From: Michał Górny Date: Sun, 14 Apr 2019 08:46:43 +0000 (+0200) Subject: package.mask: Last rite app-text/active-dvi X-Git-Url: http://git.tremily.us/gitweb.cgi?a=commitdiff_plain;h=6628f528a54ba37e93bd794822b2b8f8d3af11e8;p=gentoo.git package.mask: Last rite app-text/active-dvi Bug: https://bugs.gentoo.org/651430 Signed-off-by: Michał Górny --- diff --git a/profiles/package.mask b/profiles/package.mask index 0b1a12ef3630..78f1de10cfc8 100644 --- a/profiles/package.mask +++ b/profiles/package.mask @@ -29,6 +29,14 @@ #--- END OF EXAMPLES --- +# Michał Górny (14 Apr 2019) +# The ebuild violates EAPI and relies on STRIP_MASK. The default +# behavior makes it capable of executing arbitrary commands when running +# files from untrusted sources. Last maintainer activity in 2015. Last +# upstream release in 2011. +# Removal in 30 days. Bug #651430. +app-text/active-dvi + # Michał Górny (14 Apr 2019) # The ebuild violates EAPI and relies on STRIP_MASK. Also has # suspicious USE=debug logic. Not touched since 2016.