megacoffee.net Gentoo overlay - legacy mirror
We have moved to Git. This repository is only provided for compatibility with old installations. Learn how to migrate your installation here.
annotate profiles/package.mask @ 220:5fc6acd937e1
dev-vcs/kallithea: version bump to 0.3.6 (security update), masking <0.3.6
author | Daniel Neugebauer <dneuge@energiequant.de> |
---|---|
date | Sat, 29 Dec 2018 16:31:18 +0100 |
parents | 64ad94cc6f53 |
children | 77fe2c26eb42 |
rev | line source |
---|---|
26
abab9b79caf9
media-libs/xine-lib-1.1.20: adding full mask to avoid accidental merges
Daniel Neugebauer <dneuge@energiequant.de>
parents:
diff
changeset
|
1 # Daniel Neugebauer <dneuge@energiequant.de> (11 Oct 2012) |
abab9b79caf9
media-libs/xine-lib-1.1.20: adding full mask to avoid accidental merges
Daniel Neugebauer <dneuge@energiequant.de>
parents:
diff
changeset
|
2 # for gentoo-overlay.megacoffee.net |
abab9b79caf9
media-libs/xine-lib-1.1.20: adding full mask to avoid accidental merges
Daniel Neugebauer <dneuge@energiequant.de>
parents:
diff
changeset
|
3 # ebuild was restored from official portage tree after deletion and should |
abab9b79caf9
media-libs/xine-lib-1.1.20: adding full mask to avoid accidental merges
Daniel Neugebauer <dneuge@energiequant.de>
parents:
diff
changeset
|
4 # only be used as a last resort |
abab9b79caf9
media-libs/xine-lib-1.1.20: adding full mask to avoid accidental merges
Daniel Neugebauer <dneuge@energiequant.de>
parents:
diff
changeset
|
5 =media-libs/xine-lib-1.1.20 |
216
64ad94cc6f53
dev-vcs/kallithea: version bump to 0.3.5 (security update), masking <0.3.5
Daniel Neugebauer <dneuge@energiequant.de>
parents:
163
diff
changeset
|
6 |
64ad94cc6f53
dev-vcs/kallithea: version bump to 0.3.5 (security update), masking <0.3.5
Daniel Neugebauer <dneuge@energiequant.de>
parents:
163
diff
changeset
|
7 # Daniel Neugebauer <dneuge@energiequant.de> (21 Oct 2018) |
64ad94cc6f53
dev-vcs/kallithea: version bump to 0.3.5 (security update), masking <0.3.5
Daniel Neugebauer <dneuge@energiequant.de>
parents:
163
diff
changeset
|
8 # for gentoo-overlay.megacoffee.net |
64ad94cc6f53
dev-vcs/kallithea: version bump to 0.3.5 (security update), masking <0.3.5
Daniel Neugebauer <dneuge@energiequant.de>
parents:
163
diff
changeset
|
9 # Kallithea versions before 0.3.5 are vulnerable to several security issues |
64ad94cc6f53
dev-vcs/kallithea: version bump to 0.3.5 (security update), masking <0.3.5
Daniel Neugebauer <dneuge@energiequant.de>
parents:
163
diff
changeset
|
10 # (incorrect access control, directory traversal, XSS). See the 0.3.5 release |
64ad94cc6f53
dev-vcs/kallithea: version bump to 0.3.5 (security update), masking <0.3.5
Daniel Neugebauer <dneuge@energiequant.de>
parents:
163
diff
changeset
|
11 # notes on details and recommended actions and upgrade ASAP (update was |
64ad94cc6f53
dev-vcs/kallithea: version bump to 0.3.5 (security update), masking <0.3.5
Daniel Neugebauer <dneuge@energiequant.de>
parents:
163
diff
changeset
|
12 # already published on 6 Jun 2018): |
64ad94cc6f53
dev-vcs/kallithea: version bump to 0.3.5 (security update), masking <0.3.5
Daniel Neugebauer <dneuge@energiequant.de>
parents:
163
diff
changeset
|
13 # https://kallithea-scm.org/news/release-0.3.5.html |
64ad94cc6f53
dev-vcs/kallithea: version bump to 0.3.5 (security update), masking <0.3.5
Daniel Neugebauer <dneuge@energiequant.de>
parents:
163
diff
changeset
|
14 <dev-vcs/kallithea-0.3.5 |
220
5fc6acd937e1
dev-vcs/kallithea: version bump to 0.3.6 (security update), masking <0.3.6
Daniel Neugebauer <dneuge@energiequant.de>
parents:
216
diff
changeset
|
15 |
5fc6acd937e1
dev-vcs/kallithea: version bump to 0.3.6 (security update), masking <0.3.6
Daniel Neugebauer <dneuge@energiequant.de>
parents:
216
diff
changeset
|
16 # Daniel Neugebauer <dneuge@energiequant.de> (29 Dec 2018) |
5fc6acd937e1
dev-vcs/kallithea: version bump to 0.3.6 (security update), masking <0.3.6
Daniel Neugebauer <dneuge@energiequant.de>
parents:
216
diff
changeset
|
17 # for gentoo-overlay.megacoffee.net |
5fc6acd937e1
dev-vcs/kallithea: version bump to 0.3.6 (security update), masking <0.3.6
Daniel Neugebauer <dneuge@energiequant.de>
parents:
216
diff
changeset
|
18 # Kallithea versions before 0.3.6 are vulnerable to privilege escalation |
5fc6acd937e1
dev-vcs/kallithea: version bump to 0.3.6 (security update), masking <0.3.6
Daniel Neugebauer <dneuge@energiequant.de>
parents:
216
diff
changeset
|
19 # in Mercurial (CVE-2018-1000132). |
5fc6acd937e1
dev-vcs/kallithea: version bump to 0.3.6 (security update), masking <0.3.6
Daniel Neugebauer <dneuge@energiequant.de>
parents:
216
diff
changeset
|
20 # Note that Kallithea 0.3.6 continues to use a vulnerable Mercurial version |
5fc6acd937e1
dev-vcs/kallithea: version bump to 0.3.6 (security update), masking <0.3.6
Daniel Neugebauer <dneuge@energiequant.de>
parents:
216
diff
changeset
|
21 # (<4.5.1) but attempts to mitigate the issue. |
5fc6acd937e1
dev-vcs/kallithea: version bump to 0.3.6 (security update), masking <0.3.6
Daniel Neugebauer <dneuge@energiequant.de>
parents:
216
diff
changeset
|
22 # Upgrade ASAP (updates were already published on 6 Mar 2018 for Mercurial |
5fc6acd937e1
dev-vcs/kallithea: version bump to 0.3.6 (security update), masking <0.3.6
Daniel Neugebauer <dneuge@energiequant.de>
parents:
216
diff
changeset
|
23 # and 4 Nov 2018 for additional mitigation in Kallithea): |
5fc6acd937e1
dev-vcs/kallithea: version bump to 0.3.6 (security update), masking <0.3.6
Daniel Neugebauer <dneuge@energiequant.de>
parents:
216
diff
changeset
|
24 # https://kallithea-scm.org/news/release-0.3.6.html |
5fc6acd937e1
dev-vcs/kallithea: version bump to 0.3.6 (security update), masking <0.3.6
Daniel Neugebauer <dneuge@energiequant.de>
parents:
216
diff
changeset
|
25 <dev-vcs/kallithea-0.3.6 |