path: root/profiles/package.mask

####################################################################
#
# When you add an entry to the top of this file, add your name, the date, and
# an explanation of why something is getting masked. Please be extremely
# careful not to commit atoms that are not valid, as it can cause large-scale
# breakage, especially if it ends up in the daily snapshot.
#
## Example:
##
## # Dev E. Loper <developer@gentoo.org> (28 Jun 2012)
## # Masking  these versions until we can get the
## # v4l stuff to work properly again
## =media-video/mplayer-0.90_pre5
## =media-video/mplayer-0.90_pre5-r1
#
# - Best last rites (removal) practices -
# Include the following info:
# a) reason for masking
# b) bug # for the removal (and yes you should have one)
# c) date of removal (either the date or "in x days")
#
## Example:
##
## # Dev E. Loper <developer@gentoo.org> (23 May 2015)
## # Masked for removal in 30 days.  Doesn't work
## # with new libfoo. Upstream dead, gtk-1, smells
## # funny. (bug #987654)
## app-misc/some-package

#--- END OF EXAMPLES ---

# David Seifert <soap@gentoo.org> (21 Apr 2019)
# Ancient, last release over 8 years ago, GTK2,
# broken USE=doc, multiple QA violations.
# Removal in 30 days.  Bug #636580, #683486.
dev-python/python-gtkmvc

# Lars Wendler <polynomial-c@gentoo.org> (21 Apr 2019)
# Masked for removal (bug #683926)
sys-libs/ntdb

# Alexys Jacob <ultrabug@gentoo.org> (20 Apr 2019)
# Unmaintained. Not active any more with latest release Jul 23, 2017.
# Does not build with recent openssl. Dropping useless python driver as well.
# Removal in 30 days.  Bug #597340, #674236.
dev-db/rethinkdb
dev-python/python-rethinkdb

# Alexys Jacob <ultrabug@gentoo.org> (20 Apr 2019)
# Unmaintained. Only version in portage has been EOL for a while.
# No strong user base or herd support. Breaks fuse-3.
# Removal in 30 days.  Bug #650256, #673672.
sys-cluster/moosefs

# David Seifert <soap@gentoo.org> (20 Apr 2019)
# Completely broken build system, massive maintenance
# burden, no new release since 2014.
# Removal in 30 days.  Bug #671432.
sci-biology/cufflinks

# James Le Cuirot <chewi@gentoo.org> (20 Apr 2019)
# Ancient and long dead upstream. Use app-emulation/fs-uae
# instead. Removal in 30 days. Bugs #432092, #602966.
app-emulation/uae
app-emulation/e-uae

# Miroslav Šulc <fordfrog@gentoo.org> (19 Apr 2019)
# Depends on >=virtual/{jdk,jre}-11 which is masked
=www-servers/tomcat-9.0.19

# David Seifert <soap@gentoo.org> (19 Apr 2019)
# Fails to build with >=dev-libs/boost-1.70 due to Boost.Signals1
# removal. No development, no maintenance, no homepage.
# Removal in 30 days.  Bug #683762.
sci-biology/blossoc
sci-biology/snpfile

# Georgy Yakovlev <gyakovlev@gentoo.org> (18 Apr 2019)
# This version is provided for testing of the upcoming 0.8.0 release.
# It is not recommended for use, it contains known bugs.
# This version supports TRIM.
=sys-fs/zfs-kmod-0.8.0_rc*
=sys-fs/zfs-0.8.0_rc*

# Michał Górny <mgorny@gentoo.org> (18 Apr 2019)
# Unmaintained.  Fails to build.  Last bumped in 2016, and no new
# releases since.  Still depends on dead app-text/htmltidy (#671442).
# No reverse dependencies.
# Removal in 30 days.  Bug #672886.
dev-libs/xqilla

# Michał Górny <mgorny@gentoo.org> (18 Apr 2019)
# Another NIH all-in-one library with no reverse dependencies.  Last
# bumped in 2015, with a broken patch.  Nobody reported this until
# tinderbox catched it, indicating that nobody is using this package.
# Removal in 30 days.  Bug #652632.
dev-cpp/rudiments

# Michał Górny <mgorny@gentoo.org> (18 Apr 2019)
# Unmaintained.  The current version does not build with modern versions
# of dev-libs/boost.  It is multiple releases behind upstream (1900
# commits according to GitHub).  With the pace of upstream development,
# it really needs a dedicated maintainer.
# Removal in 30 days.  Bug #629984.
dev-libs/quantlib

# Michał Górny <mgorny@gentoo.org> (18 Apr 2019)
# The packages are unmaintained.  GCCXML and pyplusplus were last bumped
# to snapshots from 2013 (pygccxml was bumped in 2016).  GCCXML bundles
# old GCC sources (4.8, most likely). In the meantime, upstream has
# discontinued it in favor of CastXML (which uses clang).  GCCXML fails
# tests (#629986), so does pyplusplus (#656348).  No reverse
# dependencies outside the three packages.
# Removal in 30 days.  Bug #683748.
dev-cpp/gccxml
dev-python/pygccxml
dev-python/pyplusplus

# Michał Górny <mgorny@gentoo.org> (18 Apr 2019)
# Diverged too far from upstream Portage, and I don't have time anymore
# to update or rebase it.  The most significant features were merged
# back upstream, some more are waiting, the rest is customization
# and some aggressive QA bits.  Use sys-apps/portage instead.
# Removal in 30 days.  Bug #683744.
sys-apps/portage-mgorny

