summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--profiles/package.deprecated2
-rw-r--r--profiles/package.mask7
2 files changed, 7 insertions, 2 deletions
diff --git a/profiles/package.deprecated b/profiles/package.deprecated
index 499da317742..e283f8e9694 100644
--- a/profiles/package.deprecated
+++ b/profiles/package.deprecated
@@ -120,7 +120,5 @@ dev-python/pytest-cov
# Zac Medico <zmedico@gentoo.org> (2019-12-06)
# These golang libraries should be vendored either by upstream or via
# the EGO_VENDOR variable.
-dev-go/go-crypto
-dev-go/go-net
dev-go/go-sys
dev-go/go-sqlite3
diff --git a/profiles/package.mask b/profiles/package.mask
index b91e6fa78a7..6a015bbabcd 100644
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -32,6 +32,13 @@
#--- END OF EXAMPLES ---
+# Zac Medico <zmedico@gentoo.org> (2020-04-26)
+# Mask obsolete and vulnerable dev-go/go-crypto, along with obsolete
+# reverse dependencies. Removal in 30 days. Bug #710142.
+dev-go/go-crypto
+dev-go/go-net
+=dev-embedded/arduino-builder-1.4.1
+
# Michał Górny <mgorny@gentoo.org> (2020-04-26)
# Unmaintained. Stuck on py3.6. Missing tests (but having an unused
# test flag!). The only revdep is app-admin/ara that is masked