profiles: mask vulnerable versions of dev-python/paramiko

Bug: https://bugs.gentoo.org/664346

diff --git a/profiles/arch/alpha/package.use.mask b/profiles/arch/alpha/package.use.mask
index c3eb7a952f025c48e6495b0cd8069751c222a980..0686776d2811d187aa18c292b6c8bd850deca6e7 100644 (file)
--- a/profiles/arch/alpha/package.use.mask
+++ b/profiles/arch/alpha/package.use.mask
@@ -1,6 +1,10 @@
 # Copyright 1999-2018 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
 
+# Virgil Dupras <vdupras@gentoo.org> (23 Aug 2018)
+# Depends on vulnerable version of paramiko. Bug #664346
+dev-vcs/bzr sftp
+
 # Joonas Niilola <juippis@gmail.com> (17 Jun 2018)
 # Optional dependency not available for this arch
 dev-libs/efl vlc

diff --git a/profiles/package.mask b/profiles/package.mask
index 777e380352b84d57d34df6b0f1d0a09e814d4701..19702998f14a331a70d5aba55fadab411e93183a 100644 (file)
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -29,6 +29,10 @@
 
 #--- END OF EXAMPLES ---
 
+# Virgil Dupras <vdupras@gentoo.org> (23 Aug 2018)
+# Vulnerable and can't be removed yet because of alpha. Bug #664346
+<dev-python/paramiko-2.4.1
+
 # Bernard Cafarelli <voyageur@gentoo.org> (20 Aug 2018)
 # Requires >=dev-libs/openssl-1.1.0
 >=net-misc/nextcloud-client-2.5.0_beta1