[gentoo-announce] Security Project: Removal of HPPA from supported architectures


This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
–FUQceDkgcL6m773XSgTJN5hTxOFxQKUL8
Content-Type: multipart/mixed; boundary=”pBbBifBEABO0sA7GMzW2khnG3AHwtXZBF”;
protected-headers=”v1″
From: Kristian Fiskerstrand
Reply-To: Gentoo Security
To: gentoo-project ,
gentoo-announce@lists.gentoo.org
Message-ID:
Subject: Security Project: Removal of HPPA from supported architectures

–pBbBifBEABO0sA7GMzW2khnG3AHwtXZBF
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: quoted-printable

Gentoo Community,

According to the last events regarding HPPA architecture [1][2], the
Security Team has decided to drop HPPA from the Security Supported List
in the Vulnerability Treatment Policy[3].

This announce begins the official process of removal, we expect the
update from the website in the following days. We won’t be releasing a
second announce once the website is updated, so we encourage developers
and users relying on the HPPA architecture to take the required
precautions as soon as possible.

The consequences of the removal of security supported architecture
include (i) GLSA will be released before a version of a package is
necessarily stable for the architecture (ii) architecture-specific
issues will not be investigated directly by the security team.

In addition to this announcement, glsa-check will be updated to present
necessary information for HPPA users. As most security issues are cross-
architecture, glsa-check will continue to be operational for HPPA based
on generic GLSAs for other architectures.

References:
[1] https://bugs.gentoo.org/629554
[2]
https://archives.gentoo.org/gentoo-dev/message/48d15ee5d1075a079685c11c81=
d261e8
[3]
https://www.gentoo.org/support/security/vulnerability-treatment-policy.ht=
ml

for the Gentoo Security Project,

–=20
Kristian Fiskerstrand
OpenPGP keyblock reachable at hkp://pool.sks-keyservers.net
fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3

–pBbBifBEABO0sA7GMzW2khnG3AHwtXZBF–

–FUQceDkgcL6m773XSgTJN5hTxOFxQKUL8
Content-Type: application/pgp-signature; name=”signature.asc”
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename=”signature.asc”

—–BEGIN PGP SIGNATURE—–

iQEzBAEBCgAdFiEEtOrRIMf4mkrqRycHJQt6/tY3nYUFAlr4ltYACgkQJQt6/tY3
nYWg4AgArK5iOIwtTuZh2mO89ozZ2CKqxUxb2h0qPj1gvUaj06ApYFl1etPb0a89
r/UaHxXuIpslyWM6yeeyMWPptLyhcdWZ8tmdCCaT6WB4hR22ti+nq1a2jUtySCAq
ceQhz3WCcIF9E54mZxp9drr8mYnHXTqKKE0OHDiimH/sJ79OMHB6rklBKKC70q8c
R3J7lIE0DYgweGqXPVVxfcOzolAwn2kmx4ac/2vts9yO9qphD3oaIGEvPViAXFAa
RylNjGOpbayTMs9a20OSxPjGhKeL5BnSKg1JntbEMhFtV4ULUj1YvCFuxwZ5Bp3M
WD6vR0LCganFzFkHuInLzMety8GPVw==
=MR/b
—–END PGP SIGNATURE—–

–FUQceDkgcL6m773XSgTJN5hTxOFxQKUL8–