# Michał Górny <mgorny@gentoo.org> (18 Apr 2019)
# All current versions of SystemRescueCD contain vulnerable packages.
# Bug #683724.
app-admin/systemrescuecd-x86
sys-boot/systemrescuecd-x86-grub

# Georgy Yakovlev <gyakovlev@gentoo.org> (17 Apr 2019)
# The Oracle JDK License has changed for releases starting April 16, 2019
# While it may be fine to use for some usecases it's not comepletely clear
# what is considered "personal use" and if we can legally distribute it.
# License states:
# "You may not:
# make the Programs available in any manner to any third party"
# masking all future versions, removal will follow soon.
# Alternatives: icedtea, icedtea-bin, openjdk, openjdk-bin, openjdk-jre-bin
# Bug: https://bugs.gentoo.org/681828
>dev-java/oracle-jdk-bin-1.8.0.202:1.8
>dev-java/oracle-jre-bin-1.8.0.202:1.8

# Hans de Graaff <graaff@gentoo.org> (15 Apr 2019)
# Old, ruby24-only, slots of ruby packages without any reverse
# dependencies. Use the newer slot version instead.
# Masked for removal in 30 days.
dev-ruby/elasticsearch:5
dev-ruby/elasticsearch-api:5
dev-ruby/elasticsearch-transport:5
dev-ruby/filesize:0.0.1
dev-ruby/hiera-eyaml:0
dev-ruby/jsobfu:0.3.0
dev-ruby/mocha:0.10
dev-ruby/rack-attack:0
dev-ruby/rack-ssl:1.3
dev-ruby/rack-test:0.7
dev-ruby/rack-test:0.8
dev-ruby/ruby_smb:0.0.23
dev-ruby/ruby_smb:0
dev-ruby/slop:3
dev-ruby/temple:0
dev-ruby/ttfunk:1.2
dev-ruby/ttfunk:1.4
dev-util/cucumber-core:3.0
dev-util/cucumber-core:3.1
dev-util/cucumber-expressions:4.0
dev-util/cucumber-expressions:5.0


# David Seifert <soap@gentoo.org> (15 Apr 2019)
# Masked for testing, Bug #653878.
>=dev-libs/boost-1.70.0
>=dev-util/boost-build-1.70.0
>=net-mail/libpst-0.6.66-r2

# Patrice Clement <monsieurp@gentoo.org> (14 Apr 2019)
# Old, unmaintained and sometimes abandoned Java libraries/programs.
# Removal in 30 days.
dev-java/idm-console-framework
dev-java/matrix-toolkits-java
dev-java/sat4j-pseudo
dev-java/sat4j-core
dev-java/swarmcache
dev-java/dbus-java
dev-java/jinklevel
dev-java/proguard
dev-java/nailgun
dev-java/jgroups
dev-java/libmso
dev-java/jicmp
media-sound/jtagger
app-admin/389-console

# Michał Górny <mgorny@gentoo.org> (14 Apr 2019)
# The ebuild violates EAPI and relies on STRIP_MASK.  The default
# behavior makes it capable of executing arbitrary commands when running
# files from untrusted sources.  Last maintainer activity in 2015.  Last
# upstream release in 2011.
# Removal in 30 days.  Bug #651430.
app-text/active-dvi

# Michał Górny <mgorny@gentoo.org> (14 Apr 2019)
# The ebuild violates EAPI and relies on STRIP_MASK.  Also has
# suspicious USE=debug logic.  Not touched since 2016.
# Removal in 30 days.  Bug #651450.
dev-util/cyclo

# Michał Górny <mgorny@gentoo.org> (14 Apr 2019)
# The ebuild violates EAPI and relies on STRIP_MASK.  Also has
# suspicious USE=debug logic.  Not touched since 2016.
# Removal in 30 days.  Bug #651446.
dev-util/cccc

# Michał Górny <mgorny@gentoo.org> (14 Apr 2019)
# Integrated into dev-python/python-ldap-3.0+, and declared a deprecated
# fork by upstream.  No reverse dependencies left.
# Removal in 30 days.  Bug #668066.
dev-python/pyldap

# Aaron Bauman <bman@gentoo.org> (13 Apr 2019)
# Unmaintained in Gentoo and outstanding vulnerability
# Masked for removal in 30 days. Bug #522578
dev-libs/ace
net-proxy/bfilter

# Ulrich Müller <ulm@gentoo.org> (13 Apr 2019)
# Last release in 2001, HOMEPAGE and SRC_URI are gone.
# Byte-compilation with recent Emacs versions fails.
# Masked for removal in 30 days, bug #683248.
app-emacs/prom-wl

# Michał Górny <mgorny@gentoo.org> (13 Apr 2019)
# Unmaintained.  Contains vulnerable code and a large number of unsolved
# (upstream) issues.  The current version is from 2004, and carries
# some local patches.  Last upstream commits are from 2013, and involve
# three successive branches, the 0.7.x not having a release since 2004,
# and the two remaining branches never seeing a single release.
# The suggested alternatives are net-analyzer/{netcat,openbsd-netcat}.
# Removal in 30 days.  Bug #601742.
net-analyzer/gnu-netcat

