44:28 chithanh Exp $
 #
 # When you add an entry to the top of this file, add your name, the date, and
 # an explanation of why something is getting masked. Please be extremely
@@ -30,6 +30,27 @@
 
 #--- END OF EXAMPLES ---
 
+# Chí-Thanh Christopher Nguyễn <chithanh@gentoo.org> (10 Jan 2015)
+# obsolete and vulnerable, bug #532086
+# removal in 30 days
+=x11-base/xorg-server-1.9*
+=x11-base/xorg-server-1.10*
+=x11-base/xorg-server-1.11*
+=x11-base/xorg-server-1.13*
+=x11-base/xorg-server-1.14*
+
+# Chí-Thanh Christopher Nguyễn <chithanh@gentoo.org> (10 Jan 2015)
+# requires obsolete and vulnerable xorg-server, bug #532086
+# removal in 30 days
+x11-drivers/psb-firmware
+x11-drivers/xf86-input-citron
+x11-drivers/xf86-video-cyrix
+x11-drivers/xf86-video-impact
+x11-drivers/xf86-video-nsc
+x11-drivers/xf86-video-sunbw2
+x11-libs/libdrm-poulsbo
+x11-libs/xpsb-glx
+
 # Tim Harder <radhermit@gentoo.org> (10 Jan 2015)
 # Masked until protobuf-2.6.0 is unmasked
 >=dev-libs/protobuf-c-1.1.0