summaryrefslogtreecommitdiff
blob: a5703541ebb332a6631a2b60495bb76f67da2787 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
1013
1014
1015
1016
1017
1018
1019
1020
1021
1022
####################################################################
#
# When you add an entry to the top of this file, add your name, the date, and
# an explanation of why something is getting masked. Please be extremely
# careful not to commit atoms that are not valid, as it can cause large-scale
# breakage, especially if it ends up in the daily snapshot.
#
## Example:
##
## # Dev E. Loper <developer@gentoo.org> (28 Jun 2012)
## # Masking  these versions until we can get the
## # v4l stuff to work properly again
## =media-video/mplayer-0.90_pre5
## =media-video/mplayer-0.90_pre5-r1
#
# - Best last rites (removal) practices -
# Include the following info:
# a) reason for masking
# b) bug # for the removal (and yes you should have one)
# c) date of removal (either the date or "in x days")
#
## Example:
##
## # Dev E. Loper <developer@gentoo.org> (23 May 2015)
## # Masked for removal in 30 days.  Doesn't work
## # with new libfoo. Upstream dead, gtk-1, smells
## # funny. (bug #987654)
## app-misc/some-package

#--- END OF EXAMPLES ---

# Andreas Sturmlechner <asturm@gentoo.org> (04 Mar 2018)
# Dead upstream, depends on deprecated Qt4.
# Masked for removal in 30 days. Bug 645436
sci-chemistry/massxpert

# Andreas Sturmlechner <asturm@gentoo.org> (04 Mar 2018)
# Dead upstream, depends on deprecated Qt4.
# Masked for removal in 30 days. Bug 514438, 644522
sci-chemistry/gsim

# Andreas Sturmlechner <asturm@gentoo.org> (04 Mar 2018)
# Depends on deprecated dev-python/pyqwt, blocks Qt4 removal.
# Masked for removal in 30 days unless someone bumps to 5.2.2.
# Bug 645218, 649094
sci-chemistry/PyMca

# Andreas K. Hüttel <dilfridge@gentoo.org> (03 Mar 2018)
# Fails to build without rpc support in glibc (bug 631044);
# no maintainer, requires obsolete hardware. Removal in
# 30 days.
app-pda/p3nfs

# Andreas K. Hüttel <dilfridge@gentoo.org> (03 Mar 2018)
# Fails to build without rpc support in glibc (bug 377867);
# fails to build with libtirpc; apparently functionality is
# now included in libtirpc. No consumers. Removal in 30 days.
net-libs/librpcsecgss

# Andreas K. Hüttel <dilfridge@gentoo.org> (03 Mar 2018)
# Marked obsolete on CTAN. EAPI=3 ebuild. No consumers.
# Masked for removal in 30 days. Bug 644258
app-text/noweb

# Jason Zaman <perfinion@gentoo.org> (02 Mar 2018)
# Became sys-apps/selinux-python in release 2.7
# Masked for removal in 30 days.
dev-python/sepolgen

# Tim Harder <radhermit@gentoo.org> (01 Mar 2018)
# Masked for testing.
>=dev-python/aiohttp-3

# Ulrich Müller <ulm@gentoo.org> (01 Mar 2018)
# Very old (Open)Motif version 2.2 installing libXm.so.3.
# Released in 2004. Non-free. No revdeps in Gentoo repo.
# Depends on x11-libs/libXp which is on its way out.
# If you still need this for third-party binaries, try the
# workaround outlined in https://bugs.gentoo.org/210021#c19.
# Masked for removal in 90 days. Bug #649080.
x11-libs/motif:2.2

# Andreas Sturmlechner <asturm@gentoo.org> (28 Feb 2018)
# Dead upstream, depends on dead Qt4.
# Masked for removal in 30 days.
dev-tex/qtexengine

# Andreas Sturmlechner <asturm@gentoo.org> (27 Feb 2018)
# Depends on deprecated Qt4, no Qt5 work found. No maintainer.
# Masked for removal in 30 days. Bug #644534
app-text/searchmonkey

# Andreas Sturmlechner <asturm@gentoo.org> (27 Feb 2018)
# Depends on deprecated Qt4. No maintainer, needs someone to bump to Qt5.
# Masked for removal in 30 days. Bug #602042
media-gfx/pencil

# Andreas Sturmlechner <asturm@gentoo.org> (27 Feb 2018)
# Dead upstream, google-code-down, depends on deprecated Qt4.
# Masked for removal in 30 days. Bug #626664
media-video/abby

# Anthony G. Basile <blueness@gentoo.org> (25 Feb 2018)
# Upstream has been dead since 2012.  Migrate to uclibc-ng.
# See https://wiki.gentoo.org/wiki/Project:Hardened_uClibc
sys-libs/uclibc

# Thomas Deutschmann <whissi@gentoo.org> (23 Feb 2018)
# Unmaintained in Gentoo, known critical vulnerabilities like
# auth bypass. Removal in 30 days. Bugs #559658, #592080.
sys-cluster/ganglia-web

# Mart Raudsepp <leio@gentoo.org> (23 Feb 2018)
# Old net-libs/webkit-gtk SLOTs have hundreds of known security issues.
# Use the security safe net-libs webkit-gtk SLOT=4 instead via
# libraries and applications ported to gtk3 and webkit2gtk API.
# Masked for removal in 30 days. Bug #577068.
# Please keep this package.mask entry until at least 25th May 2018 for
# extra notification of the security vulnerabilities.
net-libs/webkit-gtk:2
net-libs/webkit-gtk:3