# Michał Górny <mgorny@gentoo.org> (13 Apr 2019)
# net-libs/ftplib: Unmaintained.  The ebuild suffers build failures due
# to broken multilib conversion.  Last bumped in 2014, and needs local
# patches to even work.  Obscure library with only two revdeps.
#
# media-video/hasciicam: Unmaintained.  The only unconditional revdep
# of ftplib.  Upstream's FTP is down, and the current release is
# no newer than 2011.  Upstream removed ftplib usage afterwards,
# so a snapshot could help.
#
# Removal in 30 days.  Bug #520026.
media-video/hasciicam
net-libs/ftplib

# Michał Górny <mgorny@gentoo.org> (13 Apr 2019)
# Unmaintained.  Does not build (again).  Last release in 2000.  Carries
# a large number of patches already.
# Removal in 30 days.  Bug #637484.
net-misc/netkit-rwho

# Michał Górny <mgorny@gentoo.org> (13 Apr 2019)
# Apparently this was last updated in 2012.  It's unclear if the proxied
# maintainer actually ever maintained it since it was imported in 2010.
# The HOMEPAGE is now empty.  app-admin/pass is a good alternative.
# Removal in 30 days.  Bug #682914.
app-crypt/sgeps

# Hans de Graaff <graaff@gentoo.org> (13 Apr 2019)
# Old ruby24-only slots of Rails-related packages
# These no longer have reverse dependencies or newer
# versions are available.
# Masked for removal in 30 days.
dev-ruby/arel:7.0
dev-ruby/coffee-rails:4.1
dev-ruby/d3_rails:0
dev-ruby/i18n:0.6
dev-ruby/i18n:0.8
dev-ruby/mail:2.6
dev-ruby/mysql2:0.3
dev-ruby/sprockets-rails:2.3
dev-ruby/uglifier:0
dev-ruby/uglifier:3

# Hans de Graaff <graaff@gentoo.org> (13 Apr 2019)
# No longer maintained upstream. Does not work
# with ruby25.
# Masked for removal in 30 days.
dev-ruby/celluloid
dev-ruby/celluloid-essentials
dev-ruby/celluloid-extras
dev-ruby/celluloid-fsm
dev-ruby/celluloid-io
dev-ruby/celluloid-pool
dev-ruby/celluloid-supervision

# Aaron Bauman <bman@gentoo.org> (12 Apr 2019)
# Multiple security vulnerabilities
# No revbumps in several years.
# Removal in 30 days. Bug #675682
dev-java/jackson-databind
app-text/languagetool
app-vim/languagetool
dev-java/jackson-dataformat-xml
dev-java/jackson-dataformat-yaml
dev-java/jackson-module-jaxb-annotations

# Virgil Dupras <vdupras@gentoo.org> (12 Apr 2019)
# Dead upstream, no revdeps.
# Removal in 30 days. Bug #683146
dev-python/readme

# Georgy Yakovlev  (11 Apr 2019)
# Rust provides zsh completion.
# This one is old, unmaintained obsolete version.
# Removal in 30 days.
app-shells/rust-zshcomp

# Michał Górny <mgorny@gentoo.org> (10 Apr 2019)
# Unresolved vulnerability.  Last apparent upstream activity in 2015,
# with the code last touched in 2010.  Local patches are already
# necessary for it to build.
# Removal in 30 days.  Bug #630254.
media-sound/aacplusenc

# Michał Górny <mgorny@gentoo.org> (10 Apr 2019)
# Fails to build for more than 3 years.  The project has been abandoned
# upstream, with the current (and last) release made in 2010.
# The author itself suggests media-gfx/eog as a replacement, though
# there is a plenty of other image viewers worth considering.
# Removal in 30 days.  Bug #561392.
media-gfx/gliv

# Michał Górny <mgorny@gentoo.org> (09 Apr 2019)
# Obsolete XFCE library with its remaining dependencies.  In all cases,
# the relevant plugins have been abandoned upstream and the upstream
# repository is dead or not to be found.  All of them are unlikely
# to be ported away from libxfcegui4 and/or into GTK+3.
# Removal in 30 days.  Bug #590306.
xfce-base/libxfcegui4
xfce-extra/xfce4-gvfs-mount
xfce-extra/xfce4-linelight-plugin
xfce-extra/xfce4-messenger-plugin
xfce-extra/xfce4-modemlights-plugin

# Michał Górny <mgorny@gentoo.org> (09 Apr 2019)
# Marked deprecated upstream.  Still uses xfce-base/libxfcegui4.
# Unlikely to be ported to GTK+3.
# Removal in 30 days.  Bug #682956.
app-text/xfbib

# Michał Górny <mgorny@gentoo.org> (09 Apr 2019)
# Marked deprecated upstream.  Uses xfce-base/libxfcegui4.  Unlikely
# to be ported to GTK+3.
# Removal in 30 days.  Bug #682954.
xfce-extra/xfce4-cellmodem-plugin

# Michał Górny <mgorny@gentoo.org> (09 Apr 2019)
# Marked deprecated upstream.  Uses xfce-base/libxfcegui4.  Unlikely
# to be ported to GTK+3.  Still uses xfconf.eclass.
# Removal in 30 days.  Bug #682950.
xfce-extra/xfswitch-plugin

# Michał Górny <mgorny@gentoo.org> (09 Apr 2019)
# Unofficial plugin abandoned upstream.  The only release is from 2014,
# last commits are from 2015.  Little chances of porting to GTK+3.
# Still uses xfconf.eclass.
# Removal in 30 days.  Bug #682940.
xfce-extra/xfce4-soundmenu-plugin

