package.mask: Last rite dev-go/go-crypto and go-net

Bug: https://bugs.gentoo.org/710142
Signed-off-by: Zac Medico <zmedico@gentoo.org>

diff --git a/profiles/package.deprecated b/profiles/package.deprecated
index 499da317742f67f7b081f33272f083be0278c86a..e283f8e9694a56746730b88cebef6efa2dd3cf9e 100644 (file)
--- a/profiles/package.deprecated
+++ b/profiles/package.deprecated
@@ -120,7 +120,5 @@ dev-python/pytest-cov
 # Zac Medico <zmedico@gentoo.org> (2019-12-06)
 # These golang libraries should be vendored either by upstream or via
 # the EGO_VENDOR variable.
-dev-go/go-crypto
-dev-go/go-net
 dev-go/go-sys
 dev-go/go-sqlite3

diff --git a/profiles/package.mask b/profiles/package.mask
index b91e6fa78a730b49fb7e24825b7e45178a53f7c7..6a015bbabcd26c5c4c2b596d044ce4c4059a2678 100644 (file)
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -32,6 +32,13 @@
 
 #--- END OF EXAMPLES ---
 
+# Zac Medico <zmedico@gentoo.org> (2020-04-26)
+# Mask obsolete and vulnerable dev-go/go-crypto, along with obsolete
+# reverse dependencies. Removal in 30 days.  Bug #710142.
+dev-go/go-crypto
+dev-go/go-net
+=dev-embedded/arduino-builder-1.4.1
+
 # Michał Górny <mgorny@gentoo.org> (2020-04-26)
 # Unmaintained.  Stuck on py3.6.  Missing tests (but having an unused
 # test flag!).  The only revdep is app-admin/ara that is masked