profiles/package.mask: mask app-admin/webmin for removal

Signed-off-by: Matthias Maier <tamiko@gentoo.org>

diff --git a/profiles/package.mask b/profiles/package.mask
index b4848ed42fc92e455418a0d1c1a5874e21ccdd2a..55037789ea832fbc5a074379f7f1cec3d7be7565 100644 (file)
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -29,6 +29,12 @@
 
 #--- END OF EXAMPLES ---
 
+# Matthias Maier <tamiko@gentoo.org> (2019-08-22)
+# Masked for removal in 30 days. Unmaintained and upstream has released
+# backdoored versions for more than a year due to a compromised development
+# server, http://www.webmin.com/exploit.html
+app-admin/webmin
+
 # Hans de Graaff <graaff@gentoo.org> (2019-08-21)
 # This virtual was useful when jruby was still around but this
 # has not been the case for a long time and there are no