# Mart Raudsepp <leio@gentoo.org> (23 Feb 2018)
# Older versions of GnuCash use security vulnerable old webkit-gtk slot.
# Use gnucash-2.7.4 or newer instead, but pay attention to the news item:
# https://www.gentoo.org/support/news-items/2018-01-14-gnucash.html
<app-office/gnucash-2.7

# Steve Dibb <beandog@gentoo.org> (22 Feb 2018)
# Very old project of mine, hasn't worked in years, no plans to
# support, and mpv can provide resume playback by default.
# Masked for removal in 30 days. Bug #648568
media-video/mplayer-resume

# Steve Dibb <beandog@gentoo.org> (22 Feb 2018)
# Dead upstream, never really used, libdvdread and libdvdnav provide
# DVD access.
# Masked for removal in 30 days. Bug #648566
media-libs/libdvdplay

# Steve Dibb <beandog@gentoo.org> (22 Feb 2018)
# Dead upstream, long since replaced by libaacs for functionality.
# Masked for removal in 30 days. Bug #648560
media-video/aacskeys

# Brian Evans <grknight@gentoo.org> (22 Feb 2018)
# Multiple vulnerablities, EOL upstream.
# Masked for removal in 30 days. Bug #604182
dev-php/ZendFramework

# Michael Palimaka <kensington@gentoo.org> (22 Feb 2018)
# Plugin for removed package media-sound/amarok. Dead upstream.
# Depends on vulnerable gstreamer:0.10.
# Masked for removal in 30 days. Bug #629184.
media-sound/moodbar

# Mart Raudsepp <leio@gentoo.org> (22 Feb 2018)
# This package was renamed to dev-libs/libgnome-games-support without
# a pkgmove; everything in tree uses it now instead of libgames-support.
# Masked for removal in 30 days. Bug #648468.
dev-libs/libgames-support

# Thomas Deutschmann <whissi@gentoo.org> (22 Feb 2018)
# Upstream's release tarball doesn't match Git content.
# Masked until clarified.
=app-admin/rsyslog-8.33.0

# Ulrich Müller <ulm@gentoo.org> (21 Feb 2018)
# Homepage is dead. Apparently the last release was in 2012
# and it does not work with Emacs 25 and later.
# Masked for removal in 30 days. Bug #590400.
app-emacs/mcomplete

# Ulrich Müller <ulm@gentoo.org> (21 Feb 2018)
# Obsolete predecessor of js-mode, which is included
# with Emacs since version 23. Homepage is dead.
# Masked for removal in 30 days. Bug #648150.
app-emacs/javascript

# Ulrich Müller <ulm@gentoo.org> (21 Feb 2018)
# Last release in 2006. Homepage is dead. Upstream says
# that app-emacs/muse should be used as replacement.
# Masked for removal in 30 days. Bug #619194.
app-emacs/emacs-wiki
app-emacs/emacs-wiki-blog

# Brian Evans <grknight@gentoo.org (15 Feb 2018)
# These PEAR packages are unmaintained upstream and
# are difficult to test or have no tests.
# PHP team no longer wants to maintain these for PHP7 and beyond
# Removal in 30 days - Bug 647768
dev-php/PEAR-Benchmark
dev-php/PEAR-Calendar
dev-php/PEAR-Console_Color
dev-php/PEAR-Crypt_Blowfish
dev-php/PEAR-Crypt_RC4
dev-php/PEAR-XML_Beautifier
dev-php/PEAR-XML_Feed_Parser
dev-php/PEAR-Structures_DataGrid
dev-php/PEAR-PHP_CompatInfo
dev-php/PEAR-Net_Server
dev-php/PEAR-Net_LMTP
dev-php/PEAR-Net_IMAP
dev-php/PEAR-Net_FTP
dev-php/PEAR-Net_DIME
dev-php/PEAR-Math_Stats

# Sergey Popov <pinkbyte@gentoo.org> (13 Feb 2018)
# Requires dead Qt4 (bug #645420). Removal in 30 days
media-gfx/qiviewer

# Kristian Fiskerstrand <k_f@gentoo.org> (11 Feb 2018)
# Lastrite: app-crypt/monkeysign . Please use caff from 
# app-crypt/signing-party instead. Removal in 30 days.
# Bug: #647352
app-crypt/monkeysign

# Michael Palimamka <kensington@gentoo.org> (11 Feb 2018
# Fails to build (bug #538400). Requires dead Qt 4 (bug #637014).
# Dead upstream. Masked for removal in 30 days.
media-sound/lastfmplayer

# Eray Aslan <eras@gentoo.org> (08 Feb 2018)
# Mask experimental software
=mail-mta/postfix-3.4*

# Thomas Deutschmann <whissi@gentoo.org> (07 Feb 2018)
# Intel recommends to pull these versions because they could
# cause higher than expected reboots and other unpredictable
# system behavior. Bug #646646
=sys-firmware/intel-microcode-20171117_p20171215
=sys-firmware/intel-microcode-20171117_p20171215-r1
=sys-firmware/intel-microcode-20180108
=sys-firmware/intel-microcode-20180108-r1

# Matt Turner <mattst88@gentoo.org> (06 Feb 2018)
# Dead and unused
# Masked for removal in 30 days. Bug #646838
x11-libs/libXCalibrate
x11-libs/libXfontcache
x11-misc/xtscal
x11-proto/fontcacheproto
x11-proto/xcalibrateproto
x11-proto/xf86rushproto

