package.mask,base/package.use.mask: Mask dev-php/ZendFramework for removal

Include a use mask on www-apps/postfixadmin which is the final consumer.
The latest stable postfixadmin does not have this flag.

Bug: 604182

diff --git a/profiles/base/package.use.mask b/profiles/base/package.use.mask
index ffeb89d7e94e0ef6a4a2d003ecdec271f0c080ef..7b35085d6b82efd08576139b2fbbd153677d5a3e 100644 (file)
--- a/profiles/base/package.use.mask
+++ b/profiles/base/package.use.mask
@@ -7,6 +7,10 @@
 # This file is only for generic masks. For arch-specific masks (i.e.
 # mask everywhere, unmask on arch/*) use arch/base.
 
+# Brian Evans <grknight@gentoo.org> (22 Feb 2018)
+# Depends on vulnerable dev-php/ZendFramework which is masked for removal
+www-apps/postfixadmin xmlrpc
+
 # Andreas Sturmlechner <asturm@gentoo.org> (10 Feb 2018)
 # Depends on unreleased media-libs/libaom, and 9999 is currently broken
 media-video/vlc aom

diff --git a/profiles/package.mask b/profiles/package.mask
index 8fc3004e72862e6b8dbf15fd7a2764e687d98b1a..4159ed31d15021e3184083e43f756750990774fe 100644 (file)
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -29,6 +29,11 @@
 
 #--- END OF EXAMPLES ---
 
+# Brian Evans <grknight@gentoo.org> (22 Feb 2018)
+# Multiple vulnerablities, EOL upstream.
+# Masked for removal in 30 days. Bug #604182
+dev-php/ZendFramework
+
 # Michael Palimaka <kensington@gentoo.org> (22 Feb 2018)
 # Plugin for removed package media-sound/amarok. Dead upstream.
 # Depends on vulnerable gstreamer:0.10.