summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorUlrich Müller <ulm@gentoo.org>2022-11-30 12:57:33 +0100
committerUlrich Müller <ulm@gentoo.org>2022-11-30 12:57:33 +0100
commitceee7dc6e9839b255c1082193d5d672ef616536a (patch)
tree341f3ec3c37163f3a7d6bc728bf7e6312913d2f0 /profiles
parentapp-editors/emacs: Fix ctags command execution vulnerability (diff)
downloadgentoo-ceee7dc6e9839b255c1082193d5d672ef616536a.tar.gz
gentoo-ceee7dc6e9839b255c1082193d5d672ef616536a.tar.bz2
gentoo-ceee7dc6e9839b255c1082193d5d672ef616536a.zip
profiles: Mask app-editors/emacs:23 and :24 for removal
Bug: https://bugs.gentoo.org/882347 Bug: https://bugs.gentoo.org/882349 Bug: https://bugs.gentoo.org/883687 Signed-off-by: Ulrich Müller <ulm@gentoo.org>
Diffstat (limited to 'profiles')
-rw-r--r--profiles/package.mask10
1 files changed, 10 insertions, 0 deletions
diff --git a/profiles/package.mask b/profiles/package.mask
index c6cc530e0183..0aa5db907804 100644
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -33,6 +33,16 @@
#--- END OF EXAMPLES ---
+# Ulrich Müller <ulm@gentoo.org> (2022-11-30)
+# SLOTs 23 and 24 of app-editors/emacs, corresponding to GNU Emacs
+# versions 23.4 and 24.5. These versions were released in January 2012
+# and April 2015, respectively, and have a non-trivial security issue
+# with ctags. Please upgrade to >=app-editors/emacs-25 and update your
+# Emacs Lisp packages with emacs-updater.
+# Masked for removal in 30 days. Bugs #882347, #882349, #883687.
+app-editors/emacs:23
+app-editors/emacs:24
+
# John Helmert III <ajak@gentoo.org> (2022-11-29)
# Unmaintained and outdated in Gentoo, compatibility issues with
# openssl-1.1. Removal in 30 days. Bug #696936.