--- a/media-gfx/trimage/Manifest	Fri May 01 10:00:01 2020 +0000
+++ b/media-gfx/trimage/Manifest	Sun May 17 12:00:02 2020 +0000
@@ -1,1 +1,2 @@
 EBUILD trimage-1.0.5.ebuild 1205 BLAKE2B 5195c89263db7adbd1e222ab33dd6ff4635184219d828eb64d87e8862d89388747092736f1c1bca624f48ea1d20887763c5064f6729c72fd0372d09d1aab9564 SHA512 72a71c64c98e0c324a1f09bcbd830c707e98ef32b0b98f9d7c6f0141bf67c693f2492374026f7e0bbb5d93014ad0a638e0f42e64f0e7c2bc5976caf43adf22c7
+EBUILD trimage-1.0.6.ebuild 786 BLAKE2B ea2688a75d82cae812211cb6cd754e385d7eb4d2ddb606a34f8b69af034e892928767d0dba9325c833dfaa5fc4da30f4cd924900b0fab5aa97388a56d069181d SHA512 c213b824f4e2efd79a18a9c9c03b6dc32425b14378b4a9c379ed70738e4aa5b8261af53f00e57bdfc4747804527bd02be03287d908943bce886085764622b553

--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/media-gfx/trimage/trimage-1.0.6.ebuild	Sun May 17 12:00:02 2020 +0000
@@ -0,0 +1,37 @@
+# Copyright 1999-2013 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI="7"
+PYTHON_COMPAT=( python3_{6,7,8} )
+
+inherit git-r3
+inherit distutils-r1
+inherit python-r1
+
+DESCRIPTION="GUI for PNG and JPEG optimization via optipng, pngcrush, advpng and jpegoptim"
+HOMEPAGE="http://trimage.org/"
+
+#SRC_URI="mirror://pypi/${PN:0:1}/${PN}/${P}.tar.gz"
+EGIT_REPO_URI="https://github.com/Kilian/Trimage.git"
+EGIT_COMMIT="8376c4a238ff725c29b435bdd5627e8e22a8d07a"
+
+LICENSE="MIT"
+SLOT="0"
+KEYWORDS="~amd64 ~x86"
+IUSE=""
+
+DEPEND="
+	dev-python/PyQt5
+	
+	>=media-gfx/optipng-0.7
+	<media-gfx/optipng-0.8
+	
+	>=media-gfx/pngcrush-1
+	<media-gfx/pngcrush-2
+	
+	>=app-arch/advancecomp-2
+	<app-arch/advancecomp-3
+	
+	>=media-gfx/jpegoptim-1.4
+	<media-gfx/jpegoptim-1.5
+"

--- a/profiles/package.mask	Fri May 01 10:00:01 2020 +0000
+++ b/profiles/package.mask	Sun May 17 12:00:02 2020 +0000
@@ -17,3 +17,23 @@
 # and 4 Nov 2018 for additional mitigation in Kallithea):
 # https://kallithea-scm.org/news/release-0.3.6.html
 <dev-vcs/kallithea-0.3.6
+
+# Daniel Neugebauer <dneuge@energiequant.de> (17 May 2020)
+# for gentoo-overlay.megacoffee.net
+#
+# Kallithea versions before 0.4.1 have several more or less severe
+# vulnerabilities, check their website for details:
+# https://kallithea-scm.org/security/
+#
+# Megacoffee overlay has stopped providing updated ebuilds for a number of
+# reasons, so we will remove all ebuilds from our repository around mid of
+# June.
+#
+# Most importantly we do not see any good (automatable) migration path
+# between 0.3 and later versions, so an update will require your manual
+# intervention anyway.
+#
+# Since the ebuild has just been a wrapper around virtualenv it should not
+# be too difficult to replace it following the manual if you want to
+# continue with the current type of installation.
+<dev-vcs/kallithea-0.4.1