public inbox for gentoo-project@lists.gentoo.org
 help / color / mirror / Atom feed
From: Kristian Fiskerstrand <k_f@gentoo.org>
To: gentoo-project <gentoo-project@lists.gentoo.org>,
	gentoo-announce@lists.gentoo.org
Subject: [gentoo-project] Security Project: Removal of HPPA from supported architectures
Date: Sun, 13 May 2018 21:49:41 +0200	[thread overview]
Message-ID: <ac222242-cc4d-99c7-ec9d-469caf167baa@gentoo.org> (raw)


[-- Attachment #1.1: Type: text/plain, Size: 1460 bytes --]

Gentoo Community,

According to the last events regarding HPPA architecture [1][2], the
Security Team has decided to drop HPPA from the Security Supported List
in the Vulnerability Treatment Policy[3].

This announce begins the official process of removal, we expect the
update from the website in the following days. We won't be releasing a
second announce once the website is updated, so we encourage developers
and users relying on the HPPA architecture to take the required
precautions as soon as possible.

The consequences of the removal of security supported architecture
include (i) GLSA will be released before a version of a package is
necessarily stable for the architecture (ii) architecture-specific
issues will not be investigated directly by the security team.

In addition to this announcement, glsa-check will be updated to present
necessary information for HPPA users. As most security issues are cross-
architecture, glsa-check will continue to be operational for HPPA based
on generic GLSAs for other architectures.

References:
[1] https://bugs.gentoo.org/629554
[2]
https://archives.gentoo.org/gentoo-dev/message/48d15ee5d1075a079685c11c81d261e8
[3]
https://www.gentoo.org/support/security/vulnerability-treatment-policy.html

for the Gentoo Security Project,

-- 
Kristian Fiskerstrand
OpenPGP keyblock reachable at hkp://pool.sks-keyservers.net
fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 488 bytes --]

                 reply	other threads:[~2018-05-13 19:49 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=ac222242-cc4d-99c7-ec9d-469caf167baa@gentoo.org \
    --to=k_f@gentoo.org \
    --cc=gentoo-announce@lists.gentoo.org \
    --cc=gentoo-project@lists.gentoo.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox