From: Matt Turner <mattst88@gentoo.org>
Date: Wed, 8 Nov 2017 23:36:14 +0000 (-0800)
Subject: package.mask: Mask vulnerable versions of libXfont
X-Git-Url: http://git.tremily.us/gitweb.cgi?a=commitdiff_plain;h=7c1c02b4b226877cc1ea12bd46b2325472ac7410;p=gentoo.git

package.mask: Mask vulnerable versions of libXfont

Bug: https://bugs.gentoo.org/634044
---

diff --git a/profiles/package.mask b/profiles/package.mask
index 610525adf369..a58c5d739872 100644
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -29,6 +29,11 @@
 
 #--- END OF EXAMPLES ---
 
+# Matt Turner <mattst88@gentoo.org> (08 Nov 2017)
+# Vulnerable to CVE-2017-13720, CVE-2017-13722 (bug #634044). Only in tree for
+# masked xorg-server-1.12.
+<x11-libs/libXfont-1.5.0
+
 # Brian Evans <grknight@gentoo.org> (07 Nov 2017)
 # Remote service removed this method, dead upstream
 # Masked for removal in 30 days.