diff --git a/profiles/pentoo/base/package.accept_keywords/dev-vcs b/profiles/pentoo/base/package.accept_keywords/dev-vcs
index df3d5dc1f..cd4c6508a 100644
--- a/profiles/pentoo/base/package.accept_keywords/dev-vcs
+++ b/profiles/pentoo/base/package.accept_keywords/dev-vcs
@@ -1 +1,2 @@
 =dev-vcs/git-lfs-2.0*
+~dev-vcs/git-2.14.1
diff --git a/profiles/pentoo/base/package.mask b/profiles/pentoo/base/package.mask
index 62dc02783..98c06c8d8 100644
--- a/profiles/pentoo/base/package.mask
+++ b/profiles/pentoo/base/package.mask
@@ -19,3 +19,6 @@ sys-apps/systemd
 #kill old ruby
 dev-lang/ruby:2.1
 dev-lang/ruby:2.2
+
+#git vuln
+<dev-vcs/git-2.14.1
diff --git a/profiles/pentoo/base/package.use/dev-vcs b/profiles/pentoo/base/package.use/dev-vcs
index 4eed005a0..975bd62a0 100644
--- a/profiles/pentoo/base/package.use/dev-vcs
+++ b/profiles/pentoo/base/package.use/dev-vcs
@@ -1,2 +1,2 @@
 dev-vcs/subversion perl -dso -ruby
-dev-vcs/git tk
+dev-vcs/git tk -pcre-jit