diff options
| -rw-r--r-- | profiles/package.mask | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/profiles/package.mask b/profiles/package.mask index c454d1c3be13..1e9b1d33bf8c 100644 --- a/profiles/package.mask +++ b/profiles/package.mask @@ -33,6 +33,15 @@ #--- END OF EXAMPLES --- +# Sam James <sam@gentoo.org> (2022-06-29) +# Pre-emptively mask broken upstream versions. +# 1. openssl 1.1.1o fails tests (https://github.com/openssl/openssl/issues/18619) +# 2. openssl 3.0.4 has a buffer overflow w/ AVX512 (https://github.com/openssl/openssl/issues/18625) +# Gentoo isn't vulnerable to the original CVE which caused these releases +# (CVE-2022-2068) as we have our own rehash script. +=dev-libs/openssl-1.1.1p +=dev-libs/openssl-3.0.4 + # Piotr Karbowski <slashbeast@gentoo.org> (2022-06-26) # Abandoned upstream, depends on API that no longer exists. # Removal on 2022-07-26. |