commit: 61e56e8c4fa4bd8cad4f093a11d19b4a0d11fd7a Author: Conrad Kostecki <conikost <AT> gentoo <DOT> org> AuthorDate: Fri Jun 9 17:12:07 2023 +0000 Commit: Conrad Kostecki <conikost <AT> gentoo <DOT> org> CommitDate: Fri Jun 9 17:12:20 2023 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=61e56e8c
app-crypt/acme-sh: drop mask Bug: https://bugs.gentoo.org/908104 Signed-off-by: Conrad Kostecki <conikost <AT> gentoo.org> profiles/package.mask | 7 ------- 1 file changed, 7 deletions(-) diff --git a/profiles/package.mask b/profiles/package.mask index c02692d60f3d..71b3a22f07e8 100644 --- a/profiles/package.mask +++ b/profiles/package.mask @@ -39,13 +39,6 @@ # Removal on 2023-07-09. Bug #888245. dev-python/doctest-ignore-unicode -# Sam James <s...@gentoo.org> (2023-06-09) -# Severe security vulnerability: executes arbitrary code returned in responses -# from the server. Appears a CA is abusing that acme-sh uses eval. -# Please see https://github.com/acmesh-official/acme.sh/issues/4659 and -# https://bugs.gentoo.org/908104. -app-crypt/acme-sh - # Georgy Yakovlev <gyakov...@gentoo.org> (2023-06-08) # May be broken on some arches due to weird LLVM interaction. # Masked for now.