# Michał Górny <mgorny@gentoo.org> (09 Apr 2019)
# Marked deprecated upstream.  Uses xfce-base/libxfcegui4.  Little
# chances of porting to GTK+3.  Still uses xfconf.eclass.
# Removal in 30 days.  Bug #682938.
xfce-extra/xfce4-wmdock-plugin

# Michał Górny <mgorny@gentoo.org> (09 Apr 2019)
# Marked as deprecated upstream.  Does not build against modern kernels.
# Little chances of GTK+3 port.  Still uses xfconf.eclass.
# Removal in 30 days.  Bug #604134.
xfce-extra/xfce4-radio-plugin

# Michał Górny <mgorny@gentoo.org> (09 Apr 2019)
# Marked as deprecated upstream.  Little chances of GTK+3 port.
# Still uses xfconf.eclass.
# Removal in 30 days.  Bug #682934.
xfce-extra/xfce4-quicklauncher-plugin

# Michał Górny <mgorny@gentoo.org> (09 Apr 2019)
# Unofficial panel plugin whose upstream disappeared and sources are
# nowhere to be found.  Possibly does not even work (#499156).
# Unlikely to be ported to GTK+3.  Still uses xfconf.eclass.
# Removal in 30 days.  Bug #682930.
xfce-extra/xfce4-playercontrol-plugin

# Michał Górny <mgorny@gentoo.org> (09 Apr 2019)
# Unofficial panel plugin that has been abandoned upstream.
# Last activity in 2013.  Unlikely to be ported to GTK+3.  Ebuild still
# uses xfconf.eclass.
# Removal in 30 days.  Bug #682928.
xfce-extra/xfce4-netspeed-plugin

# Hans de Graaff <graaff@gentoo.org> (8 Apr 2019)
# Ruby 2.3 is no longer maintained and only receives security patches
# until March 2019. Please use Ruby 2.4 or newer instead.
# Masked for removal in 30 days
dev-lang/ruby:2.3
dev-ruby/did_you_mean:1

# Zac Medico <zmedico@gentoo.org> (04 Apr 2019)
# Ebuild is not needed since consumers use EGO_VENDOR.
# Removal in 30 days.  Bug #656972.
dev-go/go-resiliency

# Michał Górny <mgorny@gentoo.org> (03 Apr 2019)
# Does not build with ncurses[tinfo].  The current version is from 2004,
# and it seems to have been abandoned upstream.
# Removal in 30 days.  Bug #678866.
games-roguelike/zangband

# Michał Górny <mgorny@gentoo.org> (03 Apr 2019)
# Unmaintained.  Multiple unresolved build failures (#630280, #638618,
# #639648).  The current version was added in 2012, and haven't been
# bumped since.  Upstream has released 1.0.0 in 2016 (#638464).
# Removal in 30 days.  Bug #682402.
dev-libs/blitz

# Michał Górny <mgorny@gentoo.org> (03 Apr 2019)
# Bundles dev-libs/rapidjson.  Fails to build with gcc-6+.  The packaged
# version is from 2015, and needs bump for almost 2 years.
# Removal in 30 days.  Bug #580358.
dev-libs/handystats

# Michał Górny <mgorny@gentoo.org> (03 Apr 2019)
# Does not build against ffmpeg-4.  Last release in 2012.  Last upstream
# commits in 2017.
# Removal in 30 days.  Bug #673826.
media-plugins/vdr-markad

# Virgil Dupras <vdupras@gentoo.org> (31 Mar 2019)
# Unmaintained, no revdeps.
# Removal in 30 days. Bug #616596
dev-python/statistics
dev-python/reverend

# Michał Górny <mgorny@gentoo.org> (31 Mar 2019)
# Unmaintained.  Broken with new openssl (#674192) and new glibc
# (#643460).  Last upstream beta release in 2002.  Carries ever-growing
# pile of patches.  No reverse dependencies.
# Removal in 30 days.  Bug #674192.
net-analyzer/dsniff

# Michał Górny <mgorny@gentoo.org> (31 Mar 2019)
# Unmaintained.  The current snapshot was added by a non-maintainer to
# stop blocking Qt4 removal.  Fails to build with new glibc.
# Last upstream release in 2015, latest commits mid-2018.
# No reverse dependencies.
# Removal in 30 days.  Bug #656096.
sci-chemistry/ball

# Michał Górny <mgorny@gentoo.org> (31 Mar 2019)
# Undermaintained.  Fails to build with new glibc (#638048), OpenGL
# headers (#516292).  Missing dependencies (#586186).  No reverse
# dependencies.
# Removal in 30 days.  Bug #638048.
sci-biology/arb

# Michał Górny <mgorny@gentoo.org> (31 Mar 2019)
# Unmaintained.  Still broken with new glibc.  Carries a lot of local
# patches.  Last upstream release in 2011, with a few commits in git
# since.  The only revdep is app-admin/rsyslog[grok].
# Removal in 30 days.  Bug #660332.
dev-libs/grok

# Michał Górny <mgorny@gentoo.org> (31 Mar 2019)
# Unmaintained.  Needs bump.  The current Gentoo version is from 2004,
# with last upstream release in 2015.  Carries local patches and hacks
# to even build.  Has format-security warnings.
# Removal in 30 days.  Bug #532502.
net-ftp/weex

# Aaron Bauamn <bman@gentoo.org> (29 Mar 2019)
# Longstanding security vulnerabilities
# No upstream releases in years
# Removal in 30 days. Bug #650888
media-gfx/swftools

