path: root/profiles/package.mask

####################################################################
#
# When you add an entry to the top of this file, add your name, the date, and
# an explanation of why something is getting masked. Please be extremely
# careful not to commit atoms that are not valid, as it can cause large-scale
# breakage, especially if it ends up in the daily snapshot.
#
## Example:
##
## # Dev E. Loper <developer@gentoo.org> (28 Jun 2012)
## # Masking  these versions until we can get the
## # v4l stuff to work properly again
## =media-video/mplayer-0.90_pre5
## =media-video/mplayer-0.90_pre5-r1
#
# - Best last rites (removal) practices -
# Include the following info:
# a) reason for masking
# b) bug # for the removal (and yes you should have one)
# c) date of removal (either the date or "in x days")
#
## Example:
##
## # Dev E. Loper <developer@gentoo.org> (23 May 2015)
## # Masked for removal in 30 days.  Doesn't work
## # with new libfoo. Upstream dead, gtk-1, smells
## # funny. (bug #987654)
## app-misc/some-package

#--- END OF EXAMPLES ---

# Andreas Sturmlechner <asturm@gentoo.org> (06 Mar 2018)
# Maintainer not responding, depends on deprecated Qt4.
# Masked for removal in 30 days. Bug 598651, 635192, 644396
media-gfx/photivo

# Patrice Clement <monsieurp@gentoo.org> (05 Mar 2018)
# Package name change from msgpack-python to msgpack breaks dependencies.
>=dev-python/msgpack-0.5.6
>=dev-python/neovim-python-client-0.2.1

# Andreas Sturmlechner <asturm@gentoo.org> (05 Mar 2018)
# Dead upstream, depends on deprecated Qt4.
# Masked for removal in 30 days. Bug 644404
net-fs/smbtatools

# Mike Gilbert <floppym@gentoo.org> (04 Mar 2018)
# Dev channel releases are only for people who are developers or want more
# experimental features and accept a more unstable release.
>=www-client/chromium-66

# Andreas Sturmlechner <asturm@gentoo.org> (04 Mar 2018)
# Dead upstream, depends on deprecated Qt4. media-sound/cantata
# is an actively developed alternative based on Qt5.
# Masked for removal in 30 days. Bug 644412
media-sound/qmpdclient

# Andreas Sturmlechner <asturm@gentoo.org> (04 Mar 2018)
# Dead upstream, depends on deprecated Qt4.
# Masked for removal in 30 days. Bug 645436
sci-chemistry/massxpert

# Andreas Sturmlechner <asturm@gentoo.org> (04 Mar 2018)
# Dead upstream, depends on deprecated Qt4.
# Masked for removal in 30 days. Bug 514438, 644522
sci-chemistry/gsim

# Andreas Sturmlechner <asturm@gentoo.org> (04 Mar 2018)
# Depends on deprecated dev-python/pyqwt, blocks Qt4 removal.
# Masked for removal in 30 days unless someone bumps to 5.2.2.
# Bug 645218, 649094
sci-chemistry/PyMca

# Andreas K. Hüttel <dilfridge@gentoo.org> (03 Mar 2018)
# Fails to build without rpc support in glibc (bug 631044);
# no maintainer, requires obsolete hardware. Removal in
# 30 days.
app-pda/p3nfs

# Andreas K. Hüttel <dilfridge@gentoo.org> (03 Mar 2018)
# Fails to build without rpc support in glibc (bug 377867);
# fails to build with libtirpc; apparently functionality is
# now included in libtirpc. No consumers. Removal in 30 days.
net-libs/librpcsecgss

# Andreas K. Hüttel <dilfridge@gentoo.org> (03 Mar 2018)
# Marked obsolete on CTAN. EAPI=3 ebuild. No consumers.
# Masked for removal in 30 days. Bug 644258
app-text/noweb

# Jason Zaman <perfinion@gentoo.org> (02 Mar 2018)
# Became sys-apps/selinux-python in release 2.7
# Masked for removal in 30 days.
dev-python/sepolgen

# Tim Harder <radhermit@gentoo.org> (01 Mar 2018)
# Masked for testing.
>=dev-python/aiohttp-3

# Ulrich Müller <ulm@gentoo.org> (01 Mar 2018)
# Very old (Open)Motif version 2.2 installing libXm.so.3.
# Released in 2004. Non-free. No revdeps in Gentoo repo.
# Depends on x11-libs/libXp which is on its way out.
# If you still need this for third-party binaries, try the
# workaround outlined in https://bugs.gentoo.org/210021#c19.
# Masked for removal in 90 days. Bug #649080.
x11-libs/motif:2.2

# Andreas Sturmlechner <asturm@gentoo.org> (28 Feb 2018)
# Dead upstream, depends on dead Qt4.
# Masked for removal in 30 days.
dev-tex/qtexengine

# Andreas Sturmlechner <asturm@gentoo.org> (27 Feb 2018)
# Depends on deprecated Qt4, no Qt5 work found. No maintainer.
# Masked for removal in 30 days. Bug #644534
app-text/searchmonkey

# Andreas Sturmlechner <asturm@gentoo.org> (27 Feb 2018)
# Depends on deprecated Qt4. No maintainer, needs someone to bump to Qt5.
# Masked for removal in 30 days. Bug #602042
media-gfx/pencil

# Andreas Sturmlechner <asturm@gentoo.org> (27 Feb 2018)
# Dead upstream, google-code-down, depends on deprecated Qt4.
# Masked for removal in 30 days. Bug #626664
media-video/abby

