commit: b39e7fe8e9e50ec8e24cb8b9f3db5334d3600aff Author: Matoro Mahri <matoro_gentoo <AT> matoro <DOT> tk> AuthorDate: Sat Jan 6 23:30:25 2024 +0000 Commit: John Helmert III <ajak <AT> gentoo <DOT> org> CommitDate: Sun Jan 7 00:39:10 2024 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b39e7fe8
profiles/arch/x86: mask <dev-lang/go-1.21 Bug: https://bugs.gentoo.org/919310 Bug: https://bugs.gentoo.org/921366 Signed-off-by: Matoro Mahri <matoro_gentoo <AT> matoro.tk> Signed-off-by: John Helmert III <ajak <AT> gentoo.org> profiles/arch/x86/package.mask | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/profiles/arch/x86/package.mask b/profiles/arch/x86/package.mask index 93882ec598d5..f6a6e9619706 100644 --- a/profiles/arch/x86/package.mask +++ b/profiles/arch/x86/package.mask @@ -1,6 +1,14 @@ -# Copyright 1999-2023 Gentoo Authors +# Copyright 1999-2024 Gentoo Authors # Distributed under the terms of the GNU General Public License v2 +# matoro <[email protected]> (2024-01-06) +# <dev-lang/go-1.{20.12,21.5} has multiple vulns (#919738): +# CVE-2023-39326, CVE-2023-45283, CVE-2023-45285 +# However cgo is broken for <dev-lang/go-1.21 on i386 (#921366) +# <net-p2p/kubo-0.23.0 depends on <dev-lang/go-1.21 (#912149) +<dev-lang/go-1.21 +<net-p2p/kubo-0.23.0 + # Andreas Sturmlechner <[email protected]> (2023-02-06) # Successful build of dev-qt/qtwebengine depends on 64-bit host # Bug #893234
