From: Matthias Maier <tamiko@gentoo.org>
Date: Thu, 22 Aug 2019 19:35:09 +0000 (-0500)
Subject: profiles/package.mask: mask app-admin/webmin for removal
X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=4936c316116136e7d1813bf0aef96010dea3bd66;p=gentoo.git

profiles/package.mask: mask app-admin/webmin for removal

Signed-off-by: Matthias Maier <tamiko@gentoo.org>
---

diff --git a/profiles/package.mask b/profiles/package.mask
index b4848ed42fc9..55037789ea83 100644
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -29,6 +29,12 @@
 
 #--- END OF EXAMPLES ---
 
+# Matthias Maier <tamiko@gentoo.org> (2019-08-22)
+# Masked for removal in 30 days. Unmaintained and upstream has released
+# backdoored versions for more than a year due to a compromised development
+# server, http://www.webmin.com/exploit.html
+app-admin/webmin
+
 # Hans de Graaff <graaff@gentoo.org> (2019-08-21)
 # This virtual was useful when jruby was still around but this
 # has not been the case for a long time and there are no