package.mask: Last rite vulnerable dev-php/php-openid

Bug: https://bugs.gentoo.org/572882
Signed-off-by: Michał Górny <mgorny@gentoo.org>

diff --git a/profiles/package.mask b/profiles/package.mask
index 9c5f9ba3e24c8b6bcadb91fed22dd97fd8b28d35..77a07a4dbae2112038bf20996981337a743c9df5 100644 (file)
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -29,6 +29,12 @@
 
 #--- END OF EXAMPLES ---
 
+# Michał Górny <mgorny@gentoo.org> (13 Mar 2019)
+# Contains vulnerability (CVE-2016-2049) that has not been resolved
+# for almost 3 years.  No reverse dependencies.
+# Removal in 30 days.  Bug #572882.
+dev-php/php-openid
+
 # Michał Górny <mgorny@gentoo.org> (13 Mar 2019)
 # The eselect module is obsolete, now that dev-lang/gnat-gpl is the only
 # implementation in Gentoo.  It is unmaintained and has unresolved QA