From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 7CC121581E7 for ; Wed, 24 Apr 2024 07:46:12 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id AACE8E2A54; Wed, 24 Apr 2024 07:46:11 +0000 (UTC) Received: from smtp.gentoo.org (woodpecker.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 89015E2A54 for ; Wed, 24 Apr 2024 07:46:11 +0000 (UTC) Received: from oystercatcher.gentoo.org (oystercatcher.gentoo.org [148.251.78.52]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 84423343204 for ; Wed, 24 Apr 2024 07:46:10 +0000 (UTC) Received: from localhost.localdomain (localhost [IPv6:::1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id BF95D1590 for ; Wed, 24 Apr 2024 07:46:08 +0000 (UTC) From: "Sam James" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Sam James" Message-ID: <1713944705.59fb79180f9302050d7339234aa664197beeb0c6.sam@gentoo> Subject: [gentoo-commits] repo/gentoo:master commit in: profiles/ X-VCS-Repository: repo/gentoo X-VCS-Files: profiles/package.mask X-VCS-Directories: profiles/ X-VCS-Committer: sam X-VCS-Committer-Name: Sam James X-VCS-Revision: 59fb79180f9302050d7339234aa664197beeb0c6 X-VCS-Branch: master Date: Wed, 24 Apr 2024 07:46:08 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply X-Archives-Salt: 0039b7d4-f8a9-4920-ba98-6c3fb6796184 X-Archives-Hash: b6ad2df0352890238eb05be93f2f9110 commit: 59fb79180f9302050d7339234aa664197beeb0c6 Author: Sam James gentoo org> AuthorDate: Wed Apr 24 07:43:51 2024 +0000 Commit: Sam James gentoo org> CommitDate: Wed Apr 24 07:45:05 2024 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=59fb7918 profiles: tweak xz-utils mask syntax (same effect) * Tweak to use explicit ~ so it's clear which mask message affects which versions. * Make the message more explicit wrt 5.4.x vs 5.6.x. Signed-off-by: Sam James gentoo.org> profiles/package.mask | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/profiles/package.mask b/profiles/package.mask index 933860275903..630369576eeb 100644 --- a/profiles/package.mask +++ b/profiles/package.mask @@ -268,11 +268,14 @@ dev-python/nspektr games-sports/gracer # Sam James (2024-03-28) -# Newer releases were signed by a potentially compromised upstream maintainer. +# Newer 5.4.x releases were signed by a potentially compromised upstream maintainer. # There is no evidence that these releases contain malicious code, but masked # out of an abundance of caution. See bug #928134. sec-keys/openpgp-keys-jiatan ->=app-arch/xz-utils-5.4.3 +~app-arch/xz-utils-5.4.3 +~app-arch/xz-utils-5.4.4 +~app-arch/xz-utils-5.4.5 +~app-arch/xz-utils-5.4.6 # Sam James (2024-03-28) # Backdoor discovered in release tarballs. DOWNGRADE NOW.