package.mask: Last rite media-libs/adplug

Bug: https://bugs.gentoo.org/706346
Closes: https://github.com/gentoo/gentoo/pull/14443
Signed-off-by: David Seifert <soap@gentoo.org>

diff --git a/profiles/package.mask b/profiles/package.mask
index 268a3a6d5e56e70b16a757821e2fc3c34e01c571..62b52278ff40816ba42e24444ca73043c3e97048 100644 (file)
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -32,6 +32,16 @@
 
 #--- END OF EXAMPLES ---
 
+# David Seifert <soap@gentoo.org> (2020-01-25)
+# Upstream is mostly unresponsive and doesn't have the resources to
+# fix their code. Lots of bugs in the form of big endian issues, buffer
+# overflows, heap overflows, memory leaks and missing sanity checks.
+# Includes libbinio, which is only used by adplug and in a similarly poor
+# state. Multiple open CVEs, removal in 30 days. Bug #667170, #706346.
+media-libs/adplug
+dev-cpp/libbinio
+media-sound/adplay
+
 # Victor Payno <vpayno+gentoo@gmail.com> (2020-01-23)
 # Requires slotted lua.
 =dev-lang/lua-5.1.5-r103