package.mask: Last rite media-libs/adplug

Bug: https://bugs.gentoo.org/706346 Closes: gentoo#14443 Signed-off-by: David Seifert <[email protected]>
johu · Jan 25, 2020 · d27a9e3 · d27a9e3
1 parent 722799d
commit d27a9e3
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/profiles/package.mask b/profiles/package.mask
@@ -32,6 +32,16 @@
 
 #--- END OF EXAMPLES ---
 
+# David Seifert <[email protected]> (2020-01-25)
+# Upstream is mostly unresponsive and doesn't have the resources to
+# fix their code. Lots of bugs in the form of big endian issues, buffer
+# overflows, heap overflows, memory leaks and missing sanity checks.
+# Includes libbinio, which is only used by adplug and in a similarly poor
+# state. Multiple open CVEs, removal in 30 days. Bug #667170, #706346.
+media-libs/adplug
+dev-cpp/libbinio
+media-sound/adplay
+
 # Victor Payno <[email protected]> (2020-01-23)
 # Requires slotted lua.
 =dev-lang/lua-5.1.5-r103