From 6f9b159cafa12a77ea166428d1373f6a2ad126b2 Mon Sep 17 00:00:00 2001
From: Mart Raudsepp <leio@gentoo.org>
Date: Thu, 16 Feb 2017 03:14:13 +0200
Subject: [PATCH] profiles: mask media-plugins/gst-plugins-ffmpeg for removal

---
 profiles/package.mask | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/profiles/package.mask b/profiles/package.mask
index b4f2d871f812..9effa63f0bc9 100644
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -30,6 +30,13 @@
 
 #--- END OF EXAMPLES ---
 
+# Mart Raudsepp <leio@gentoo.org> (16 Feb 2017)
+# Old gstreamer 0.10 version, which is security vulnerable.
+# Use gstreamer:1.0 with media-plugins/gst-plugins-libav
+# instead (despite the name, it uses media-video/ffmpeg too).
+# Masked for removal in 30 days. Bug #594878
+media-plugins/gst-plugins-ffmpeg
+
 # Michael Orlitzky <mjo@gentoo.org> (12 Feb 2017)
 # This has been superseded by both dev-php/PEAR-Net_LDAP2
 # and dev-php/PEAR-Net_LDAP3. Masked for removal in 30 days.
-- 
2.26.2