From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 7D749138359 for ; Mon, 13 Jul 2020 11:28:56 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 934F0E08BB; Mon, 13 Jul 2020 11:28:54 +0000 (UTC) Received: from smtp.gentoo.org (woodpecker.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 7D91CE08BB for ; Mon, 13 Jul 2020 11:28:54 +0000 (UTC) Received: from oystercatcher.gentoo.org (oystercatcher.gentoo.org [148.251.78.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id DADE034FC32 for ; Mon, 13 Jul 2020 11:28:52 +0000 (UTC) Received: from localhost.localdomain (localhost [IPv6:::1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id 7F1DA2D3 for ; Mon, 13 Jul 2020 11:28:50 +0000 (UTC) From: "Michał Górny" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Michał Górny" Message-ID: <1594639722.1cdabc307639bd105b7da526dddfef6fdf6f99e6.mgorny@gentoo> Subject: [gentoo-commits] repo/gentoo:master commit in: profiles/, profiles/base/ X-VCS-Repository: repo/gentoo X-VCS-Files: profiles/base/package.use.mask profiles/package.mask X-VCS-Directories: profiles/ profiles/base/ X-VCS-Committer: mgorny X-VCS-Committer-Name: Michał Górny X-VCS-Revision: 1cdabc307639bd105b7da526dddfef6fdf6f99e6 X-VCS-Branch: master Date: Mon, 13 Jul 2020 11:28:50 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply X-Archives-Salt: 6a035d8d-e36b-4779-bb6e-0b80d956a17d X-Archives-Hash: 744130e29674c28debd65278ab869573 commit: 1cdabc307639bd105b7da526dddfef6fdf6f99e6 Author: Michał Górny gentoo org> AuthorDate: Mon Jul 13 11:27:02 2020 +0000 Commit: Michał Górny gentoo org> CommitDate: Mon Jul 13 11:28:42 2020 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=1cdabc30 package.mask: Last rite mid-profile gentoo.org> profiles/base/package.use.mask | 4 ++++ profiles/package.mask | 31 +++++++++++++++++++++++++++++++ 2 files changed, 35 insertions(+) diff --git a/profiles/base/package.use.mask b/profiles/base/package.use.mask index b2a4e3c7e01..8b461fdca9c 100644 --- a/profiles/base/package.use.mask +++ b/profiles/base/package.use.mask @@ -6,6 +6,10 @@ # This file is only for generic masks. For arch-specific masks (i.e. # mask everywhere, unmask on arch/*) use arch/base. +# Michał Górny (2020-07-13) +# Requires vulnerable dev-python/pillow version. +sci-libs/scipy python_targets_python2_7 + # Thomas Deutschmann (2020-07-09) # media-video/pipewire:0/0.3 is currently masked www-client/firefox screencast diff --git a/profiles/package.mask b/profiles/package.mask index 9c135150911..79727bbb240 100644 --- a/profiles/package.mask +++ b/profiles/package.mask @@ -32,6 +32,37 @@ #--- END OF EXAMPLES --- +# Michał Górny (2020-07-13) +# These packages are mid-profile Python 2-only dependencies +# of dev-python/pillow. Since the last Pillow version to support +# Python 2 contains a number of unresolved vulnerabilities, these +# packages and old package versions are queued for removal. +# +# In more detail: +# - pyxplot has been last released in 2012 +# - pkpgcounter has been last released in 2007, and has seen only a few +# commits since 2009 +# - scipy has removed py2 support in 1.4 (py2 target in the old version +# is masked in profiles/base/package.use.mask) +# +# This list does not include two high-profile packages: +# - app-office/scribus whose py3 version is being currently stabilized +# - media-tv/kodi which has no py3 version at the moment +# +# Removal in 30 days. Bug #729672. + (2020-07-13) # Unmaintained. Last release from 2018, still does not support py3. # Removal in 30 days. Bug #732352.