summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJames Le Cuirot <chewi@gentoo.org>2016-04-03 22:31:34 +0100
committerJames Le Cuirot <chewi@gentoo.org>2016-04-03 22:43:07 +0100
commitd9d98192ef0b77444fcf6f707854563f53332a67 (patch)
treeba5a344aeb56f14e849bef84e50e292f5fadf80b
parentdev-java/spymemcached: Remove optional dependence on Spring Framework (diff)
downloadgentoo-d9d98192ef0b77444fcf6f707854563f53332a67.tar.gz
gentoo-d9d98192ef0b77444fcf6f707854563f53332a67.tar.bz2
gentoo-d9d98192ef0b77444fcf6f707854563f53332a67.zip
profiles: Mask Spring Framework for the time being
3.2.4 is old, has multiple vulnerabilities, and we're not likely to update it soon. Hopefully we can revisit it when the Maven stuff works out.
-rw-r--r--profiles/package.mask10
1 files changed, 10 insertions, 0 deletions
diff --git a/profiles/package.mask b/profiles/package.mask
index 7c61cff79841..b10186cb8c9b 100644
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -30,6 +30,16 @@
#--- END OF EXAMPLES ---
+# James Le Cuirot <chewi@gentoo.org> (03 Apr 2016)
+# Masking Spring Framework for the time being as 3.2.4 is old, has
+# multiple vulnerabilities, and we're not likely to update it
+# soon. Hopefully we can revisit it when the Maven stuff works out.
+dev-java/spring-aop
+dev-java/spring-beans
+dev-java/spring-core
+dev-java/spring-expression
+dev-java/spring-instrument
+
# Andreas K. Hüttel <dilfridge@gentoo.org> (03 Apr 2016)
# Can exhaust all available memory depending on task
# but is made available for experts who heed this warning