# Anthony G. Basile <blueness@gentoo.org> (25 Feb 2018)
# Upstream has been dead since 2012.  Migrate to uclibc-ng.
# See https://wiki.gentoo.org/wiki/Project:Hardened_uClibc
sys-libs/uclibc

# Thomas Deutschmann <whissi@gentoo.org> (23 Feb 2018)
# Unmaintained in Gentoo, known critical vulnerabilities like
# auth bypass. Removal in 30 days. Bugs #559658, #592080.
sys-cluster/ganglia-web

# Mart Raudsepp <leio@gentoo.org> (23 Feb 2018)
# Old net-libs/webkit-gtk SLOTs have hundreds of known security issues.
# Use the security safe net-libs webkit-gtk SLOT=4 instead via
# libraries and applications ported to gtk3 and webkit2gtk API.
# Masked for removal in 30 days. Bug #577068.
# Please keep this package.mask entry until at least 25th May 2018 for
# extra notification of the security vulnerabilities.
net-libs/webkit-gtk:2
net-libs/webkit-gtk:3

# Mart Raudsepp <leio@gentoo.org> (23 Feb 2018)
# Older versions of GnuCash use security vulnerable old webkit-gtk slot.
# Use gnucash-2.7.4 or newer instead, but pay attention to the news item:
# https://www.gentoo.org/support/news-items/2018-01-14-gnucash.html
<app-office/gnucash-2.7

# Steve Dibb <beandog@gentoo.org> (22 Feb 2018)
# Very old project of mine, hasn't worked in years, no plans to
# support, and mpv can provide resume playback by default.
# Masked for removal in 30 days. Bug #648568
media-video/mplayer-resume

# Steve Dibb <beandog@gentoo.org> (22 Feb 2018)
# Dead upstream, never really used, libdvdread and libdvdnav provide
# DVD access.
# Masked for removal in 30 days. Bug #648566
media-libs/libdvdplay

# Steve Dibb <beandog@gentoo.org> (22 Feb 2018)
# Dead upstream, long since replaced by libaacs for functionality.
# Masked for removal in 30 days. Bug #648560
media-video/aacskeys

# Brian Evans <grknight@gentoo.org> (22 Feb 2018)
# Multiple vulnerablities, EOL upstream.
# Masked for removal in 30 days. Bug #604182
dev-php/ZendFramework

# Michael Palimaka <kensington@gentoo.org> (22 Feb 2018)
# Plugin for removed package media-sound/amarok. Dead upstream.
# Depends on vulnerable gstreamer:0.10.
# Masked for removal in 30 days. Bug #629184.
media-sound/moodbar

# Mart Raudsepp <leio@gentoo.org> (22 Feb 2018)
# This package was renamed to dev-libs/libgnome-games-support without
# a pkgmove; everything in tree uses it now instead of libgames-support.
# Masked for removal in 30 days. Bug #648468.
dev-libs/libgames-support

# Thomas Deutschmann <whissi@gentoo.org> (22 Feb 2018)
# Upstream's release tarball doesn't match Git content.
# Masked until clarified.
=app-admin/rsyslog-8.33.0

# Ulrich Müller <ulm@gentoo.org> (21 Feb 2018)
# Homepage is dead. Apparently the last release was in 2012
# and it does not work with Emacs 25 and later.
# Masked for removal in 30 days. Bug #590400.
app-emacs/mcomplete

# Ulrich Müller <ulm@gentoo.org> (21 Feb 2018)
# Obsolete predecessor of js-mode, which is included
# with Emacs since version 23. Homepage is dead.
# Masked for removal in 30 days. Bug #648150.
app-emacs/javascript

# Ulrich Müller <ulm@gentoo.org> (21 Feb 2018)
# Last release in 2006. Homepage is dead. Upstream says
# that app-emacs/muse should be used as replacement.
# Masked for removal in 30 days. Bug #619194.
app-emacs/emacs-wiki
app-emacs/emacs-wiki-blog

# Brian Evans <grknight@gentoo.org (15 Feb 2018)
# These PEAR packages are unmaintained upstream and
# are difficult to test or have no tests.
# PHP team no longer wants to maintain these for PHP7 and beyond
# Removal in 30 days - Bug 647768
dev-php/PEAR-Benchmark
dev-php/PEAR-Calendar
dev-php/PEAR-Console_Color
dev-php/PEAR-Crypt_Blowfish
dev-php/PEAR-Crypt_RC4
dev-php/PEAR-XML_Beautifier
dev-php/PEAR-XML_Feed_Parser
dev-php/PEAR-Structures_DataGrid
dev-php/PEAR-PHP_CompatInfo
dev-php/PEAR-Net_Server
dev-php/PEAR-Net_LMTP
dev-php/PEAR-Net_IMAP
dev-php/PEAR-Net_FTP
dev-php/PEAR-Net_DIME
dev-php/PEAR-Math_Stats

# Sergey Popov <pinkbyte@gentoo.org> (13 Feb 2018)
# Requires dead Qt4 (bug #645420). Removal in 30 days
media-gfx/qiviewer

# Kristian Fiskerstrand <k_f@gentoo.org> (11 Feb 2018)
# Lastrite: app-crypt/monkeysign . Please use caff from 
# app-crypt/signing-party instead. Removal in 30 days.
# Bug: #647352
app-crypt/monkeysign

# Michael Palimamka <kensington@gentoo.org> (11 Feb 2018
# Fails to build (bug #538400). Requires dead Qt 4 (bug #637014).
# Dead upstream. Masked for removal in 30 days.
media-sound/lastfmplayer

