From: Michał Górny <mgorny@gentoo.org>
Date: Fri, 18 Dec 2015 16:10:06 +0000 (+0100)
Subject: package.mask: Mask blueman due to vulnerability, #568644
X-Git-Url: http://git.tremily.us/gitweb.cgi?a=commitdiff_plain;h=9ec3f9ffade45b3412e8b42a2fc89d9e4746b9af;p=gentoo.git

package.mask: Mask blueman due to vulnerability, #568644
---

diff --git a/profiles/package.mask b/profiles/package.mask
index 136b43d7e8f2..8740ca22fcc9 100644
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -30,6 +30,11 @@
 
 #--- END OF EXAMPLES ---
 
+# Michał Górny <mgorny@gentoo.org> (18 Dec 2015)
+# Contains privilege escalation vulnerability that could be used to
+# execute random Python code passed via D-Bus as root. Bug #568644.
+<net-wireless/blueman-2.0.3
+
 # Michael Sterrett <mr_bones_@gentoo.org> (18 Dec 2015)
 # Unmaintained and no reason to use it or keep it around
 # when games-roguelike/rogue is a better choice.