From: Virgil Dupras <vdupras@gentoo.org>
Date: Thu, 23 Aug 2018 12:13:25 +0000 (-0400)
Subject: profiles: mask vulnerable versions of dev-python/paramiko
X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=ef708bfa3da9a5d0ffa1485e16292723d4664e6b;p=gentoo.git

profiles: mask vulnerable versions of dev-python/paramiko

Bug: https://bugs.gentoo.org/664346
---

diff --git a/profiles/arch/alpha/package.use.mask b/profiles/arch/alpha/package.use.mask
index c3eb7a952f02..0686776d2811 100644
--- a/profiles/arch/alpha/package.use.mask
+++ b/profiles/arch/alpha/package.use.mask
@@ -1,6 +1,10 @@
 # Copyright 1999-2018 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
 
+# Virgil Dupras <vdupras@gentoo.org> (23 Aug 2018)
+# Depends on vulnerable version of paramiko. Bug #664346
+dev-vcs/bzr sftp
+
 # Joonas Niilola <juippis@gmail.com> (17 Jun 2018)
 # Optional dependency not available for this arch
 dev-libs/efl vlc
diff --git a/profiles/package.mask b/profiles/package.mask
index 777e380352b8..19702998f14a 100644
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -29,6 +29,10 @@
 
 #--- END OF EXAMPLES ---
 
+# Virgil Dupras <vdupras@gentoo.org> (23 Aug 2018)
+# Vulnerable and can't be removed yet because of alpha. Bug #664346
+<dev-python/paramiko-2.4.1
+
 # Bernard Cafarelli <voyageur@gentoo.org> (20 Aug 2018)
 # Requires >=dev-libs/openssl-1.1.0
 >=net-misc/nextcloud-client-2.5.0_beta1