Home / mailings

PDF

[gentoo-announce] Dropping support of sparc as a security supported architecture.

Posted on 06 June 2017
Gentoo-announce

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--vOVmdKj0lqKGbIfe9mRi4GV6QjMGVVml0
Content-Type: multipart/mixed; boundary="NlXAtFsHweIf4FomXi7bP2weUJj3khuk2";
protected-headers="v1"
From: Yury German <blueknight@gentoo.org>
To: gentoo-announce@lists.gentoo.org
Message-ID: <d91a678b-9931-def4-b309-4d1d32615571@gentoo.org>
Subject: Dropping support of sparc as a security supported architecture.

--NlXAtFsHweIf4FomXi7bP2weUJj3khuk2
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: quoted-printable

Hello,

After long discussion with the sparc team and other developers, the
Security Team has decided to drop SPARC as a security supported
architecture. This decision follows the council decision on 2016-12-11,
"The council defers to the security team, but is supportive of dropping
security support for sparc if it is unable to generally meet the
security team timelines."

The list of security supported architectures is maintained in the
[Security Vulnerability Treatment Policy]

The consequences of the removal of security supported architecture
include (i) GLSA will be released before a version of a package is
necessarily stable for the architecture (ii) architecture-specific
issues will not be investigated.

In addition to this announcement, glsa-check will be updated to present
necessary information for sparc users. As most security issues are
cross-architecture, glsa-check will continue to be operational for sparc
based on generic GLSAs for other architectures.

References:
[Security Vulnerability Treatment Policy]
https://www.gentoo.org/support/security/vulnerability-treatment-policy.ht=ml
##

--
________________
Yury German (BlueKnight)
Gentoo Security Team Lead
Email: blueknight@gentoo.org

OpenPGP keyblock reachable at hkp://pool.sks-keyservers.net
GPG Fingerprint: 8858 89D6 C0C4 75C4 D0DD FA00 EEAF ED89 024C 043


--NlXAtFsHweIf4FomXi7bP2weUJj3khuk2--

--vOVmdKj0lqKGbIfe9mRi4GV6QjMGVVml0
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

 

TOP