# Eray Aslan <eras@gentoo.org> (08 Feb 2018)
# Mask experimental software
=mail-mta/postfix-3.4*

# Thomas Deutschmann <whissi@gentoo.org> (07 Feb 2018)
# Intel recommends to pull these versions because they could
# cause higher than expected reboots and other unpredictable
# system behavior. Bug #646646
=sys-firmware/intel-microcode-20171117_p20171215
=sys-firmware/intel-microcode-20171117_p20171215-r1
=sys-firmware/intel-microcode-20180108
=sys-firmware/intel-microcode-20180108-r1

# Matt Turner <mattst88@gentoo.org> (06 Feb 2018)
# Dead and unused
# Masked for removal in 30 days. Bug #646838
x11-libs/libXCalibrate
x11-libs/libXfontcache
x11-misc/xtscal
x11-proto/fontcacheproto
x11-proto/xcalibrateproto
x11-proto/xf86rushproto

# Tim Harder <radhermit@gentoo.org> (05 Feb 2018)
# Unmaintained, replaced by newsboat fork.
# Masked for removal in 30 days.
net-news/newsbeuter

# Patrice Clement <monsieurp@gentoo.org> (26 Jan 2018)
# Has different symbols. Known to cause issues with i3bar/swaybar.
media-fonts/fontawesome:0/5

# Eray Aslan <eras@gentoo.org> (22 Jan 2018)
# Vulnerable - see https://bugs.gentoo.org/630684
# Please migrate to cyrus-imapd-3.0 releases
=net-mail/cyrus-imapd-2.5*

# Patrice Clement <monsieurp@gentoo.org> (18 Jan 2018)
# mpv >= 0.28.0 requires changes currently only available in ffmpeg-9999.
>=media-video/mpv-0.28.0

# Michał Górny <mgorny@gentoo.org> (10 Jan 2018)
# The Fuzzer library is now installed as part of core LLVM. That's
# sys-devel/llvm in LLVM 5, and sys-libs/compiler-rt-sanitizers
# in LLVM 6 and newer. The separate ebuild was never approved by LLVM
# maintainers or actually maintained, and is obsolete for a long time.
# Removal in 30 days.
dev-libs/libFuzzer

# Richard Freeman <rich0@gentoo.org> (09 Jan 2018)
# Bug 644048 - temp QA mask until it can get sorted out
# Lars Wendler <polynomial-c@gentoo.org> (26 Feb 2018)
# See also tracker bug: https://bugs.gentoo.org/648864
~sys-apps/attr-2.4.48
# Lars Wendler <polynomial-c@gentoo.org> (10 Jan 2018)
# Mask followup bugfixes for =sys-apps/attr-2.4.48 as well until proper
# testing has been conducted.
=sys-apps/acl-2.2.52-r2

# Alice Ferrazzi <alicef@gentoo.org> (05 Jan 2018)
# kernel: Meltdown and Spectre - Processor flaw. (#643228)
# Please upgrade for Intel processor flaw workaround
# (currently KPTI patch are 64bit only), 
# also excluding AMD from the fix as not affected.
# Please unmask your kernel version if you want to
# continue to use your kernel with AMD.
# Removal in a month.
=sys-kernel/gentoo-sources-4.14.8-r1
=sys-kernel/gentoo-sources-4.14.9
=sys-kernel/gentoo-sources-4.14.10
=sys-kernel/gentoo-sources-4.14.10-r1
=sys-kernel/gentoo-sources-4.14.11

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Fails to fetch (#597424). Removal in a month.
sci-chemistry/platon

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Multiple build issues (#423471, #529772, #558206, #574910, #603304,
# #638602), problems with init.d scripts (#390231), major version bump
# #pending to be done (#610744). Removal in a month.
sys-fs/ocfs2-tools

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Fails to build, a major version bump is needed but it's hard to bump
# (#626050, #626052). Removal in a month.
net-nds/ypserv
net-nds/ypbind

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Upstream is died, no server still usable for this (#626770). Removal in a
# month.
games-arcade/bloboats

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Upstream dead, not compatible with latest mariadb, nothing requires this
# in the tree (#628526, #629470, #629552, #629712, #629978, #630002,
# #630098, #630650). Removal in a month.
dev-db/lib_mysqludf_fPROJ4
dev-db/lib_mysqludf_preg
dev-db/lib_mysqludf_ta
dev-db/lib_mysqludf_stat
dev-db/lib_mysqludf_str
dev-db/lib_mysqludf_udf
dev-db/lib_mysqludf_sys
dev-db/lib_mysqludf_json

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Fails multilib-strict check (#628836). Nothing requires it. Removal in a
# month.
dev-libs/dclog

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Tries to install at pkg_postinst phase (#628804). Removal in a month.
app-misc/misterhouse

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Configure hangs (#628726), a major version bump is needed (#510050).
# Removal in a month.
app-forensics/autopsy

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Deprecated tools replace by dev-python/awscli (#633374). Removal in a
# month.
app-admin/aws-as-tools
app-admin/aws-cw-tools
app-admin/aws-iam-tools
app-admin/aws-rds-tools

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Relies on obsolete code.google, nothing uses it at present time (#633984).
# Removal in a month.
net-misc/slimrat

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Upstream dead, fails to fetch (#586504, #640546, #636466). Removal in a
# month.
games-emulation/xe

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Fails to build (#637612). Removal in a month.
net-vpn/htun

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Unmaintained, fails to build (#638628). Removal in a month.
media-sound/nted

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Fails to build (#638634). Removal in a month.
sys-apps/raidutils

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Tries to download and compile other tools, build fails then (#639060).
# Removal in a month.
dev-lang/fsharp

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Dead since 2007, fails to build (#639510). Removal in a month.
net-irc/ultimate

