diff --git a/profiles/package.mask b/profiles/package.mask
index bac5ca7d4ff00..4f3e47ee1a348 100644
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -29,6 +29,11 @@
 
 #--- END OF EXAMPLES ---
 
+# Aaron Bauman <bman@gentoo.org> (2019-08-17)
+# Unmaintained, outstanding sec vuln bug #540360
+# Lots of new versions upstream. Removal in 30 days.
+dev-embedded/bitbake
+
 # Michał Górny <mgorny@gentoo.org> (2019-08-15)
 # Unmaintained, PPC-only.  The Gentoo version is outdated, ebuild
 # is still EAPI=0 and has QA violations.  Last upstream release in 2009,