# Michał Górny <mgorny@gentoo.org> (29 Mar 2019)
# Unmaintained.  Fails to build with ncurses[tinfo]; fixing it reveals
# further build failures.  Last release in 2001.  Upstream has shortly
# revived coding in 2015 but did not finish the update.
# Removal in 30 days.  Bug #617184.
media-sound/playmidi

# Michał Górny <mgorny@gentoo.org> (29 Mar 2019)
# Unmaintained.  The current version was added in 2008, and a bump
# was requested in 2010.  Since then, upstream has disappeared,
# and the tool requires fetching extra files from the upstream website.
# Removal in 30 days.  Bug #305121.
media-video/episoder

# Robin H. Johnson <robbat2@gentoo.org> (25 Mar 2019)
# Requires >=dev-lang/lua-5.3 which is masked
sys-apps/likwid

# Michael Haubenwallner <haubi@gentoo.org> (25 Mar 2019)
# Obsolete, in favor of app-portage/prefix-toolkit.
# Removal in 30 days.  Bug #658572
app-portage/prefix-chain-setup
sys-apps/prefix-chain-utils

# Michał Górny <mgorny@gentoo.org> (23 Mar 2019)
# Unmaintained.  Fails to build against current sys-auth/libfprint.
# Obsoleted upstream, in favor of libfprint[examples].
# Removal in 30 days.  Bug #665174.
sys-auth/fprint_demo

# Michał Górny <mgorny@gentoo.org> (23 Mar 2019)
# Unmaintained.  Fails to build due to patch that does not apply.
# Even if that weren't the case, it would need to be updated for modern
# kernel versions.
# Removal in 30 days.  Bug #663180.
sys-power/phc-intel

# Michał Górny <mgorny@gentoo.org> (23 Mar 2019)
# Unmaintained.  Fails to build, probably due to Linux kernel changes.
# Removal in 30 days.  Bug #646806.
net-misc/batman-adv

# Michał Górny <mgorny@gentoo.org> (23 Mar 2019)
# Unmaintained.  Fails to build against ncurses[tinfo].  Last upstream
# release in 2009.  No apparent fix in upstream git.
# Removal in 30 days.  Bug #646922.
app-editors/efte

# Michał Górny <mgorny@gentoo.org> (23 Mar 2019)
# Unmaintained.  Vulnerable.  Fails to build (#612236, #620916).
# Removal in 30 days.  Bug #670028.
app-misc/freeplane

# Michał Górny <mgorny@gentoo.org> (23 Mar 2019)
# Unmaintained.  No reverse dependencies.  Fails to link.  Last upstream
# activity in 2012.
# Removal in 30 days.  Bug #632066.
dev-cpp/libassa

# Michał Górny <mgorny@gentoo.org> (23 Mar 2019)
# Unmaintained and ancient.  Upstream has abandoned the PAR 2.0 spec
# effort in 2003-2004, and the code has not seen any attention since.
# Removal in 30 days.  Bug #681364.
app-arch/par

# Michał Górny <mgorny@gentoo.org> (23 Mar 2019)
# No maintainer.  Both the program and the ebuild are of bad quality,
# the former requiring a patch and the latter failing to build in some
# circumstances.  Last upstream activity in 2005.
# Removal in 30 days.  Bug #456954.
app-benchmarks/gtkperf

# Andreas Sturmlechner <asturm@gentoo.org> (23 Mar 2019)
# Everything breaks again. bug #681336
>=app-text/poppler-0.75.0

# Miroslav Šulc <fordfrog@gentoo.org> (19 Mar 2019)
# Depends on >=virtual/{jdk,jre}-11 which is masked
=www-servers/tomcat-9.0.17

# Sobhan Mohammadpour <sobhan@gentoo.org> (17 Mar 2019)
# Masked for testing
=mail-client/geary-3.32.0-r1

# Matt Turner <mattst88@gentoo.org> (16 Mar 2019)
# Previously packaged drivers, now removed from Gentoo.
# Keep this mask in place so users are aware, but can also easily unmask them
# in an overlay if so desired.
x11-drivers/xf86-input-citron
x11-drivers/xf86-video-apm
x11-drivers/xf86-video-ark
x11-drivers/xf86-video-chips
x11-drivers/xf86-video-cirrus
x11-drivers/xf86-video-cyrix
x11-drivers/xf86-video-i128
x11-drivers/xf86-video-i740
x11-drivers/xf86-video-impact
x11-drivers/xf86-video-mach64
x11-drivers/xf86-video-neomagic
x11-drivers/xf86-video-newport
x11-drivers/xf86-video-nsc
x11-drivers/xf86-video-rendition
x11-drivers/xf86-video-s3
x11-drivers/xf86-video-s3virge
x11-drivers/xf86-video-savage
x11-drivers/xf86-video-sis
x11-drivers/xf86-video-sisusb
x11-drivers/xf86-video-sunbw2
x11-drivers/xf86-video-suncg14
x11-drivers/xf86-video-suncg3
x11-drivers/xf86-video-suncg6
x11-drivers/xf86-video-sunffb
x11-drivers/xf86-video-sunleo
x11-drivers/xf86-video-suntcx
x11-drivers/xf86-video-tdfx
x11-drivers/xf86-video-tga
x11-drivers/xf86-video-trident
x11-drivers/xf86-video-tseng
x11-drivers/xf86-video-voodoo

