Mask www-apps/tikiwiki for security

diff --git a/profiles/ChangeLog b/profiles/ChangeLog
index bdd71b2be6c3dd278f1d1fc0ff9c5b1ee2c4f093..cd6f6393453456534d5c4e2a8bed2eab13822c03 100644 (file)
--- a/profiles/ChangeLog
+++ b/profiles/ChangeLog
@@ -1,11 +1,14 @@
 # ChangeLog for profile directory
 # Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/profiles/ChangeLog,v 1.6047 2011/12/28 16:24:20 graaff Exp $
+# $Header: /var/cvsroot/gentoo-x86/profiles/ChangeLog,v 1.6048 2011/12/28 16:30:31 a3li Exp $
 #
 # This ChangeLog should include records for all changes in profiles directory.
 # Only typo fixes which don't affect portage/repoman behaviour could be avoided
 # here. If in doubt put a record here!
 
+  28 Dec 2011; Alex Legler <a3li@gentoo.org> package.mask:
+  Mask www-apps/tikiwiki for security
+
   28 Dec 2011; Hans de Graaff <graaff@gentoo.org> arch/alpha/use.mask:
   Mask ruby_targets_ruby19 USE flag for now on alpha until bug 332593 is fixed.
 

diff --git a/profiles/package.mask b/profiles/package.mask
index 77760d7f59b6c7d70d64c5acd2d0ba9759c5943a..0c2e5c31cbe579551e5398e628493e0186c9d051 100644 (file)
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -1,5 +1,5 @@
 ####################################################################
-# $Header: /var/cvsroot/gentoo-x86/profiles/package.mask,v 1.13355 2011/12/28 12:49:55 graaff Exp $
+# $Header: /var/cvsroot/gentoo-x86/profiles/package.mask,v 1.13356 2011/12/28 16:30:31 a3li Exp $
 #
 # When you add an entry to the top of this file, add your name, the date, and
 # an explanation of why something is getting masked. Please be extremely
@@ -31,6 +31,13 @@
 
 #--- END OF EXAMPLES ---
 
+# Alex Legler <a3li@gentoo.org> (28 Dec 2011)
+# Security mask
+# This package is outdated by several major versions.
+# Unfixed security issues: bugs 284963, 313339, 396205, and 381111.
+# Removal in 30 days
+www-apps/tikiwiki
+
 # Jeroen Roovers <jer@gentoo.org> (23 Dec 2011)
 # Opera Next and Opera snapshots are unsupported and eternally unstable.
 # <http://my.opera.com/desktopteam/blog>