Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.security > #5202 > unrolled thread

[release-notes/stretch] Release notes sign-off from the security team

Back to article view | Back to linux.debian.security

Contents

  [release-notes/stretch] Release notes sign-off from the security team Niels Thykier <niels@thykier.net> - 2017-04-03 14:00 +0200
    Re: [release-notes/stretch] Release notes sign-off from the security team Florian Weimer <fw@deneb.enyo.de> - 2017-04-03 20:50 +0200
      Re: [release-notes/stretch] Release notes sign-off from the security  team Julien Cristau <jcristau@debian.org> - 2017-05-01 15:00 +0200
        Re: [release-notes/stretch] Release notes sign-off from the security team Florian Weimer <fw@deneb.enyo.de> - 2017-05-01 15:20 +0200
          Re: [release-notes/stretch] Release notes sign-off from the security  team Julien Cristau <jcristau@debian.org> - 2017-05-01 17:00 +0200

#5202 — [release-notes/stretch] Release notes sign-off from the security team

Hi,

There is a security team related item in the release checklist where we
need input from the you[1]:

Items are:
 * release-notes: Security Team signoff for lower supported packages

Please review the release notes and file bugs for the missing items (if
any) and let us know once this has been done.

Thanks,
~Niels

[1]:
https://wiki.debian.org/Teams/ReleaseTeam/ReleaseCheckList/StretchCheckList

[toc] | [next] | [standalone]

#5203

* Niels Thykier:

> There is a security team related item in the release checklist where we
> need input from the you[1]:
>
> Items are:
>  * release-notes: Security Team signoff for lower supported packages
>
> Please review the release notes and file bugs for the missing items (if
> any) and let us know once this has been done.

I think you wanted to send this to the security team list, right?

I believe the current state is here:

  <https://release.debian.org/stretch/arch_qualify.html>

Although the gold bug for MIPS (#834147) has since been fixed.

armel and mips* are probably of highest risk from a long-term support
perspective.  I'm less worried about armhf, and powerpc (userland at
least) should still be fine for some time to come.

[toc] | [prev] | [next] | [standalone]

#5218 — Re: [release-notes/stretch] Release notes sign-off from the security team

On Mon, Apr  3, 2017 at 20:43:08 +0200, Florian Weimer wrote:

> * Niels Thykier:
> 
> > There is a security team related item in the release checklist where we
> > need input from the you[1]:
> >
> > Items are:
> >  * release-notes: Security Team signoff for lower supported packages
> >
> > Please review the release notes and file bugs for the missing items (if
> > any) and let us know once this has been done.
> 
> I think you wanted to send this to the security team list, right?
> 
> I believe the current state is here:
> 
>   <https://release.debian.org/stretch/arch_qualify.html>
> 
The current state for the release notes is actually at
https://www.debian.org/releases/stretch/releasenotes

Cheers,
Julien

[toc] | [prev] | [next] | [standalone]

#5219

* Julien Cristau:

> On Mon, Apr  3, 2017 at 20:43:08 +0200, Florian Weimer wrote:
>
>> * Niels Thykier:
>> 
>> > There is a security team related item in the release checklist where we
>> > need input from the you[1]:
>> >
>> > Items are:
>> >  * release-notes: Security Team signoff for lower supported packages
>> >
>> > Please review the release notes and file bugs for the missing items (if
>> > any) and let us know once this has been done.
>> 
>> I think you wanted to send this to the security team list, right?
>> 
>> I believe the current state is here:
>> 
>>   <https://release.debian.org/stretch/arch_qualify.html>
>> 
> The current state for the release notes is actually at
> https://www.debian.org/releases/stretch/releasenotes

It's not clear based on the architecture list in this document whether
there's going to be a s390 (31-bit) kernel, and what POWER
architectures are supported.

The release notes themselves still have FIXMEs under “Supported
architectures”.  The list currently goes like this:

    32-bit PC (i386) and 64-bit PC (amd64)
    64-bit ARM (arm64)
    ARM EABI (armel)
    ARMv7 (EABI hard-float ABI, armhf)
    MIPS (mips (big-endian) and mipsel (little-endian))
    64-bit little-endian MIPS (mips64el)
    64-bit little-endian PowerPC (ppc64el)
    IBM System z (s390x)

[toc] | [prev] | [next] | [standalone]

#5220 — Re: [release-notes/stretch] Release notes sign-off from the security team

On Mon, May  1, 2017 at 15:14:10 +0200, Florian Weimer wrote:

> * Julien Cristau:
> 
> > The current state for the release notes is actually at
> > https://www.debian.org/releases/stretch/releasenotes
> 
> It's not clear based on the architecture list in this document whether
> there's going to be a s390 (31-bit) kernel, and what POWER
> architectures are supported.
> 
> The release notes themselves still have FIXMEs under “Supported
> architectures”.  The list currently goes like this:
> 
>     32-bit PC (i386) and 64-bit PC (amd64)
>     64-bit ARM (arm64)
>     ARM EABI (armel)
>     ARMv7 (EABI hard-float ABI, armhf)
>     MIPS (mips (big-endian) and mipsel (little-endian))
>     64-bit little-endian MIPS (mips64el)
>     64-bit little-endian PowerPC (ppc64el)
>     IBM System z (s390x)
> 
That list is correct.  I guess the fixme is to add a couple sentences
around removing powerpc (the 32bit big-endian port) and adding mips64el.
And the mips/mipsel line could probably do with a "32-bit" addition to
separate it from the next line.

Cheers,
Julien

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.security

csiph-web