From: Michał Górny <mgorny@gentoo.org>
Date: Wed, 13 Mar 2019 17:04:15 +0000 (+0100)
Subject: package.mask: Last rite vulnerable dev-php/php-openid
X-Git-Url: http://git.tremily.us/gitweb.cgi?a=commitdiff_plain;h=40c510cb9ab1218665619f7832e463323479ea8e;p=gentoo.git

package.mask: Last rite vulnerable dev-php/php-openid

Bug: https://bugs.gentoo.org/572882
Signed-off-by: Michał Górny <mgorny@gentoo.org>
---

diff --git a/profiles/package.mask b/profiles/package.mask
index 9c5f9ba3e24c..77a07a4dbae2 100644
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -29,6 +29,12 @@
 
 #--- END OF EXAMPLES ---
 
+# Michał Górny <mgorny@gentoo.org> (13 Mar 2019)
+# Contains vulnerability (CVE-2016-2049) that has not been resolved
+# for almost 3 years.  No reverse dependencies.
+# Removal in 30 days.  Bug #572882.
+dev-php/php-openid
+
 # Michał Górny <mgorny@gentoo.org> (13 Mar 2019)
 # The eselect module is obsolete, now that dev-lang/gnat-gpl is the only
 # implementation in Gentoo.  It is unmaintained and has unresolved QA