From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 2B0E91396D0 for ; Thu, 14 Sep 2017 07:28:46 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 9CB50E0D4C; Thu, 14 Sep 2017 07:28:39 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 51F4CE0D3C for ; Thu, 14 Sep 2017 07:28:39 +0000 (UTC) Received: from sf (host81-129-83-128.range81-129.btcentralplus.com [81.129.83.128]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: slyfox) by smtp.gentoo.org (Postfix) with ESMTPSA id D7F1B33BE95; Thu, 14 Sep 2017 07:28:36 +0000 (UTC) Date: Thu, 14 Sep 2017 08:28:23 +0100 From: Sergei Trofimovich To: Yury German Cc: gentoo-dev@lists.gentoo.org, Gentoo Security Subject: Re: [gentoo-dev] Re: On dropping sparc@ from CC on bugs Message-ID: <20170914082823.5afacd75@sf> In-Reply-To: <3363B1E2-10B2-4ADF-B47B-6B6A8846EA4C@gentoo.org> References: <20170911084313.2cf9f40e@sf> <4481473.IXDqc1jNCF@localhost.localdomain> <22968.55158.799187.902608@a1i15.kph.uni-mainz.de> <20170913090344.0adcbede@sf> <3363B1E2-10B2-4ADF-B47B-6B6A8846EA4C@gentoo.org> X-Mailer: Claws Mail 3.15.1-dirty (GTK+ 2.24.31; x86_64-pc-linux-gnu) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; boundary="Sig_/hKYqcKnS5SUzRFrszf2SZY5"; protocol="application/pgp-signature" X-Archives-Salt: e3a55571-b95b-4683-a149-d623a6e2d44e X-Archives-Hash: 17985596536f36e8ad23db11f2413e0f --Sig_/hKYqcKnS5SUzRFrszf2SZY5 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable On Wed, 13 Sep 2017 22:44:23 -0400 Yury German wrote: Thank you! That's very helpful. A few clarifying questions below to be absolutely clear. > OK so let me repeat the comments that were made on @dev (and expand a bi= t further) and close the issue. >=20 > 1. Maintainers are free to cc the non-stable and experimental arches as p= art of their call for stabilization. It is up to the maintainer of the pack= age to decide. >=20 > 2. This is providing that there is no problems caused by stableboy or ext= ra dependencies raised > Note: as a follow up change was made: 07:47 <@kensington> leio: b-man: go= od point, dropped sparc from stable_arches >=20 > 3. Clean up is required as part of the security bug process, and if an ar= ch is holding it up (example hppa before Slyfox took it over) an issue woul= d have to be raised with the QA team for action. [1] 'Cleanup' is only vulnerabe ebuild removal, not CC removal from the bug, ri= ght? > 4. Bugs will be closed without waiting for any non-security supported arc= hes, once the security process is complete. CC for exp lagging arches are not removed from the bug, right? > 5. Security bugs are not re-assigned since they are assigned as a vulnera= bility in bugzilla. If you need to continue work on the bug, please feel fr= ee to open another bug for the particular arch for stabilization, fix, etc. >=20 > If you have any questions please let me know. >=20 >=20 > [1] - https://wiki.gentoo.org/wiki/Project:Security/GLSA_Coordinator_Guid= e#Bugs_in_.5Bcleanup.5D_status --=20 Sergei --Sig_/hKYqcKnS5SUzRFrszf2SZY5 Content-Type: application/pgp-signature Content-Description: Цифровая подпись OpenPGP -----BEGIN PGP SIGNATURE----- iF0EARECAB0WIQSZKa0VG5avZRlY01hxoe52YR/zqgUCWbovmAAKCRBxoe52YR/z qj/gAJ9D+9MO0NMpXT1xoClomiVUtd7rGgCfZSCxR1N+uSgrXFuvPSLjuLdQVqc= =NnmM -----END PGP SIGNATURE----- --Sig_/hKYqcKnS5SUzRFrszf2SZY5--