commit:     7c1c02b4b226877cc1ea12bd46b2325472ac7410
Author:     Matt Turner <mattst88 <AT> gentoo <DOT> org>
AuthorDate: Wed Nov  8 23:36:14 2017 +0000
Commit:     Matt Turner <mattst88 <AT> gentoo <DOT> org>
CommitDate: Wed Nov  8 23:37:09 2017 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=7c1c02b4

package.mask: Mask vulnerable versions of libXfont

Bug: https://bugs.gentoo.org/634044

 profiles/package.mask | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/profiles/package.mask b/profiles/package.mask
index 610525adf36..a58c5d73987 100644
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -29,6 +29,11 @@
 
 #--- END OF EXAMPLES ---
 
+# Matt Turner <matts...@gentoo.org> (08 Nov 2017)
+# Vulnerable to CVE-2017-13720, CVE-2017-13722 (bug #634044). Only in tree for
+# masked xorg-server-1.12.
+<x11-libs/libXfont-1.5.0
+
 # Brian Evans <grkni...@gentoo.org> (07 Nov 2017)
 # Remote service removed this method, dead upstream
 # Masked for removal in 30 days.

Reply via email to