package.mask: update xcdroast p.mask

Only versions before app-cdr/xcdroast-0.98_alpha16-r2 are
vulnerable to bug 345337.

diff --git a/profiles/package.mask b/profiles/package.mask
index f6dbb68880ede849d4dc0dd495fc3e47479a7fdf..2506b9a93762fee2b36f5a6a116cb1580415bac8 100644 (file)
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -30,6 +30,10 @@
 
 #--- END OF EXAMPLES ---
 
+# Andrew Savchenko <bircoph@gentoo.org> (09 Jul 2016)
+# Vulnerable due to wrong suid binary permissions (#345337)
+<app-cdr/xcdroast-0.98_alpha16-r2
+
 # Michael Palimaka <kensington@gentoo.org) (7 Jul 2016)
 # Requires obsolete kde-apps/kate:4. No further upstream development.
 # Masked for removal in 30 days.
@@ -219,11 +223,6 @@ app-portage/epm
 # Removal in a month.
 dev-libs/vdk
 
-# Pacho Ramos <pacho@gentoo.org> (12 Jun 2016)
-# Upstream dead for ages, multiple bugs (#345337)
-# Removal in a month.
-app-cdr/xcdroast
-
 # Pacho Ramos <pacho@gentoo.org> (12 Jun 2016)
 # No buildable version in the tree and nobody is taking care
 # of it (#349457). Removal in a month.