From: Kent Fredric <kentnl@gentoo.org>
Date: Sun, 27 May 2018 07:19:19 +0000 (+1200)
Subject: profiles: package.mask <dev-perl/DBD-mysql-4.44.0 re bug #623942
X-Git-Url: http://git.tremily.us/gitweb.cgi?a=commitdiff_plain;h=1047d0842af2ab8efe0dd35341508647dea17d22;p=gentoo.git

profiles: package.mask <dev-perl/DBD-mysql-4.44.0 re bug #623942

Package masking older versions due to CVE-2017-10789, retained only
for people who desperately need older compat versions.

( DBD-mysql upstream have a recent track record of terrible
  compatibility between minor versions )

Bug: https://bugs.gentoo.org/623942
---

diff --git a/profiles/package.mask b/profiles/package.mask
index 44703ff3e6bc..04522e54cf68 100644
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -29,6 +29,13 @@
 
 #--- END OF EXAMPLES ---
 
+# Kent Fredric <kentnl@gentoo.org> (27 May 2018)
+# Subject to Man-in-the-middle security bypass vulnerability.
+# Retained in tree only for users who need older versions
+# for compatibility reasons.
+# Bug: #623942
+<dev-perl/DBD-mysql-4.44.0
+
 # Akinori Hattori <hattya@gentoo.org> (27 May 2018)
 # Dead upstream, for old versions of iBus
 # Masked for removal in 30 days.