Gentoo Archives: gentoo-commits

From: "Michał Górny" <mgorny@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] repo/gentoo:master commit in: profiles/
Date: Fri, 18 Dec 2015 16:12:04
Message-Id: 1450455111.9ec3f9ffade45b3412e8b42a2fc89d9e4746b9af.mgorny@gentoo
1 commit: 9ec3f9ffade45b3412e8b42a2fc89d9e4746b9af
2 Author: Michał Górny <mgorny <AT> gentoo <DOT> org>
3 AuthorDate: Fri Dec 18 16:10:06 2015 +0000
4 Commit: Michał Górny <mgorny <AT> gentoo <DOT> org>
5 CommitDate: Fri Dec 18 16:11:51 2015 +0000
6 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=9ec3f9ff
7
8 package.mask: Mask blueman due to vulnerability, #568644
9
10 profiles/package.mask | 5 +++++
11 1 file changed, 5 insertions(+)
12
13 diff --git a/profiles/package.mask b/profiles/package.mask
14 index 136b43d..8740ca2 100644
15 --- a/profiles/package.mask
16 +++ b/profiles/package.mask
17 @@ -30,6 +30,11 @@
18
19 #--- END OF EXAMPLES ---
20
21 +# Michał Górny <mgorny@g.o> (18 Dec 2015)
22 +# Contains privilege escalation vulnerability that could be used to
23 +# execute random Python code passed via D-Bus as root. Bug #568644.
24 +<net-wireless/blueman-2.0.3
25 +
26 # Michael Sterrett <mr_bones_@g.o> (18 Dec 2015)
27 # Unmaintained and no reason to use it or keep it around
28 # when games-roguelike/rogue is a better choice.