From ced099c9abfde464b5c1ad0dcb2451a8c62c5e56 Mon Sep 17 00:00:00 2001
From: Andrew Savchenko <bircoph@gentoo.org>
Date: Sat, 9 Jul 2016 12:19:53 +0300
Subject: package.mask: update xcdroast p.mask

Only versions before app-cdr/xcdroast-0.98_alpha16-r2 are
vulnerable to bug 345337.
---
 profiles/package.mask | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/profiles/package.mask b/profiles/package.mask
index f6dbb68880ed..2506b9a93762 100644
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -30,6 +30,10 @@
 
 #--- END OF EXAMPLES ---
 
+# Andrew Savchenko <bircoph@gentoo.org> (09 Jul 2016)
+# Vulnerable due to wrong suid binary permissions (#345337)
+<app-cdr/xcdroast-0.98_alpha16-r2
+
 # Michael Palimaka <kensington@gentoo.org) (7 Jul 2016)
 # Requires obsolete kde-apps/kate:4. No further upstream development.
 # Masked for removal in 30 days.
@@ -219,11 +223,6 @@ app-portage/epm
 # Removal in a month.
 dev-libs/vdk
 
-# Pacho Ramos <pacho@gentoo.org> (12 Jun 2016)
-# Upstream dead for ages, multiple bugs (#345337)
-# Removal in a month.
-app-cdr/xcdroast
-
 # Pacho Ramos <pacho@gentoo.org> (12 Jun 2016)
 # No buildable version in the tree and nobody is taking care
 # of it (#349457). Removal in a month.
-- 
cgit v1.2.3-65-gdbad