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Relies on dead gnome2 python bindings, seems dead since 2009 (#640028),
# removal in a month.
sys-power/phctool

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Upstream stopped its development as recent Gnome versions don't need it,
# it relies on gnome2 python bindings and many other dead libs (#640032).
# Removal in a month.
app-misc/specto

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Upstream dead, relies on gnome2 python bindings and other dead libs
# (#640070). Removal in a month.
x11-plugins/thinkhdaps

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Cannot be installed (#640414). Removal in a month.
net-misc/asterisk-rate_engine

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Dead for ages and replaced by app-admin/procinfo-ng (#641016). Removal in
# a month.
app-admin/procinfo

# Pacho Ramos <pacho@gentoo.org> (04 Jan 2018)
# Upstream dead, fails to build, nothing requires it (#641750). Removal in a
# month.
net-misc/bti

# Alice Ferrazzi <alicef@gentoo.org> (30 Dec 2017)
# Masked for removal in 30 days.
# Upstream is no more backporting security fixes for 4.12.
# For a more stable kernel please downgrade to 4.9 
# or move to 4.14(unstable) if it works for you.
=sys-kernel/gentoo-sources-4.12.14
=sys-kernel/gentoo-sources-4.12.13
=sys-kernel/gentoo-sources-4.12.12

# David Seifert <soap@gentoo.org> (29 Dec 2017)
# Last release in 2003, EAPI 0, C++ extremely broken
# Removal in 30 days
app-admin/jinit

# Pacho Ramos <pacho@gentoo.org> (27 Dec 2017)
# Out ebuild is completely obsolete (#381073), download manually PPD is
# preferred, current tarballs cannot be downloaded even (#635146). Removal
# in a month.
net-print/xerox-drivers

# Alice Ferrazzi <alicef@gentoo.org> (27 Dec 2017)
# Masked for removal in 30 days.
# This kernel doesn't boot on hardened profiles.
# vanilla-sources also dosen't make prepare
# (bug #642268) (bug #642664)
=sys-kernel/gentoo-sources-4.14.9
=sys-kernel/gentoo-sources-4.14.10
=sys-kernel/vanilla-sources-4.14.10

# Matthias Maier <tamiko@gentoo.org> (26 Dec 2017)
# gcc depends on mpfr and this version changes soname. Spare users with
# FEATURES=-preserve-libs from completely frying their system.
>=dev-libs/mpfr-4.0.0

# Thomas Beierlein <tomjbe@gentoo.org> (23 Dec 2017)
# To adapt to changed version naming by upstream 
# (pcb-yyyymmdd to pcb-x.y.z) we move the ebuild to
# pcb-0_pyyyymmdd and mask >=pcb-20000000.
# Do not remove the mask until newer version gets stable
>=sci-electronics/pcb-20000000

# Alice Ferrazzi <alicef@gentoo.org> (22 Dec 2017)
# Masked for removal in 30 days.
# Linux kernel 4.13 can break various laptops.
# (bug #642026)
=sys-kernel/gentoo-sources-4.13.15
=sys-kernel/gentoo-sources-4.13.16

# Andreas Sturmlechner <asturm@gentoo.org> (21 Dec 2017)
# Masked for testing
=dev-libs/libical-3.0.1

# Patrice Clement <monsieurp@gentoo.org> (19 Dec 2017)
# A slightly better syntax file for PAM configuration files is shipped with Vim
# since version 8.0. The one we package is old and out of date.
# Masked for removal in 30 days. See bug 578278.
app-vim/pam-syntax

# James Le Cuirot <chewi@gentoo.org> (17 Dec 2017)
# Java 9 is not yet fully supported on Gentoo. Packages cannot depend
# on it so these virtuals are not yet required. If you wish to use
# Java 9 now then install oracle-(jdk|jre)-bin:9 directly.
virtual/jdk:9
virtual/jre:9

# Patrice Clement <monsieurp@gentoo.org> (12 Dec 2017)
# Masked due to a hard dependency on an ancient versions of dev-libs/msgpack
# (<0.6) that have been punted from the tree.
net-misc/cocaine-core

# Andreas Sturmlechner <asturm@gentoo.org> (03 Dec 2017)
# Depends on dead Qt4, upstream porting inquiry pending. Bug #631788
games-kids/crayon-physics

# Jonas Stein <jstein@gentoo.org> (29 Nov 2017)
# The old yafaray-0.1.1 depends on qt4 and has bugs we can not fix.
# (bug #321169) and (bug #595684)
# Users of yafaray may be interested in >=yafaray-3.3.0 (bug #639046)
# and its fork TheBounty (#639158) which require completely new ebuilds.
#
# The old and for now the last version in the tree is
# masked for removal on 2018-02-30
=media-gfx/yafaray-0.1.1

# Michał Górny <mgorny@gentoo.org> (25 Nov 2017)
# Testing branch GTK+3 release. Changes API, breaks xfce-base/xfdesktop.
# Masked until the latter sees a new release.
>=dev-python/thunarx-python-0.4.0
>=xfce-base/thunar-1.7
>=xfce-extra/thunar-archive-plugin-0.4.0
>=xfce-extra/thunar-media-tags-plugin-0.3.0
>=xfce-extra/thunar-shares-plugin-0.3.0

# Andreas Sturmlechner <asturm@gentoo.org> (16 Nov 2017)
# Depends on dead Qt4WebKit. Masked for removal in 30 days. Bug #620702
<media-gfx/freecad-0.18

# Jonas Stein <jstein@gentoo.org> (11 Nov 2017)
# The upstream developer and former maintainer asked to treeclean these
# packages, because they can be used only with the Siemens Mediacenter
# Activy 3xx which was produced till 2005. He confirmed, that no user
# is left who needs the package from our tree for this special hardware.
# See also bug #633098. Masked for removal on 2018-01-31
app-misc/activylircd
media-plugins/vdr-alcd

