Masking pngcrush for using the bundled libpng14 and zlib libraries. See bug #356127

diff --git a/profiles/ChangeLog b/profiles/ChangeLog
index 059426bd2e5a69442e9e0965b2edca618516c5cd..dd8b096579430563a540c8abbed85c9231b409ec 100644 (file)
--- a/profiles/ChangeLog
+++ b/profiles/ChangeLog
@@ -1,11 +1,15 @@
 # ChangeLog for profile directory
 # Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/profiles/ChangeLog,v 1.5771 2011/10/08 19:15:09 hanno Exp $
+# $Header: /var/cvsroot/gentoo-x86/profiles/ChangeLog,v 1.5772 2011/10/08 19:43:38 hwoarang Exp $
 #
 # This ChangeLog should include records for all changes in profiles directory.
 # Only typo fixes which don't affect portage/repoman behaviour could be avoided
 # here. If in doubt put a record here!
 
+  08 Oct 2011; Markos Chandras <hwoarang@gentoo.org> package.mask:
+  Masking pngcrush for using the bundled libpng14 and zlib libraries. See bug
+  #356127
+
   08 Oct 2011; Hanno Boeck <hanno@gentoo.org> package.mask:
   Un-lastrite pngcrush.
 

diff --git a/profiles/package.mask b/profiles/package.mask
index 81f787ebfedd636e4e159d48d58b407120c1d65f..57f42681af103833bb52c7c1b7d4d4a55c7d295f 100644 (file)
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -1,5 +1,5 @@
 ####################################################################
-# $Header: /var/cvsroot/gentoo-x86/profiles/package.mask,v 1.13120 2011/10/08 19:15:09 hanno Exp $
+# $Header: /var/cvsroot/gentoo-x86/profiles/package.mask,v 1.13121 2011/10/08 19:43:38 hwoarang Exp $
 #
 # When you add an entry to the top of this file, add your name, the date, and
 # an explanation of why something is getting masked. Please be extremely
@@ -31,6 +31,12 @@
 
 #--- END OF EXAMPLES ---
 
+# Markos Chandras <hwoarang@gentoo.org> (08 Oct 2011)
+# Masking due to insecure usage of bundled libpng14 and zlib
+# See bug 356127. Waiting for upstream to release a new version
+# that will work with libpng15. Before unmasking contact
+# qa@gentoo.org
+media-gfx/pngcrush
 
 # Fabian Groffen <grobian@gentoo.org> (08 Oct 2011)
 # Exim Release Candidates