Additional packages found that were vulnerable including the main www-apps/
hord.  All packages in www-apps/horde* family will be removed 5 April 2016.

# Aaron Bauman <bman@gentoo.org> (05 Mar 2016)
# Per security bug #399563, #489946, #489948, and
# #490422 these packages are vulnerable
# and unmaintained.  Removal in 30 days.
www-apps/horde
www-apps/horde-chora
www-apps/horde-dimp
www-apps/horde-gollem
www-apps/horde-hermes
www-apps/horde-imp
www-apps/horde-ingo
www-apps/horde-jeta
www-apps/horde-kronolith
www-apps/horde-mimp
www-apps/horde-mnemo
www-apps/horde-nag
www-apps/horde-passwd
www-apps/horde-pear
www-apps/horde-turba

-- 
Cheers,
Aaron Bauman
Gentoo Linux Developer
GnuPG FP: 1536 F4B3 72EB 9C54 11F5  5C43 246D 23A2 10FB 0F3E