# Mike Gilbert <floppym@gentoo.org> (05 Nov 2017)
# Breaks several reverse dependencies.
# https://bugs.gentoo.org/635934
>=dev-util/scons-3.0.0

# James Le Cuirot <chewi@gentoo.org> (05 Nov 2017)
# Java 7 is old and we are no longer able to support it. The ability
# to build against Java 7 may return when we update the eclasses for
# Java 9 but the runtime will not return. If you need it then source
# ebuilds will continue to be maintained by gnu_andrew in java-overlay
# for a few years. Removal in 30 days.
<=dev-java/icedtea-7.2.6.11:7
dev-java/icedtea-bin:7
virtual/jdk:1.7
virtual/jre:1.7

# Patrice Clement <monsieurp@gentoo.org> (28 Oct 2017)
# Missing dependencies.
>=dev-python/scrapy-1.4.0

# Robin H. Johnson <robbat2@gentoo.org> (22 Oct 2017)
# Masking for testing, contains Fedora Hobbled-EC for USE=bindist
=dev-libs/openssl-1.0.2l-r1

# Andreas K. Hüttel <dilfridge@gentoo.org> (22 Oct 2017)
# Broken with recent Perl (5.26) and not used by anything
# in the Gentoo repository. Please uninstall.
sys-devel/autoconf:2.59
sys-devel/autoconf:2.61
sys-devel/autoconf:2.62
sys-devel/autoconf:2.63
sys-devel/autoconf:2.65
sys-devel/autoconf:2.67
sys-devel/autoconf:2.68

# Andreas K. Hüttel <dilfridge@gentoo.org> (18 Oct 2017)
# sys-devel/automake versions 1.4, 1.5, 1.6, 1.7, 1.8
# have known security vulnerabilities, are broken with
# recent Perl (>=5.26.0), and are not used by anything in
# the Gentoo repository. Please uninstall.
sys-devel/automake:1.4
sys-devel/automake:1.5
sys-devel/automake:1.6
sys-devel/automake:1.7
sys-devel/automake:1.8

# Kent Fredric <kentnl@gentoo.org> (11 Oct 2017)
# This package should now be provided entirely by dev-lang/perl,
# stable perl 5.24 provides Unicode-Collate-1.140.0
# testing perl 5.26 provides Unicode-Collate-1.190.0
# This should only be unmasked if you're locking to perl-5.24 and need
# a newer version of virtual/perl-Unicode-Collate
# If you're upgrading to perl-5.26, please do:
#   emerge -C perl-core/Unicode-Collate
# See bug #634040
<perl-core/Unicode-Collate-1.190.0-r99

# Michał Górny <mgorny@gentoo.org> (05 Oct 2017)
# (on behalf of QA)
# Rogue version bumps that reintroduce QA violations that were fixed
# in #598527 and #598529, breaking the current verison
# of app-portage/eix as a result, #633424. Do not reintroduce without
# prior review from QA.
=app-shells/push-3.0
=app-shells/quoter-4.0

# Patrice Clement <monsieurp@gentoo.org> (01 Oct 2017)
# Mask Atom betas for testing.
app-editors/atom:beta

# Patrice Clement <monsieurp@gentoo.org> (09 Sep 2017)
# Python 3 port is almost complete with version 0.6.0. Users might run into
# minor bumps here and there which is why the mask is still in place for the
# time being.
>=dev-java/javatoolkit-0.6.0

# Gilles Dartiguelongue <eva@gentoo.org> (04 Sep 2017)
# Incompatible changes in API in Enchant 2. Bug #629838.
>=app-text/enchant-2

# Gilles Dartiguelongue <eva@gentoo.org> (2 Sep 1017)
# Gnome 3.26 package mask
>=app-text/libgepub-0.5

# Anthony G. Basile <blueness@gentoo.org> (27 Aug 2017)
# Upstream is no longer providing public patches
sys-kernel/hardened-sources

# Patrice Clement <monsieurp@gentoo.org> (23 Aug 2017)
# Packages depending on this library need to be tested first before
# it is unmasked. Possibly some slotting is still needed.
# Package testing tracked in bug #611022.
>=dev-libs/msgpack-1.4.2

# Hanno Boeck <hanno@gentoo.org> (21 Aug 2017)
# Open security bugs, no upstream, bug 628432
# Alternatives: app-arch/libarchive, app-arch/unar
app-arch/unrar-gpl

# Sébastien Fabbro <bicatali@gentoo.org> (19 Aug 2017)
# ipython-6 is python-3 only and causes circular dependencies
# Unset python_targets_python2_7 for ipykernel and ipyparallel if needed.
>=dev-python/ipython-6

# Michael Orlitzky <mjo@gentoo.org> (18 Aug 2017)
# Last version from 2011, and has a vulnerable init script
# (bug 603382). The proxy-maintainer is unknown to bugzilla,
# and the previous maintainer jmbsvicetto is OK with masking.
<net-misc/vde-2.3.2-r4

# Mats Lidell <matsl@gentoo.org> (17 Aug 2017)
# Masked ede and all its dependencies due to security reasons. 
# bug #398241
app-xemacs/ede
app-xemacs/semantic
app-xemacs/jde
app-xemacs/xslt-process
app-xemacs/xetla
app-xemacs/cogre
app-xemacs/ecb
app-xemacs/xemacs-packages-all