# Tim Harder <radhermit@gentoo.org> (05 Feb 2018)
# Unmaintained, replaced by newsboat fork.
# Masked for removal in 30 days.
net-news/newsbeuter

# Patrice Clement <monsieurp@gentoo.org> (26 Jan 2018)
# Has different symbols. Known to cause issues with i3bar/swaybar.
media-fonts/fontawesome:0/5

# Eray Aslan <eras@gentoo.org> (22 Jan 2018)
# Vulnerable - see https://bugs.gentoo.org/630684
# Please migrate to cyrus-imapd-3.0 releases
=net-mail/cyrus-imapd-2.5*

# Patrice Clement <monsieurp@gentoo.org> (18 Jan 2018)
# mpv >= 0.28.0 requires changes currently only available in ffmpeg-9999.
>=media-video/mpv-0.28.0

# Michał Górny <mgorny@gentoo.org> (10 Jan 2018)
# The Fuzzer library is now installed as part of core LLVM. That's
# sys-devel/llvm in LLVM 5, and sys-libs/compiler-rt-sanitizers
# in LLVM 6 and newer. The separate ebuild was never approved by LLVM
# maintainers or actually maintained, and is obsolete for a long time.
# Removal in 30 days.
dev-libs/libFuzzer

# Richard Freeman <rich0@gentoo.org> (09 Jan 2018)
# Bug 644048 - temp QA mask until it can get sorted out
# Lars Wendler <polynomial-c@gentoo.org> (26 Feb 2018)
# See also tracker bug: https://bugs.gentoo.org/648864
~sys-apps/attr-2.4.48
# Lars Wendler <polynomial-c@gentoo.org> (10 Jan 2018)
# Mask followup bugfixes for =sys-apps/attr-2.4.48 as well until proper
# testing has been conducted.
=sys-apps/acl-2.2.52-r2

# Alice Ferrazzi <alicef@gentoo.org> (05 Jan 2018)
# kernel: Meltdown and Spectre - Processor flaw. (#643228)
# Please upgrade for Intel processor flaw workaround
# (currently KPTI patch are 64bit only), 
# also excluding AMD from the fix as not affected.
# Please unmask your kernel version if you want to
# continue to use your kernel with AMD.
# Removal in a month.
=sys-kernel/gentoo-sources-4.14.8-r1
=sys-kernel/gentoo-sources-4.14.9
=sys-kernel/gentoo-sources-4.14.10
=sys-kernel/gentoo-sources-4.14.10-r1
=sys-kernel/gentoo-sources-4.14.11

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Fails to fetch (#597424). Removal in a month.
sci-chemistry/platon

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Multiple build issues (#423471, #529772, #558206, #574910, #603304,
# #638602), problems with init.d scripts (#390231), major version bump
# #pending to be done (#610744). Removal in a month.
sys-fs/ocfs2-tools

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Fails to build, a major version bump is needed but it's hard to bump
# (#626050, #626052). Removal in a month.
net-nds/ypserv
net-nds/ypbind

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Upstream is died, no server still usable for this (#626770). Removal in a
# month.
games-arcade/bloboats

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Upstream dead, not compatible with latest mariadb, nothing requires this
# in the tree (#628526, #629470, #629552, #629712, #629978, #630002,
# #630098, #630650). Removal in a month.
dev-db/lib_mysqludf_fPROJ4
dev-db/lib_mysqludf_preg
dev-db/lib_mysqludf_ta
dev-db/lib_mysqludf_stat
dev-db/lib_mysqludf_str
dev-db/lib_mysqludf_udf
dev-db/lib_mysqludf_sys
dev-db/lib_mysqludf_json

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Fails multilib-strict check (#628836). Nothing requires it. Removal in a
# month.
dev-libs/dclog

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Tries to install at pkg_postinst phase (#628804). Removal in a month.
app-misc/misterhouse

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Configure hangs (#628726), a major version bump is needed (#510050).
# Removal in a month.
app-forensics/autopsy

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Deprecated tools replace by dev-python/awscli (#633374). Removal in a
# month.
app-admin/aws-as-tools
app-admin/aws-cw-tools
app-admin/aws-iam-tools
app-admin/aws-rds-tools

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Relies on obsolete code.google, nothing uses it at present time (#633984).
# Removal in a month.
net-misc/slimrat

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Upstream dead, fails to fetch (#586504, #640546, #636466). Removal in a
# month.
games-emulation/xe

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Fails to build (#637612). Removal in a month.
net-vpn/htun

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Unmaintained, fails to build (#638628). Removal in a month.
media-sound/nted

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Fails to build (#638634). Removal in a month.
sys-apps/raidutils

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Tries to download and compile other tools, build fails then (#639060).
# Removal in a month.
dev-lang/fsharp

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Dead since 2007, fails to build (#639510). Removal in a month.
net-irc/ultimate

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Relies on dead gnome2 python bindings, seems dead since 2009 (#640028),
# removal in a month.
sys-power/phctool

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Upstream stopped its development as recent Gnome versions don't need it,
# it relies on gnome2 python bindings and many other dead libs (#640032).
# Removal in a month.
app-misc/specto

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Upstream dead, relies on gnome2 python bindings and other dead libs
# (#640070). Removal in a month.
x11-plugins/thinkhdaps

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Cannot be installed (#640414). Removal in a month.
net-misc/asterisk-rate_engine

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Dead for ages and replaced by app-admin/procinfo-ng (#641016). Removal in
# a month.
app-admin/procinfo

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Upstream dead, fails to build, nothing requires it (#641750). Removal in a
# month.
net-misc/bti