# Eray Aslan <eras@gentoo.org> (01 Mar 2019)
# Mask experimental software
=mail-mta/postfix-3.5*

# Dennis Lamm <expeditioneer@gentoo.org> (29 Jan 2019)
# Depends on >=app-text/enchant-2.0.0 which is masked
=gnome-extra/gtkhtml-4.10.0-r1

# Dennis Lamm <expeditioneer@gentoo.org> (28 Jan 2019)
# Depends on >=app-text/enchant-2.0.0 which is masked
>=app-text/gtkspell-3.0.10

# Dennis Lamm <expeditioneer@gentoo.org> (28 Jan 2019)
# Depends on >=app-text/enchant-2.1.3 which is masked
>=app-text/gspell-1.8.1

# Miroslav Šulc <fordfrog@gentoo.org> (23 Jan 2019)
# Depends on >=virtual/{jdk,jre}-11 which is masked
=dev-java/ant-eclipse-ecj-4.10
=dev-java/eclipse-ecj-4.10
=www-servers/tomcat-9.0.14

# Craig Andrews <candrews@gentoo.org> (1 Jan 2019)
# Requires dev-libs/openssl-1.1.1, Bug 674148
dev-libs/gost-engine

# Lars Wendler <polynomial-c@gentoo.org> (28 Dec 2018)
# Masked while being tested and reverse deps aren't fully compatible
=dev-libs/openssl-1.1.1*

# Hanno Boeck <hanno@gentoo.org (23 Dec 2018)
# Needs new OpenSSL, should be unmasked together with
# OpenSSL 1.1.1
>=app-crypt/osslsigncode-2.0

# Thomas Deutschmann <whissi@gentoo.org> (10 Dec 2018)
# Requires >=dev-lang/lua-5.2 which is masked
>=app-admin/lsyncd-2.2.3

# Andreas Sturmlechner <asturm@gentoo.org> (25 Nov 2018)
# Masked per security vulnerability CVE-2018-14345, bug #661510
# Keeping it masked while users have unsolved issues with >0.15.0.
<x11-misc/sddm-0.18.0

# Ian Stakenvicius <axs@gentoo.org> (07 Nov 2018)
# on behalf of Mozilla Project <mozilla@gentoo.org>
# Mask old/vuln thunderbird for removal by 2019,
# see security bug 670102
<mail-client/thunderbird-60.0
<mail-client/thunderbird-bin-60.0

# Brian Evans <grknight@gentoo.org> (05 Nov 2018)
# Causes a dependency loop in the OpenRC script. Bug #651998
=sys-fs/cryptsetup-2.0.5-r1

# Aaron W. Swenson <titanofold@gentoo.org> (25 Oct 2018)
# Fails to build against up to date OpenSSL library (Bug 663966). No longer
# supported upstream. Use dev-db/pgadmin4.
# Masked for removal on 2018-11-24, bug #669650.
dev-db/pgadmin3

# Lars Wendler <polynomial-c@gentoo.org> (22 Oct 2018)
# Breaks dev-libs/gobject-introspection and its consumers
# See #669278
=xfce-base/xfconf-4.13.6

# Thomas Deutschmann <whissi@gentoo.org> (12 Oct 2018)
# EOL and has known vulnerabilities. Please move to
# Firefox 60 or newer if you can.
<www-client/firefox-60
<www-client/firefox-bin-60

# Andreas Sturmlechner <asturm@gentoo.org> (07 Oct 2018)
# Masked for more testing especially of reverse-deps.
>=dev-games/ogre-1.11.2

# Thomas Deutschmann <whissi@gentoo.org> (06 Oct 2018)
# Outdated and vulnerable snapshot; libav-12.3 is the better
# version for now
=media-video/libav-13_pre20171219

# Michał Górny <mgorny@gentoo.org> (24 Sep 2018)
# Apparently breaks sys-devel/gcc.  Bug #666954.
=dev-util/debugedit-4.14.2

# Andreas K. Hüttel <dilfridge@gentoo.org> (11 Sep 2018)
# Mask transition ebuilds that were needed only for <glibc-2.26
# We will keep them in the tree as long as we have masked
# <glibc-2.26.
~net-libs/libnsl-0
~net-libs/rpcsvc-proto-0

# Bernard Cafarelli <voyageur@gentoo.org> (13 Aug 2018)
# Beta release with new features, masked for testing
=app-text/tesseract-4.0.0_beta*

# Michał Górny <mgorny@gentoo.org> (01 Aug 2018)
# Multiprocessing versions of gemato.  They are known to hang on some
# users, so let's keep them masked until somebody figures out what's
# wrong.  Bug #647964.
~app-portage/gemato-14.0m
~app-portage/gemato-9999m

# Kent Fredric <kentnl@gentoo.org> (27 May 2018)
# Subject to Man-in-the-middle security bypass vulnerability.
# Retained in tree only for users who need older versions
# for compatibility reasons.
# Bug: #623942
<dev-perl/DBD-mysql-4.44.0

# Matt Turner <mattst88@gentoo.org> (25 May 2018)
# New package. Needs to interact with media-libs/mesa and
# x11-drivers/nvidia-drivers. Work in progress.
media-libs/libglvnd

# Aaron Bauman <bman@gentoo.org> (30 Apr 2018)
# Masked for testing. Will implement more of the 1.1 API
# Which will require patch updates across the tree
=dev-libs/libressl-2.9*

# Brian Evans <grknight@gentoo.org> (20 Apr 2018)
# Likely to break a lot of software
# Masked for initial testing
>=dev-db/mysql-connector-c++-8.0.0