# Kent Fredric <kentnl@gentoo.org> (21 Jul 2017)
# Masked due to serious regression that introduces widespread data
# corruption when storing data in blobs. Masked, because any code
# that is written to use this version is now dependent on this version
# and older versions will corrupt your code instead.
# However, any existing packages should not use this version.
# See: https://github.com/perl5-dbi/DBD-mysql/issues/117
=dev-perl/DBD-mysql-4.42.0

# Ian Stakenvicius <axs@gentoo.org> (19 Jul 2017)
# Mask spidermonkey:52 as it is a self-rolled release, no official
# release has been rolled.  Is only committed to support development
# versions of gjs.  Will unmask when gnome-3.26 is ready for testing
# or when upstream releases an official tarball.
dev-lang/spidermonkey:52

# Nicolas Bock <nicolasbock@gentoo.org> (17 Jul 2017)
# Keep shotwell development series masked.
>=media-gfx/shotwell-0.27

# Nicolas Bock <nicolasbock@gentoo.org> (31 Oct 2017)
# There are multiple unresolved upstream issues with >=jabref-bin-4.0 (#636036).
# If you still would like to use this version, please report any issues to
# upstream.
>=app-text/jabref-bin-4.0

# Nicolas Bock <nicolasbock@gentoo.org> (6 Dec 2017)
# Development has ceased, the last commit to the upstream repository was
# on 16 July 2016 with a note stating that its status is unmaintained [1].
# See also Bug 640034.
#
# [1] https://github.com/projecthamster/hamster/commit/c3e5fb761c88fdecfd1566cac8b6836228a27cce
app-office/hamster-time-tracker

# Pacho Ramos <pacho@gentoo.org> (14 Jul 2017)
# Doesn't work with >=openvpn-2.3, bug 470696
# Fix is work in progress, see above bug. dilfridge@g.o
net-vpn/kvpnc

# Pacho Ramos <pacho@gentoo.org> (14 Jul 2017)
# Randomly broken due to sys-devel/binutils-config bug (#584296).
# Unmask when it is finally fixed, so people can build the package.
dev-util/mutrace

# Matthias Schwarzott <zzam@gentoo.org> (03 Jul 2017)
# The snapshots got a wrong version number assigned.
# They are from before version 2.0.0. Masking them to force
# an update to version 2.0.0 as soon as it is added to the tree.
=media-plugins/vdr-xineliboutput-2.0.0_p20130821
=media-plugins/vdr-xineliboutput-2.0.0_p20150220

# Thomas Deutschmann <whissi@gentoo.org> (28 Jun 2017)
# New strip feature which is enabled by default causes genkernel
# to create unbootable kernel/initramfs images. Bug #622716
=sys-kernel/genkernel-3.5.1.0

# Hans de Graaff <graaff@gentoo.org> (05 Jun 2017)
# Bundles obsolete and vulnerable webkit version.
# Upstream has stopped development and recommends using
# headless mode in >=www-client/chromium-59.
# Masked for removal in 90 days. Bug #589994.
www-client/phantomjs
dev-ruby/poltergeist

# Thomas Deutschmann <whissi@gentoo.org> (24 May 2017)
# Broken runscript/changed behavior causing lvm2 to fail
# on boot. Bug #617578
>=sys-fs/lvm2-2.02.171

# Michał Górny <mgorny@gentoo.org> (22 May 2017)
# for Maciej S. Szmigiero <mail@maciej.szmigiero.name>
# Any version above 5.100.138 breaks b43 driver in various ways.
# Also, b43 wiki page says to use 5.100.138. Bug #541080.
>=sys-firmware/b43-firmware-6.30.163.46

# Michał Górny <mgorny@gentoo.org>, Andreas K. Hüttel <dilfridge@gentoo.org>,
# Matthias Maier <tamiko@gentoo.org> (21 May 2017)
# These old versions of toolchain packages (binutils, gcc, glibc) are no
# longer officially supported and are not suitable for general use. Using
# these packages can result in build failures (and possible breakage) for
# many packages, and may leave your system vulnerable to known security
# exploits.
# If you still use one of these old toolchain packages, please upgrade (and
# switch the compiler / the binutils) ASAP. If you need them for a specific
# (isolated) use case, feel free to unmask them on your system.
# (updated 27 Dec 2017 with gcc < 5.4)
<sys-devel/gcc-5.4
<sys-libs/glibc-2.25-r9
<sys-devel/binutils-2.29.1-r1

# Michał Górny <mgorny@gentoo.org> (20 May 2017)
# Old versions of CUDA and their reverse dependencies. They do not
# support GCC 5+, and are really old.
# (updated 27 Dec 2017 with cuda < 8 because of gcc < 5 mask)
<dev-python/pycuda-2016
<dev-util/nvidia-cuda-sdk-8
<dev-util/nvidia-cuda-toolkit-8
net-wireless/cpyrit-cuda

# Bernard Cafarelli <voyageur@gentoo.org> (8 May 2017)
# Coordinated conversion to wxGTK:3.0-gtk3
# Drop mask after migration of existing wxGTK:3.0 users
=net-ftp/filezilla-3.30.0-r300
=net-ftp/filezilla-3.31.0-r300

# Rick Farina <zerochaos@gentoo.org> (17 Apr 2017)
# Masking old versions because upstream changed versioning
# Please keep this mask for 1 year to ease upgrades for users
=app-crypt/hashcat-3.10-r1
=app-crypt/hashcat-3.30
=app-crypt/hashcat-3.40

# Lars Wendler <polynomial-c@gentoo.org> (24 Mar 2017)
# Masked until Mozilla and Chrome agreed how to handle
# Symantec trust issues properly (bug #613714)
=app-misc/ca-certificates-20161130.3.30-r1

