profiles/package.mask keep dev-java/jackson

Don't last-rite it but keep that version masked until version bump

Signed-off-by: Volkmar W. Pogatzki <gentoo@pogatzki.net>
Closes: https://github.com/gentoo/gentoo/pull/23257
Signed-off-by: Miroslav Šulc <fordfrog@gentoo.org>
This commit is contained in:
Volkmar W. Pogatzki
2021-12-11 19:40:34 +01:00
committed by Miroslav Šulc
parent bb1959c862
commit d43d53e4c8

View File

@@ -334,9 +334,9 @@ media-video/google2srt
net-libs/onion
# Volkmar W. Pogatzki <gentoo@pogatzki.net> (2021-11-15)
# Library without consumers,
# bug #771693 (multiple CVEs); Removal in 30 days.
dev-java/jackson
# bug #771693 (multiple CVEs).
# Library still needed for bumping dev-java/log4j
=dev-java/jackson-2.9.10
# Volkmar W. Pogatzki <gentoo@pogatzki.net> (2021-11-14)
# java packages without consumers, Removal in 30 days.