# James Le Cuirot <chewi@gentoo.org> (17 Dec 2017)
# Java 9+ is not yet fully supported on Gentoo. Packages cannot depend
# on it so these virtuals are not yet required. If you wish to use
# Java 9+ then install oracle-(jdk|jre)-bin or openjdk(-bin) directly.
virtual/jdk:11
virtual/jre:11

# Andreas K. Hüttel <dilfridge@gentoo.org> (18 Oct 2017)
# sys-devel/automake versions 1.4, 1.5, 1.6, 1.7, 1.8
# have known security vulnerabilities, are broken with
# recent Perl (>=5.26.0), and are not used by anything in
# the Gentoo repository. Please uninstall.
sys-devel/automake:1.4
sys-devel/automake:1.5
sys-devel/automake:1.6
sys-devel/automake:1.7
sys-devel/automake:1.8

# Kent Fredric <kentnl@gentoo.org> (11 Oct 2017)
# This package should now be provided entirely by dev-lang/perl,
# stable perl 5.24 provides Unicode-Collate-1.140.0
# testing perl 5.26 provides Unicode-Collate-1.190.0
# This should only be unmasked if you're locking to perl-5.24 and need
# a newer version of virtual/perl-Unicode-Collate
# If you're upgrading to perl-5.26, please do:
#   emerge -C perl-core/Unicode-Collate
# See bug #634040
<perl-core/Unicode-Collate-1.190.0-r99

# Patrice Clement <monsieurp@gentoo.org> (09 Sep 2017)
# Python 3 port is almost complete with version 0.6.0. Users might run into
# minor bumps here and there which is why the mask is still in place for the
# time being.
>=dev-java/javatoolkit-0.6.0

# Gilles Dartiguelongue <eva@gentoo.org> (04 Sep 2017)
# Incompatible changes in API in Enchant 2. Bug #629838.
>=app-text/enchant-2

# Sébastien Fabbro <bicatali@gentoo.org> (19 Aug 2017)
# ipython-6 is python-3 only and causes circular dependencies
# Unset python_targets_python2_7 for ipykernel and ipyparallel if needed.
>=dev-python/ipython-6

# Kent Fredric <kentnl@gentoo.org> (21 Jul 2017)
# Masked due to serious regression that introduces widespread data
# corruption when storing data in blobs. Masked, because any code
# that is written to use this version is now dependent on this version
# and older versions will corrupt your code instead.
# However, any existing packages should not use this version.
# See: https://github.com/perl5-dbi/DBD-mysql/issues/117
=dev-perl/DBD-mysql-4.42.0

# Nicolas Bock <nicolasbock@gentoo.org> (31 Oct 2017)
# There are multiple unresolved upstream issues with >=jabref-bin-4.0 (#636036).
# If you still would like to use this version, please report any issues to
# upstream.
>=app-text/jabref-bin-4.0

# Hans de Graaff <graaff@gentoo.org> (05 Jun 2017)
# Bundles obsolete and vulnerable webkit version.
# Upstream has stopped development and recommends using
# headless mode in >=www-client/chromium-59.
# Masked for removal in 90 days. Bug #589994.
www-client/phantomjs
dev-ruby/poltergeist

# Michał Górny <mgorny@gentoo.org> (22 May 2017)
# for Maciej S. Szmigiero <mail@maciej.szmigiero.name>
# Any version above 5.100.138 breaks b43 driver in various ways.
# Also, b43 wiki page says to use 5.100.138. Bug #541080.
>=sys-firmware/b43-firmware-6.30.163.46

# Michał Górny <mgorny@gentoo.org>, Andreas K. Hüttel <dilfridge@gentoo.org>,
# Matthias Maier <tamiko@gentoo.org> (21 May 2017 and later updates)
# These old versions of toolchain packages (binutils, gcc, glibc) are no
# longer officially supported and are not suitable for general use. Using
# these packages can result in build failures (and possible breakage) for
# many packages, and may leave your system vulnerable to known security
# exploits.
# If you still use one of these old toolchain packages, please upgrade (and
# switch the compiler / the binutils) ASAP. If you need them for a specific
# (isolated) use case, feel free to unmask them on your system.
<sys-devel/gcc-5.4
<sys-libs/glibc-2.27
<sys-devel/binutils-2.30-r2
<sys-libs/binutils-libs-2.30-r2

# Michał Górny <mgorny@gentoo.org> (20 May 2017)
# Old versions of CUDA and their reverse dependencies. They do not
# support GCC 5+, and are really old.
# (updated 27 Dec 2017 with cuda < 8 because of gcc < 5 mask)
<dev-python/pycuda-2016
<dev-util/nvidia-cuda-sdk-8
<dev-util/nvidia-cuda-toolkit-8
net-wireless/cpyrit-cuda

# Mart Raudsepp <leio@gentoo.org> (16 Feb 2017)
# Old gstreamer 0.10 version, which is security vulnerable.
# Use gstreamer:1.0 with media-plugins/gst-plugins-libav
# instead (despite the name, it uses media-video/ffmpeg too).
# Please keep this mask entry until gstreamer:0.10 is still
# in tree or at least gets an affecting GLSA from bug 601354
# Bug #594878.
media-plugins/gst-plugins-ffmpeg

# Kent Fredric <kentnl@gentoo.org> (04 Feb 2017)
# Unsecure versions that have been only restored to tree
# to resolve compatibility problems with mail-filter/amavisd-new
# Use with caution due to these being removed for CVE-2016-1251
# Bug: #601144
# Bug: #604678
<dev-perl/DBD-mysql-4.41.0