# Alice Ferrazzi <alicef@gentoo.org> (30 Dec 2017)
# Masked for removal in 30 days.
# Upstream is no more backporting security fixes for 4.12.
# For a more stable kernel please downgrade to 4.9 
# or move to 4.14(unstable) if it works for you.
=sys-kernel/gentoo-sources-4.12.14
=sys-kernel/gentoo-sources-4.12.13
=sys-kernel/gentoo-sources-4.12.12

# David Seifert <soap@gentoo.org> (29 Dec 2017)
# Last release in 2003, EAPI 0, C++ extremely broken
# Removal in 30 days
app-admin/jinit

# Pacho Ramos <pacho@gentoo.org> (27 Dec 2017)
# Out ebuild is completely obsolete (#381073), download manually PPD is
# preferred, current tarballs cannot be downloaded even (#635146). Removal
# in a month.
net-print/xerox-drivers

# Alice Ferrazzi <alicef@gentoo.org> (27 Dec 2017)
# Masked for removal in 30 days.
# This kernel doesn't boot on hardened profiles.
# vanilla-sources also dosen't make prepare
# (bug #642268) (bug #642664)
=sys-kernel/gentoo-sources-4.14.9
=sys-kernel/gentoo-sources-4.14.10
=sys-kernel/vanilla-sources-4.14.10

# Matthias Maier <tamiko@gentoo.org> (26 Dec 2017)
# gcc depends on mpfr and this version changes soname. Spare users with
# FEATURES=-preserve-libs from completely frying their system.
>=dev-libs/mpfr-4.0.0

# Thomas Beierlein <tomjbe@gentoo.org> (23 Dec 2017)
# To adapt to changed version naming by upstream 
# (pcb-yyyymmdd to pcb-x.y.z) we move the ebuild to
# pcb-0_pyyyymmdd and mask >=pcb-20000000.
# Do not remove the mask until newer version gets stable
>=sci-electronics/pcb-20000000

# Alice Ferrazzi <alicef@gentoo.org> (22 Dec 2017)
# Masked for removal in 30 days.
# Linux kernel 4.13 can break various laptops.
# (bug #642026)
=sys-kernel/gentoo-sources-4.13.15
=sys-kernel/gentoo-sources-4.13.16

# Andreas Sturmlechner <asturm@gentoo.org> (21 Dec 2017)
# Masked for testing
=dev-libs/libical-3.0.1

# Patrice Clement <monsieurp@gentoo.org> (19 Dec 2017)
# A slightly better syntax file for PAM configuration files is shipped with Vim
# since version 8.0. The one we package is old and out of date.
# Masked for removal in 30 days. See bug 578278.
app-vim/pam-syntax

# James Le Cuirot <chewi@gentoo.org> (17 Dec 2017)
# Java 9 is not yet fully supported on Gentoo. Packages cannot depend
# on it so these virtuals are not yet required. If you wish to use
# Java 9 now then install oracle-(jdk|jre)-bin:9 directly.
virtual/jdk:9
virtual/jre:9

# Mike Gilbert <floppym@gentoo.org> (16 Dec 2017)
# Dev channel releases are only for people who are developers or want more
# experimental features and accept a more unstable release.
>=www-client/chromium-65

# Patrice Clement <monsieurp@gentoo.org> (12 Dec 2017)
# Masked due to a hard dependency on an ancient versions of dev-libs/msgpack
# (<0.6) that have been punted from the tree.
net-misc/cocaine-core

# Andreas Sturmlechner <asturm@gentoo.org> (03 Dec 2017)
# Depends on dead Qt4, upstream porting inquiry pending. Bug #631788
games-kids/crayon-physics

# Jonas Stein <jstein@gentoo.org> (29 Nov 2017)
# The old yafaray-0.1.1 depends on qt4 and has bugs we can not fix.
# (bug #321169) and (bug #595684)
# Users of yafaray may be interested in >=yafaray-3.3.0 (bug #639046)
# and its fork TheBounty (#639158) which require completely new ebuilds.
#
# The old and for now the last version in the tree is
# masked for removal on 2018-02-30
=media-gfx/yafaray-0.1.1

# Michał Górny <mgorny@gentoo.org> (25 Nov 2017)
# Testing branch GTK+3 release. Changes API, breaks xfce-base/xfdesktop.
# Masked until the latter sees a new release.
>=dev-python/thunarx-python-0.4.0
>=xfce-base/thunar-1.7
>=xfce-extra/thunar-archive-plugin-0.4.0
>=xfce-extra/thunar-media-tags-plugin-0.3.0
>=xfce-extra/thunar-shares-plugin-0.3.0

# Andreas Sturmlechner <asturm@gentoo.org> (16 Nov 2017)
# Depends on dead Qt4WebKit. Masked for removal in 30 days. Bug #620702
<media-gfx/freecad-0.18

# Jonas Stein <jstein@gentoo.org> (11 Nov 2017)
# The upstream developer and former maintainer asked to treeclean these
# packages, because they can be used only with the Siemens Mediacenter
# Activy 3xx which was produced till 2005. He confirmed, that no user
# is left who needs the package from our tree for this special hardware.
# See also bug #633098. Masked for removal on 2018-01-31
app-misc/activylircd
media-plugins/vdr-alcd

# Mike Gilbert <floppym@gentoo.org> (05 Nov 2017)
# Breaks several reverse dependencies.
# https://bugs.gentoo.org/635934
>=dev-util/scons-3.0.0