# Mart Raudsepp <leio@gentoo.org> (16 Feb 2017)
# Old gstreamer 0.10 version, which is security vulnerable.
# Use gstreamer:1.0 with media-plugins/gst-plugins-libav
# instead (despite the name, it uses media-video/ffmpeg too).
# Please keep this mask entry until gstreamer:0.10 is still
# in tree or at least gets an affecting GLSA from bug 601354
# Bug #594878.
media-plugins/gst-plugins-ffmpeg

# Kent Fredric <kentnl@gentoo.org> (04 Feb 2017)
# Unsecure versions that have been only restored to tree
# to resolve compatibility problems with mail-filter/amavisd-new
# Use with caution due to these being removed for CVE-2016-1251
# Bug: #601144
# Bug: #604678
<dev-perl/DBD-mysql-4.41.0

# Alon Bar-Lev <alonbl@gentoo.org> (06 Feb 2017)
# Needs openssl-1.1
>=dev-libs/opencryptoki-3.6

# Bernard Cafarelli <voyageur@gentoo.org> (30 Jan 2017)
# Alpha release with new features, masked for testing
=app-text/tesseract-4.00.00_alpha*

# Yixun Lan <dlan@gentoo.org> (16 Jan 2017)
# Masked, Vulnerable due to RGW Denial of Service (bug #598206)
# We mask it instead of removing them, due user may need them while
# upgrade from old versions (<0.94.x)
<sys-cluster/ceph-10.2.3-r1

# Jeroen Roovers <jer@gentoo.org> (12 Jan 2017)
# Use x11-drivers/nvidia-drivers[tools] instead.
media-video/nvidia-settings

# Michael Orlitzky <mjo@gentoo.org> (07 Jan 2017)
# This package has some dangerous quality and security issues, but
# people may still find it useful. It is masked to prevent accidental
# use. See bugs 603346 and 604998 for more information.
app-admin/amazon-ec2-init

# Robin H. Johnson <robbat2@gentoo.org> (05 Jan 2017)
# Masking for testing
=app-emulation/ganeti-2.16*
=app-emulation/ganeti-2.17*

# Michał Górny <mgorny@gentoo.org> (17 Nov 2016)
# New version masked for testing. It supports source-window buffer size
# over 2G but it 'currently performs 3-5% slower and has 1-2% worse
# compression'.
>=dev-util/xdelta-3.1.0

# Tim Harder <radhermit@gentoo.org> (03 Nov 2016)
# Masked for testing
=sys-fs/fuse-3.0.0*

# Denis Dupeyron <calchan@gentoo.org> (12 Sep 2016)
# Masked for testing, see bug #588894.
=x11-misc/light-locker-1.7.0-r1

# Lars Wendler <polynomial-c@gentoo.org> (26 Aug 2016)
# Masked while being tested and reverse deps aren't fully compatible
=dev-libs/openssl-1.1*

# Chris Reffett <creffett@gentoo.org> (25 May 2016)
# The webkit-gtk:4 backend for Xiphos has known text display issues.
# Use at your own risk.
=app-text/xiphos-4.0.4-r1

# James Le Cuirot <chewi@gentoo.org> (03 Apr 2016)
# Masking Spring Framework for the time being as 3.2.4 is old, has
# multiple vulnerabilities, and we're not likely to update it
# soon. Hopefully we can revisit it when the Maven stuff works out.
dev-java/spring-aop
dev-java/spring-beans
dev-java/spring-core
dev-java/spring-expression
dev-java/spring-instrument

# Andreas K. Hüttel <dilfridge@gentoo.org> (03 Apr 2016)
# Can exhaust all available memory depending on task
# but is made available for experts who heed this warning
# as newer versions produce different output. Contact
# the proxied maintainer Matthew Brewer <tomboy64@sina.cn>
# for questions.
<=media-gfx/slic3r-1.1.9999

# José María Alonso <nimiux@gentoo.org> (24 Mar 2016)
# Fails to build dev-lisp/sbcl-1.3.3 #563812
=dev-lisp/asdf-3.1.7
=dev-lisp/uiop-3.1.7

# James Le Cuirot <chewi@gentoo.org> (07 Feb 2016)
# Masked until 2.0 final arrives, which hopefully won't depend on
# commons-dbcp:0 as that requires Java 6. Note that the 2.0 in the
# tree should have actually been 2.0_beta1. There are no revdeps.
dev-java/jcs

# Andrey Grozin <grozin@gentoo.org> (04 Jan 2016)
# Needs a bump and substantial ebuild rewrite
=sci-mathematics/reduce-20110414-r1

# Michał Górny <mgorny@gentoo.org> (30 Oct 2015)
# Uses unsafe ioctls that could result in data corruption. Upstream
# is working on replacing them in the wip/dedup-syscall branch.
# Keep it masked until they are done. sys-fs/duperemove is
# the suggested replacement for the meantime.
sys-fs/bedup

# Ian Delaney <idella4@gentoo.org> (27 Oct 2015)
# fails to build dev-lisp/sbcl-1.2.16 #563812
# mgorny: dev-lisp/uiop as version-bound revdep
=dev-lisp/asdf-3.1.6
=dev-lisp/uiop-3.1.6

# Mike Pagano <mpagano@gentoo.org> (2 Oct 2015)
# A regression in kernel 4.1.9 could lead to a system
# lockup.  This has been fixed in gentoo-sources-4.1.9-r1
# and the hope is that this patch will make it to 4.1.10
# Expires (2 Oct 2017)
=sys-kernel/vanilla-sources-4.1.9
=sys-kernel/gentoo-sources-4.1.9