# Michael Orlitzky <mjo@gentoo.org> (07 Jan 2017)
# This package has some dangerous quality and security issues, but
# people may still find it useful. It is masked to prevent accidental
# use. See bugs 603346 and 604998 for more information.
app-admin/amazon-ec2-init

# Robin H. Johnson <robbat2@gentoo.org> (05 Jan 2017)
# Masking for testing
=app-emulation/ganeti-2.16*
=app-emulation/ganeti-2.17*

# Michał Górny <mgorny@gentoo.org> (17 Nov 2016)
# New version masked for testing. It supports source-window buffer size
# over 2G but it 'currently performs 3-5% slower and has 1-2% worse
# compression'.
>=dev-util/xdelta-3.1.0

# Tim Harder <radhermit@gentoo.org> (03 Nov 2016)
# Masked for testing
=sys-fs/fuse-3*
=net-fs/sshfs-3*

# Andreas K. Hüttel <dilfridge@gentoo.org> (03 Apr 2016)
# Can exhaust all available memory depending on task
# but is made available for experts who heed this warning
# as newer versions produce different output. Contact
# the proxied maintainer Matthew Brewer <tomboy64@sina.cn>
# for questions.
<=media-gfx/slic3r-1.1.9999

# Robin H. Johnson <robbat2@gentoo.org> (04 Aug 2014)
# Masked for testing, presently fails upstream testsuite:
# FAIL:07:02:35 (00:00:00) db_dump/db_load(./TESTDIR.3/recd001.db:child killed: kill signal): expected 0, got 1
# FAIL:07:02:35 (00:00:00) Dump/load of ./TESTDIR.3/recd001.db failed.
# FAIL:07:02:35 (00:00:00) db_verify_preop: expected 0, got 1
# Lars Wendler <polynomial-c@gentoo.org> (25 Jan 2019)
# Also masked because of mostly incompatible license (AGPL-3)
=sys-libs/db-6.1*
=sys-libs/db-6.2*
=sys-libs/db-18.1*

# Ulrich Müller <ulm@gentoo.org> (15 Jul 2014)
# Permanently mask sys-libs/lib-compat and its reverse dependencies,
# pending multiple security vulnerabilities and QA issues.
# See bugs #515926 and #510960.
sys-libs/lib-compat
sys-libs/lib-compat-loki
games-action/mutantstorm-demo
games-action/phobiaii
games-fps/rtcw
games-fps/unreal
games-strategy/heroes3
games-strategy/smac

# Mikle Kolyada <zlogene@gentoo.org> (27 Jun 2014)
# Masked for proper testing. (Major updates in the code).
~dev-perl/PortageXS-0.2.12

# Matti Bickel <mabi@gentoo.org> (22 Apr 2014)
# Masked slotted lua for testing
# William Hubbs <williamh@gentoo.org> (07 Aug 2016)
# Taking this mask since Mabi is retired
# Rafael Martins <rafaelmartins@gentoo.org> (04 Dec 2016)
# Adding Lua 5.3 to mask
app-eselect/eselect-lua
=dev-lang/lua-5.1.5-r100
=dev-lang/lua-5.1.5-r101
=dev-lang/lua-5.1.5-r102
=dev-lang/lua-5.2.3
=dev-lang/lua-5.2.3-r1
=dev-lang/lua-5.2.3-r2
=dev-lang/lua-5.2.3-r3
=dev-lang/lua-5.3.3
=dev-lang/lua-5.3.3-r1
=dev-lang/lua-5.3.3-r2

# Samuli Suominen <ssuominen@gentoo.org> (06 Mar 2012)
# Masked for testing since this is known to break nearly
# every reverse dependency wrt bug 407091
>=dev-lang/lua-5.2.0

# Mike Gilbert <floppym@gentoo.org> (04 Mar 2014)
# Dev channel releases are only for people who are developers or want more
# experimental features and accept a more unstable release.
www-plugins/chrome-binary-plugins:unstable

# Diego E. Pettenò <flameeyes@gentoo.org> (03 Jan 2009)
# These packages are not supposed to be merged directly, instead
# please use sys-devel/crossdev to install them.
dev-libs/cygwin
dev-util/mingw-runtime
dev-util/mingw64-runtime
dev-util/w32api
sys-libs/newlib
dev-embedded/avr-libc

# Chris Gianelloni <wolf31o2@gentoo.org> (03 Mar 2008)
# Masking due to security bug #194607 and security bug #204067
games-fps/doom3
games-fps/doom3-cdoom
games-fps/doom3-chextrek
games-fps/doom3-data
games-fps/doom3-demo
games-fps/doom3-ducttape
games-fps/doom3-eventhorizon
games-fps/doom3-hellcampaign
games-fps/doom3-inhell
games-fps/doom3-lms
games-fps/doom3-mitm
games-fps/doom3-roe
games-fps/quake4-bin
games-fps/quake4-data
games-fps/quake4-demo

# <klieber@gentoo.org> (01 Apr 2004)
# The following packages contain a remotely-exploitable
# security vulnerability and have been hard masked accordingly.
#
# Please see https://bugs.gentoo.org/show_bug.cgi?id=44351 for more info
#
games-fps/unreal-tournament-goty
games-fps/unreal-tournament-strikeforce
games-fps/unreal-tournament-bonuspacks
games-fps/aaut