# James Le Cuirot <chewi@gentoo.org> (05 Nov 2017)
# Java 7 is old and we are no longer able to support it. The ability
# to build against Java 7 may return when we update the eclasses for
# Java 9 but the runtime will not return. If you need it then source
# ebuilds will continue to be maintained by gnu_andrew in java-overlay
# for a few years. Removal in 30 days.
<=dev-java/icedtea-7.2.6.11:7
dev-java/icedtea-bin:7
virtual/jdk:1.7
virtual/jre:1.7

# Patrice Clement <monsieurp@gentoo.org> (28 Oct 2017)
# Missing dependencies.
>=dev-python/scrapy-1.4.0

# Robin H. Johnson <robbat2@gentoo.org> (22 Oct 2017)
# Masking for testing, contains Fedora Hobbled-EC for USE=bindist
=dev-libs/openssl-1.0.2l-r1

# Andreas K. Hüttel <dilfridge@gentoo.org> (22 Oct 2017)
# Broken with recent Perl (5.26) and not used by anything
# in the Gentoo repository. Please uninstall.
sys-devel/autoconf:2.59
sys-devel/autoconf:2.61
sys-devel/autoconf:2.62
sys-devel/autoconf:2.63
sys-devel/autoconf:2.65
sys-devel/autoconf:2.67
sys-devel/autoconf:2.68

# Andreas K. Hüttel <dilfridge@gentoo.org> (18 Oct 2017)
# sys-devel/automake versions 1.4, 1.5, 1.6, 1.7, 1.8
# have known security vulnerabilities, are broken with
# recent Perl (>=5.26.0), and are not used by anything in
# the Gentoo repository. Please uninstall.
sys-devel/automake:1.4
sys-devel/automake:1.5
sys-devel/automake:1.6
sys-devel/automake:1.7
sys-devel/automake:1.8

# Kent Fredric <kentnl@gentoo.org> (11 Oct 2017)
# This package should now be provided entirely by dev-lang/perl,
# stable perl 5.24 provides Unicode-Collate-1.140.0
# testing perl 5.26 provides Unicode-Collate-1.190.0
# This should only be unmasked if you're locking to perl-5.24 and need
# a newer version of virtual/perl-Unicode-Collate
# If you're upgrading to perl-5.26, please do:
#   emerge -C perl-core/Unicode-Collate
# See bug #634040
<perl-core/Unicode-Collate-1.190.0-r99

# Michał Górny <mgorny@gentoo.org> (05 Oct 2017)
# (on behalf of QA)
# Rogue version bumps that reintroduce QA violations that were fixed
# in #598527 and #598529, breaking the current verison
# of app-portage/eix as a result, #633424. Do not reintroduce without
# prior review from QA.
=app-shells/push-3.0
=app-shells/quoter-4.0

# Patrice Clement <monsieurp@gentoo.org> (01 Oct 2017)
# Mask Atom betas for testing.
app-editors/atom:beta

# Patrice Clement <monsieurp@gentoo.org> (09 Sep 2017)
# Python 3 port is almost complete with version 0.6.0. Users might run into
# minor bumps here and there which is why the mask is still in place for the
# time being.
>=dev-java/javatoolkit-0.6.0

# Gilles Dartiguelongue <eva@gentoo.org> (04 Sep 2017)
# Incompatible changes in API in Enchant 2. Bug #629838.
>=app-text/enchant-2

# Gilles Dartiguelongue <eva@gentoo.org> (2 Sep 1017)
# Gnome 3.26 package mask
>=app-text/libgepub-0.5

# Anthony G. Basile <blueness@gentoo.org> (27 Aug 2017)
# Upstream is no longer providing public patches
sys-kernel/hardened-sources

# Patrice Clement <monsieurp@gentoo.org> (23 Aug 2017)
# Packages depending on this library need to be tested first before
# it is unmasked. Possibly some slotting is still needed.
# Package testing tracked in bug #611022.
>=dev-libs/msgpack-1.4.2

# Hanno Boeck <hanno@gentoo.org> (21 Aug 2017)
# Open security bugs, no upstream, bug 628432
# Alternatives: app-arch/libarchive, app-arch/unar
app-arch/unrar-gpl

# Sébastien Fabbro <bicatali@gentoo.org> (19 Aug 2017)
# ipython-6 is python-3 only and causes circular dependencies
# Unset python_targets_python2_7 for ipykernel and ipyparallel if needed.
>=dev-python/ipython-6

# Michael Orlitzky <mjo@gentoo.org> (18 Aug 2017)
# Last version from 2011, and has a vulnerable init script
# (bug 603382). The proxy-maintainer is unknown to bugzilla,
# and the previous maintainer jmbsvicetto is OK with masking.
<net-misc/vde-2.3.2-r4

# Mats Lidell <matsl@gentoo.org> (17 Aug 2017)
# Masked ede and all its dependencies due to security reasons. 
# bug #398241
app-xemacs/ede
app-xemacs/semantic
app-xemacs/jde
app-xemacs/xslt-process
app-xemacs/xetla
app-xemacs/cogre
app-xemacs/ecb
app-xemacs/xemacs-packages-all

# Kent Fredric <kentnl@gentoo.org> (21 Jul 2017)
# Masked due to serious regression that introduces widespread data
# corruption when storing data in blobs. Masked, because any code
# that is written to use this version is now dependent on this version
# and older versions will corrupt your code instead.
# However, any existing packages should not use this version.
# See: https://github.com/perl5-dbi/DBD-mysql/issues/117
=dev-perl/DBD-mysql-4.42.0

