Mask <x11-drivers/nvidia-drivers-304 (bug #532342).

diff --git a/profiles/ChangeLog b/profiles/ChangeLog
index 79fc00661bd3e585bf0bab532a777c3b5fc8c891..ed1f9896bc808c5fa6fc377f94381299f986b059 100644 (file)
--- a/profiles/ChangeLog
+++ b/profiles/ChangeLog
@@ -1,11 +1,14 @@
 # ChangeLog for profile directory
 # Copyright 1999-2014 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/profiles/ChangeLog,v 1.9602 2014/12/12 09:21:57 pinkbyte Exp $
+# $Header: /var/cvsroot/gentoo-x86/profiles/ChangeLog,v 1.9603 2014/12/12 09:36:46 jer Exp $
 #
 # This ChangeLog should include records for all changes in profiles directory.
 # Only typo fixes which don't affect portage/repoman behaviour could be avoided
 # here. If in doubt put a record here!
 
+  12 Dec 2014; Jeroen Roovers <jer@gentoo.org> package.mask:
+  Mask <x11-drivers/nvidia-drivers-304 (bug #532342).
+
   12 Dec 2014; Sergey Popov <pinkbyte@gentoo.org> use.desc:
   Make 'vaapi' USE flag global as discussed in gentoo-dev maillist
 

diff --git a/profiles/package.mask b/profiles/package.mask
index 13f2c54f7b8d307903c99089f2814210b0c2de02..21e1e703afe9748f16d8bbacfecb6f658c5a6b73 100644 (file)
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -1,5 +1,5 @@
 ####################################################################
-# $Header: /var/cvsroot/gentoo-x86/profiles/package.mask,v 1.16212 2014/12/11 10:08:39 mgorny Exp $
+# $Header: /var/cvsroot/gentoo-x86/profiles/package.mask,v 1.16213 2014/12/12 09:36:46 jer Exp $
 #
 # When you add an entry to the top of this file, add your name, the date, and
 # an explanation of why something is getting masked. Please be extremely
@@ -30,6 +30,12 @@
 
 #--- END OF EXAMPLES ---
 
+# Jeroen Roovers <jer@gentoo.org> (12 Dec 2014)
+# The 96 and 173 branches are no longer supported and remain vulnerable to
+# CVE-2014-8298 (bug #532342). You may be able to mitigate the vulnerability by
+# disabling GLX indirect rendering protocol support on the X server.
+<x11-drivers/nvidia-drivers-304
+
 # Sergey Popov <pinkbyte@gentoo.org> (09 Dec 2014)
 # Security mask, wrt bug #529728
 <app-antivirus/clamav-0.98.5