[gentoo-commits] repo/gentoo:master commit in: profiles/

["Sam James" <sam@gentoo.org>]

commit:     b8d345dfd9f4670b75e9b9bc1e4a583590c4fc8c
Author:     Sam James <sam <AT> gentoo <DOT> org>
AuthorDate: Sat Dec  7 11:24:18 2024 +0000
Commit:     Sam James <sam <AT> gentoo <DOT> org>
CommitDate: Sat Dec  7 11:26:46 2024 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b8d345df

profiles: mask =dev-lang/python-3.12.8 and =dev-lang/python-3.13.1

3.12.8 and 3.13.1 break Mozilla's build system `mach` which is used in
firefox, thunderbird, and spidermonkey. It's not clear if it's a CPython
bug or a Mozilla bug (I've informed both sides) but the CVEs fixed in
these security releases are rather minor indeed, especially when weighed
against those packages being unbuildable.

LLVM 19 and Rust 1.82.0 got stabled last night together with a default
change to LLVM 19 which means more users will hit this too as they have
to rebuild FF and friends.

Done as lesser of two evils after discussion w/ mgorny.

Bug: https://bugs.gentoo.org/945857
Bug: https://bugs.gentoo.org/945882
Bug: https://bugs.gentoo.org/946002
Bug: https://bugs.gentoo.org/945850
Bug: https://bugs.gentoo.org/945849
Bug: https://bugs.gentoo.org/945845
Signed-off-by: Sam James <sam <AT> gentoo.org>

 profiles/package.mask | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/profiles/package.mask b/profiles/package.mask
index 0f1c27b20895..776dda86d18e 100644
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -33,6 +33,12 @@
 
 #--- END OF EXAMPLES ---
 
+# Sam James <sam@gentoo.org> (2024-12-07)
+# Breaks Mozilla's build system `mach`: bug #945882, bug #945857, and bug #946002.
+# Upstream bug is at https://bugzilla.mozilla.org/show_bug.cgi?id=1935621.
+=dev-lang/python-3.12.8
+=dev-lang/python-3.13.1
+
 # Michał Górny <mgorny@gentoo.org> (2024-12-05)
 # 6.12.2 does not boot for me.
 =sys-kernel/gentoo-kernel-6.12.2