# Lars Wendler <polynomial-c@gentoo.org> (20 Aug 2015)
# Releases are not from original upstream but from a fork.
# Masked as requested by vapier.
~net-misc/iputils-20160308
~net-misc/iputils-20161105

# Sebastian Pipping <sping@gentoo.org> (8 Aug 2015)
# Upcoming, too young to go into testing unmasked
dev-libs/iniparser:4

# Justin Lecher <jlec@gentoo.org> (28 Feb 2015)
# Unfixed security problems
# No upstream support anymore
# CVE-2015-{0219,0220,0221,0222,5145}
# CVE-2016-{9013,9014},CVE-2017-{7233,7234}
# #536586
# #554864
=dev-python/django-1.4*
=dev-python/django-1.5*
=dev-python/django-1.6*
=dev-python/django-1.7*
=dev-python/django-1.9*

# Robin H. Johnson <robbat2@gentoo.org> (04 Aug 2014)
# Masked for testing, presently fails upstream testsuite:
# FAIL:07:02:35 (00:00:00) db_dump/db_load(./TESTDIR.3/recd001.db:child killed: kill signal): expected 0, got 1
# FAIL:07:02:35 (00:00:00) Dump/load of ./TESTDIR.3/recd001.db failed.
# FAIL:07:02:35 (00:00:00) db_verify_preop: expected 0, got 1
=sys-libs/db-6.1*
=sys-libs/db-6.2*

# Ulrich Müller <ulm@gentoo.org> (15 Jul 2014)
# Permanently mask sys-libs/lib-compat and its reverse dependencies,
# pending multiple security vulnerabilities and QA issues.
# See bugs #515926 and #510960.
sys-libs/lib-compat
sys-libs/lib-compat-loki
games-action/mutantstorm-demo
games-action/phobiaii
games-fps/rtcw
games-fps/unreal
games-strategy/heroes3
games-strategy/heroes3-demo
games-strategy/smac

# Mikle Kolyada <zlogene@gentoo.org> (27 Jun 2014)
# Masked for proper testing. (Major updates in the code).
~dev-perl/PortageXS-0.2.12

# Hans de Graaff <graaff@gentoo.org> (1 Jun 2014)
# Mask new rubinius version for testing. This needs more work
# to fully integrate it in our Gentoo ruby handling. Volunteers
# welcome.
=dev-lang/rubinius-3*

# Matti Bickel <mabi@gentoo.org> (22 Apr 2014)
# Masked slotted lua for testing
# William Hubbs <williamh@gentoo.org> (07 Aug 2016)
# Taking this mask since Mabi is retired
# Rafael Martins <rafaelmartins@gentoo.org> (04 Dec 2016)
# Adding Lua 5.3 to mask
app-eselect/eselect-lua
=dev-lang/lua-5.1.5-r2
=dev-lang/lua-5.1.5-r100
=dev-lang/lua-5.1.5-r101
=dev-lang/lua-5.2.3
=dev-lang/lua-5.2.3-r1
=dev-lang/lua-5.2.3-r2
=dev-lang/lua-5.3.3
=dev-lang/lua-5.3.3-r1

# Samuli Suominen <ssuominen@gentoo.org> (06 Mar 2012)
# Masked for testing since this is known to break nearly
# every reverse dependency wrt bug 407091
>=dev-lang/lua-5.2.0

# Mike Gilbert <floppym@gentoo.org> (04 Mar 2014)
# Dev channel releases are only for people who are developers or want more
# experimental features and accept a more unstable release.
www-plugins/chrome-binary-plugins:unstable

# Justin Lecher <jlec@gentoo.org> (14 Oct 2013)
# Seems to break all deps - API change?
>=sci-libs/metis-5

# Michael Weber <xmw@gentoo.org> (17 Jul 2013)
# Upstream next versions
>=sys-boot/raspberrypi-firmware-1_pre

# Richard Freeman <rich0@gentoo.org> (24 Mar 2013)
# Contains known buffer overflows.  Package generally works
# but should not be fed untrusted input (eg from strangers).
# Masked to ensure users are aware before they install.
app-text/cuneiform

# Samuli Suominen <ssuominen@gentoo.org> (30 Oct 2011)
# Masked for security bug #294253, use only at your own risk!
=media-libs/fmod-3*

# Diego E. Pettenò <flameeyes@gentoo.org> (03 Jan 2009)
# These packages are not supposed to be merged directly, instead
# please use sys-devel/crossdev to install them.
dev-libs/cygwin
dev-util/mingw-runtime
dev-util/mingw64-runtime
dev-util/w32api
sys-libs/newlib
dev-embedded/avr-libc

# Chris Gianelloni <wolf31o2@gentoo.org> (03 Mar 2008)
# Masking due to security bug #194607 and security bug #204067
games-fps/doom3
games-fps/doom3-cdoom
games-fps/doom3-chextrek
games-fps/doom3-data
games-fps/doom3-demo
games-fps/doom3-ducttape
games-fps/doom3-eventhorizon
games-fps/doom3-hellcampaign
games-fps/doom3-inhell
games-fps/doom3-lms
games-fps/doom3-mitm
games-fps/doom3-roe
games-fps/quake4-bin
games-fps/quake4-data
games-fps/quake4-demo

# <klieber@gentoo.org> (01 Apr 2004)
# The following packages contain a remotely-exploitable
# security vulnerability and have been hard masked accordingly.
#
# Please see https://bugs.gentoo.org/show_bug.cgi?id=44351 for more info
#
games-fps/unreal-tournament-goty
games-fps/unreal-tournament-strikeforce
games-fps/unreal-tournament-bonuspacks
games-fps/aaut