From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 05448138334 for ; Sat, 20 Oct 2018 12:19:17 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id EAEACE0877; Sat, 20 Oct 2018 12:19:13 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 9DC93E0866 for ; Sat, 20 Oct 2018 12:19:13 +0000 (UTC) Received: from tuxk10.localnet (91-118-57-169.dsl.dynamic.surfer.at [91.118.57.169]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: asturm@gentoo.org) by smtp.gentoo.org (Postfix) with ESMTPSA id 5FAFA335C5D for ; Sat, 20 Oct 2018 12:19:12 +0000 (UTC) From: Andreas Sturmlechner To: gentoo-dev@lists.gentoo.org Subject: Re: [gentoo-dev] net-dns/dnssec-root: Blind stable on arm, critical bug 667774 Date: Sat, 20 Oct 2018 14:19:07 +0200 Message-ID: <13279775.bTPpegArPH@tuxk10> In-Reply-To: References: <673fa7bc-c3f6-9c76-5675-783754ce3e9a@gentoo.org> <95271f29-6c3c-1b9c-f12b-96c467b8bdec@gentoo.org> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="us-ascii" X-Archives-Salt: 0c8e52b4-2664-4516-a759-f41719126b1a X-Archives-Hash: a4f8ebb7d2b3b59525640b24477c4514 On Freitag, 12. Oktober 2018 14:50:55 CEST Rich Freeman wrote: > ARM is not a Gentoo security supported arch. > > If the ARM maintainers feel that stable keywords make the lives of > their users better, and it isn't causing problems for anybody else, > I'm not sure why we should be interfering with this. That's interesting. If it's not security supported, does that mean we can simply clean up vulnerable versions and drop every arm revdep to ~arm? Or are we supposed to keep vulnerable versions around and drop every keyword except arm? Either way means extra care for this arch.