# Ian Stakenvicius <axs@gentoo.org> (19 Jul 2017)
# Mask spidermonkey:52 as it is a self-rolled release, no official
# release has been rolled.  Is only committed to support development
# versions of gjs.  Will unmask when gnome-3.26 is ready for testing
# or when upstream releases an official tarball.
dev-lang/spidermonkey:52

# Nicolas Bock <nicolasbock@gentoo.org> (17 Jul 2017)
# Keep shotwell development series masked.
>=media-gfx/shotwell-0.27

# Nicolas Bock <nicolasbock@gentoo.org> (31 Oct 2017)
# There are multiple unresolved upstream issues with >=jabref-bin-4.0 (#636036).
# If you still would like to use this version, please report any issues to
# upstream.
>=app-text/jabref-bin-4.0

# Nicolas Bock <nicolasbock@gentoo.org> (6 Dec 2017)
# Development has ceased, the last commit to the upstream repository was
# on 16 July 2016 with a note stating that its status is unmaintained [1].
# See also Bug 640034.
#
# [1] https://github.com/projecthamster/hamster/commit/c3e5fb761c88fdecfd1566cac8b6836228a27cce
app-office/hamster-time-tracker

# Pacho Ramos <pacho@gentoo.org> (14 Jul 2017)
# Doesn't work with >=openvpn-2.3, bug 470696
# Fix is work in progress, see above bug. dilfridge@g.o
net-vpn/kvpnc

# Pacho Ramos <pacho@gentoo.org> (14 Jul 2017)
# Randomly broken due to sys-devel/binutils-config bug (#584296).
# Unmask when it is finally fixed, so people can build the package.
dev-util/mutrace

# Matthias Schwarzott <zzam@gentoo.org> (03 Jul 2017)
# The snapshots got a wrong version number assigned.
# They are from before version 2.0.0. Masking them to force
# an update to version 2.0.0 as soon as it is added to the tree.
=media-plugins/vdr-xineliboutput-2.0.0_p20130821
=media-plugins/vdr-xineliboutput-2.0.0_p20150220

# Thomas Deutschmann <whissi@gentoo.org> (28 Jun 2017)
# New strip feature which is enabled by default causes genkernel
# to create unbootable kernel/initramfs images. Bug #622716
=sys-kernel/genkernel-3.5.1.0

# Hans de Graaff <graaff@gentoo.org> (05 Jun 2017)
# Bundles obsolete and vulnerable webkit version.
# Upstream has stopped development and recommends using
# headless mode in >=www-client/chromium-59.
# Masked for removal in 90 days. Bug #589994.
www-client/phantomjs
dev-ruby/poltergeist

# Thomas Deutschmann <whissi@gentoo.org> (24 May 2017)
# Broken runscript/changed behavior causing lvm2 to fail
# on boot. Bug #617578
>=sys-fs/lvm2-2.02.171

# Michał Górny <mgorny@gentoo.org> (22 May 2017)
# for Maciej S. Szmigiero <mail@maciej.szmigiero.name>
# Any version above 5.100.138 breaks b43 driver in various ways.
# Also, b43 wiki page says to use 5.100.138. Bug #541080.
>=sys-firmware/b43-firmware-6.30.163.46

# Michał Górny <mgorny@gentoo.org>, Andreas K. Hüttel <dilfridge@gentoo.org>,
# Matthias Maier <tamiko@gentoo.org> (21 May 2017)
# These old versions of toolchain packages (binutils, gcc, glibc) are no
# longer officially supported and are not suitable for general use. Using
# these packages can result in build failures (and possible breakage) for
# many packages, and may leave your system vulnerable to known security
# exploits.
# If you still use one of these old toolchain packages, please upgrade (and
# switch the compiler / the binutils) ASAP. If you need them for a specific
# (isolated) use case, feel free to unmask them on your system.
# (updated 27 Dec 2017 with gcc < 5.4)
<sys-devel/gcc-5.4
<sys-libs/glibc-2.25-r9
<sys-devel/binutils-2.29.1-r1

# Michał Górny <mgorny@gentoo.org> (20 May 2017)
# Old versions of CUDA and their reverse dependencies. They do not
# support GCC 5+, and are really old.
# (updated 27 Dec 2017 with cuda < 8 because of gcc < 5 mask)
<dev-python/pycuda-2016
<dev-util/nvidia-cuda-sdk-8
<dev-util/nvidia-cuda-toolkit-8
net-wireless/cpyrit-cuda

# Bernard Cafarelli <voyageur@gentoo.org> (8 May 2017)
# Coordinated conversion to wxGTK:3.0-gtk3
# Drop mask after migration of existing wxGTK:3.0 users
=net-ftp/filezilla-3.30.0-r300
=net-ftp/filezilla-3.31.0-r300

# Rick Farina <zerochaos@gentoo.org> (17 Apr 2017)
# Masking old versions because upstream changed versioning
# Please keep this mask for 1 year to ease upgrades for users
=app-crypt/hashcat-3.10-r1
=app-crypt/hashcat-3.30
=app-crypt/hashcat-3.40

# Lars Wendler <polynomial-c@gentoo.org> (24 Mar 2017)
# Masked until Mozilla and Chrome agreed how to handle
# Symantec trust issues properly (bug #613714)
=app-misc/ca-certificates-20161130.3.30-r1

