profiles: package.mask <dev-perl/DBD-mysql-4.44.0 re bug #623942

Package masking older versions due to CVE-2017-10789, retained only
for people who desperately need older compat versions.

( DBD-mysql upstream have a recent track record of terrible
  compatibility between minor versions )

Bug: https://bugs.gentoo.org/623942

diff --git a/profiles/package.mask b/profiles/package.mask
index 44703ff3e6bc04e0c25d3e540d7907ffdc7d42e0..04522e54cf68c1fd30179842602df5f78269f768 100644 (file)
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -29,6 +29,13 @@
 
 #--- END OF EXAMPLES ---
 
+# Kent Fredric <kentnl@gentoo.org> (27 May 2018)
+# Subject to Man-in-the-middle security bypass vulnerability.
+# Retained in tree only for users who need older versions
+# for compatibility reasons.
+# Bug: #623942
+<dev-perl/DBD-mysql-4.44.0
+
 # Akinori Hattori <hattya@gentoo.org> (27 May 2018)
 # Dead upstream, for old versions of iBus
 # Masked for removal in 30 days.