summaryrefslogtreecommitdiff
path: root/profiles/package.mask
diff options
context:
space:
mode:
Diffstat (limited to 'profiles/package.mask')
-rw-r--r--profiles/package.mask13
1 files changed, 13 insertions, 0 deletions
diff --git a/profiles/package.mask b/profiles/package.mask
index 8758bc0fa8d5..c02692d60f3d 100644
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -33,6 +33,19 @@
#--- END OF EXAMPLES ---
+# Michał Górny <mgorny@gentoo.org> (2023-06-09)
+# Requires dev-python/nose. Last activity in 2013. No reverse
+# dependencies left.
+# Removal on 2023-07-09. Bug #888245.
+dev-python/doctest-ignore-unicode
+
+# Sam James <sam@gentoo.org> (2023-06-09)
+# Severe security vulnerability: executes arbitrary code returned in responses
+# from the server. Appears a CA is abusing that acme-sh uses eval.
+# Please see https://github.com/acmesh-official/acme.sh/issues/4659 and
+# https://bugs.gentoo.org/908104.
+app-crypt/acme-sh
+
# Georgy Yakovlev <gyakovlev@gentoo.org> (2023-06-08)
# May be broken on some arches due to weird LLVM interaction.
# Masked for now.