# Mart Raudsepp <leio@gentoo.org> (16 Feb 2017)
# Old gstreamer 0.10 version, which is security vulnerable.
# Use gstreamer:1.0 with media-plugins/gst-plugins-libav
# instead (despite the name, it uses media-video/ffmpeg too).
# Please keep this mask entry until gstreamer:0.10 is still
# in tree or at least gets an affecting GLSA from bug 601354
# Bug #594878.
media-plugins/gst-plugins-ffmpeg

# Kent Fredric <kentnl@gentoo.org> (04 Feb 2017)
# Unsecure versions that have been only restored to tree
# to resolve compatibility problems with mail-filter/amavisd-new
# Use with caution due to these being removed for CVE-2016-1251
# Bug: #601144
# Bug: #604678
<dev-perl/DBD-mysql-4.41.0

# Alon Bar-Lev <alonbl@gentoo.org> (06 Feb 2017)
# Needs openssl-1.1
>=dev-libs/opencryptoki-3.6

# Bernard Cafarelli <voyageur@gentoo.org> (30 Jan 2017)
# Alpha release with new features, masked for testing
=app-text/tesseract-4.00.00_alpha*

# Yixun Lan <dlan@gentoo.org> (16 Jan 2017)
# Masked, Vulnerable due to RGW Denial of Service (bug #598206)
# We mask it instead of removing them, due user may need them while
# upgrade from old versions (<0.94.x)
<sys-cluster/ceph-10.2.3-r1

# Jeroen Roovers <jer@gentoo.org> (12 Jan 2017)
# Use x11-drivers/nvidia-drivers[tools] instead.
media-video/nvidia-settings

# Michael Orlitzky <mjo@gentoo.org> (07 Jan 2017)
# This package has some dangerous quality and security issues, but
# people may still find it useful. It is masked to prevent accidental
# use. See bugs 603346 and 604998 for more information.
app-admin/amazon-ec2-init

# Robin H. Johnson <robbat2@gentoo.org> (05 Jan 2017)
# Masking for testing
=app-emulation/ganeti-2.16*
=app-emulation/ganeti-2.17*

# Michał Górny <mgorny@gentoo.org> (17 Nov 2016)
# New version masked for testing. It supports source-window buffer size
# over 2G but it 'currently performs 3-5% slower and has 1-2% worse
# compression'.
>=dev-util/xdelta-3.1.0

# Tim Harder <radhermit@gentoo.org> (03 Nov 2016)
# Masked for testing
=sys-fs/fuse-3.0.0*

# Denis Dupeyron <calchan@gentoo.org> (12 Sep 2016)
# Masked for testing, see bug #588894.
=x11-misc/light-locker-1.7.0-r1

# Lars Wendler <polynomial-c@gentoo.org> (26 Aug 2016)
# Masked while being tested and reverse deps aren't fully compatible
=dev-libs/openssl-1.1*

# Chris Reffett <creffett@gentoo.org> (25 May 2016)
# The webkit-gtk:4 backend for Xiphos has known text display issues.
# Use at your own risk.
=app-text/xiphos-4.0.4-r1

# James Le Cuirot <chewi@gentoo.org> (03 Apr 2016)
# Masking Spring Framework for the time being as 3.2.4 is old, has
# multiple vulnerabilities, and we're not likely to update it
# soon. Hopefully we can revisit it when the Maven stuff works out.
dev-java/spring-aop
dev-java/spring-beans
dev-java/spring-core
dev-java/spring-expression
dev-java/spring-instrument

# Andreas K. Hüttel <dilfridge@gentoo.org> (03 Apr 2016)
# Can exhaust all available memory depending on task
# but is made available for experts who heed this warning
# as newer versions produce different output. Contact
# the proxied maintainer Matthew Brewer <tomboy64@sina.cn>
# for questions.
<=media-gfx/slic3r-1.1.9999

# José María Alonso <nimiux@gentoo.org> (24 Mar 2016)
# Fails to build dev-lisp/sbcl-1.3.3 #563812
=dev-lisp/asdf-3.1.7
=dev-lisp/uiop-3.1.7

# James Le Cuirot <chewi@gentoo.org> (07 Feb 2016)
# Masked until 2.0 final arrives, which hopefully won't depend on
# commons-dbcp:0 as that requires Java 6. Note that the 2.0 in the
# tree should have actually been 2.0_beta1. There are no revdeps.
dev-java/jcs

# Andrey Grozin <grozin@gentoo.org> (04 Jan 2016)
# Needs a bump and substantial ebuild rewrite
=sci-mathematics/reduce-20110414-r1

# Michał Górny <mgorny@gentoo.org> (30 Oct 2015)
# Uses unsafe ioctls that could result in data corruption. Upstream
# is working on replacing them in the wip/dedup-syscall branch.
# Keep it masked until they are done. sys-fs/duperemove is
# the suggested replacement for the meantime.
sys-fs/bedup

# Ian Delaney <idella4@gentoo.org> (27 Oct 2015)
# fails to build dev-lisp/sbcl-1.2.16 #563812
# mgorny: dev-lisp/uiop as version-bound revdep
=dev-lisp/asdf-3.1.6
=dev-lisp/uiop-3.1.6

# Mike Pagano <mpagano@gentoo.org> (2 Oct 2015)
# A regression in kernel 4.1.9 could lead to a system
# lockup.  This has been fixed in gentoo-sources-4.1.9-r1
# and the hope is that this patch will make it to 4.1.10
# Expires (2 Oct 2017)
=sys-kernel/vanilla-sources-4.1.9
=sys-kernel/gentoo-sources-4.1.9

# Lars Wendler <polynomial-c@gentoo.org> (20 Aug 2015)
# Releases are not from original upstream but from a fork.
# Masked as requested by vapier.
~net-misc/iputils-20160308
~net-misc/iputils-20161105

# Sebastian Pipping <sping@gentoo.org> (8 Aug 2015)
# Upcoming, too young to go into testing unmasked
dev-libs/iniparser:4

# Justin Lecher <jlec@gentoo.org> (28 Feb 2015)
# Unfixed security problems
# No upstream support anymore
# CVE-2015-{0219,0220,0221,0222,5145}
# CVE-2016-{9013,9014},CVE-2017-{7233,7234}
# #536586
# #554864
=dev-python/django-1.4*
=dev-python/django-1.5*
=dev-python/django-1.6*
=dev-python/django-1.7*
=dev-python/django-1.9*

# Robin H. Johnson <robbat2@gentoo.org> (04 Aug 2014)
# Masked for testing, presently fails upstream testsuite:
# FAIL:07:02:35 (00:00:00) db_dump/db_load(./TESTDIR.3/recd001.db:child killed: kill signal): expected 0, got 1
# FAIL:07:02:35 (00:00:00) Dump/load of ./TESTDIR.3/recd001.db failed.
# FAIL:07:02:35 (00:00:00) db_verify_preop: expected 0, got 1
=sys-libs/db-6.1*
=sys-libs/db-6.2*

# Ulrich Müller <ulm@gentoo.org> (15 Jul 2014)
# Permanently mask sys-libs/lib-compat and its reverse dependencies,
# pending multiple security vulnerabilities and QA issues.
# See bugs #515926 and #510960.
sys-libs/lib-compat
sys-libs/lib-compat-loki
games-action/mutantstorm-demo
games-action/phobiaii
games-fps/rtcw
games-fps/unreal
games-strategy/heroes3
games-strategy/heroes3-demo
games-strategy/smac

# Mikle Kolyada <zlogene@gentoo.org> (27 Jun 2014)
# Masked for proper testing. (Major updates in the code).
~dev-perl/PortageXS-0.2.12

# Hans de Graaff <graaff@gentoo.org> (1 Jun 2014)
# Mask new rubinius version for testing. This needs more work
# to fully integrate it in our Gentoo ruby handling. Volunteers
# welcome.
=dev-lang/rubinius-3*

# Matti Bickel <mabi@gentoo.org> (22 Apr 2014)
# Masked slotted lua for testing
# William Hubbs <williamh@gentoo.org> (07 Aug 2016)
# Taking this mask since Mabi is retired
# Rafael Martins <rafaelmartins@gentoo.org> (04 Dec 2016)
# Adding Lua 5.3 to mask
app-eselect/eselect-lua
=dev-lang/lua-5.1.5-r2
=dev-lang/lua-5.1.5-r100
=dev-lang/lua-5.1.5-r101
=dev-lang/lua-5.2.3
=dev-lang/lua-5.2.3-r1
=dev-lang/lua-5.2.3-r2
=dev-lang/lua-5.3.3
=dev-lang/lua-5.3.3-r1

# Samuli Suominen <ssuominen@gentoo.org> (06 Mar 2012)
# Masked for testing since this is known to break nearly
# every reverse dependency wrt bug 407091
>=dev-lang/lua-5.2.0

# Mike Gilbert <floppym@gentoo.org> (04 Mar 2014)
# Dev channel releases are only for people who are developers or want more
# experimental features and accept a more unstable release.
www-plugins/chrome-binary-plugins:unstable

# Justin Lecher <jlec@gentoo.org> (14 Oct 2013)
# Seems to break all deps - API change?
>=sci-libs/metis-5

# Michael Weber <xmw@gentoo.org> (17 Jul 2013)
# Upstream next versions
>=sys-boot/raspberrypi-firmware-1_pre

# Richard Freeman <rich0@gentoo.org> (24 Mar 2013)
# Contains known buffer overflows.  Package generally works
# but should not be fed untrusted input (eg from strangers).
# Masked to ensure users are aware before they install.
app-text/cuneiform

# Samuli Suominen <ssuominen@gentoo.org> (30 Oct 2011)
# Masked for security bug #294253, use only at your own risk!
=media-libs/fmod-3*

# Diego E. Pettenò <flameeyes@gentoo.org> (03 Jan 2009)
# These packages are not supposed to be merged directly, instead
# please use sys-devel/crossdev to install them.
dev-libs/cygwin
dev-util/mingw-runtime
dev-util/mingw64-runtime
dev-util/w32api
sys-libs/newlib
dev-embedded/avr-libc

# Chris Gianelloni <wolf31o2@gentoo.org> (03 Mar 2008)
# Masking due to security bug #194607 and security bug #204067
games-fps/doom3
games-fps/doom3-cdoom
games-fps/doom3-chextrek
games-fps/doom3-data
games-fps/doom3-demo
games-fps/doom3-ducttape
games-fps/doom3-eventhorizon
games-fps/doom3-hellcampaign
games-fps/doom3-inhell
games-fps/doom3-lms
games-fps/doom3-mitm
games-fps/doom3-roe
games-fps/quake4-bin
games-fps/quake4-data
games-fps/quake4-demo

# <klieber@gentoo.org> (01 Apr 2004)
# The following packages contain a remotely-exploitable
# security vulnerability and have been hard masked accordingly.
#
# Please see https://bugs.gentoo.org/show_bug.cgi?id=44351 for more info
#
games-fps/unreal-tournament-goty
games-fps/unreal-tournament-strikeforce
games-fps/unreal-tournament-bonuspacks
games-fps/aaut