Re: Expanding the scope (slightly) of dla-needed.txt

El 15/03/24 a las 08:31, Roberto C. Sánchez escribió: > On Fri, Mar 15, 2024 at 11:06:10AM +0100, Raphael Hertzog wrote: > > Hello Roberto, > > > > On Thu, 14 Mar 2024, Roberto C. Sánchez wrote: > > > Santiago and I are in agreement that at the moment the best available > > > option is to use

[SECURITY] [DLA 3762-1] unadf security update

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 - - Debian LTS Advisory DLA-3762-1debian-...@lists.debian.org https://www.debian.org/lts/security/ Adrian Bunk March 15, 2024

Accepted unadf 0.7.11a-4+deb11u1~deb10u1 (source) into oldoldstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Fri, 15 Mar 2024 17:09:40 +0200 Source: unadf Architecture: source Version: 0.7.11a-4+deb11u1~deb10u1 Distribution: buster-security Urgency: medium Maintainer: Debian QA Group Changed-By: Adrian Bunk Closes: 838248 Changes:

[SECURITY] [DLA 3761-1] spip security update

- Debian LTS Advisory DLA-3761-1debian-...@lists.debian.org https://www.debian.org/lts/security/ Guilhem Moulin March 15, 2024https://wiki.debian.org/LTS

Accepted spip 3.2.4-1+deb10u13 (source) into oldoldstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Fri, 15 Mar 2024 13:02:54 +0100 Source: spip Architecture: source Version: 3.2.4-1+deb10u13 Distribution: buster-security Urgency: high Maintainer: David Prévot Changed-By: Guilhem Moulin Closes: 1059331 Changes: spip

Re: Expanding the scope (slightly) of dla-needed.txt

On Fri, Mar 15, 2024 at 11:06:10AM +0100, Raphael Hertzog wrote: > Hello Roberto, > > On Thu, 14 Mar 2024, Roberto C. Sánchez wrote: > > Santiago and I are in agreement that at the moment the best available > > option is to use dla-needed.txt even for tracking work that needs to > > happen after

Re: Guidance for CVE triage and listing packages in dla-needed.txt

Hi, I add here a reminder to use './find-work' (as documented, including at the top of dla-needed.txt) to look for work _sorted by priority_. I triaged a few low, non-sponsored, harmonize-with-point-updates packages this week, and I'm a bit surprised that some were claimed and even uploaded

Re: Expanding the scope (slightly) of dla-needed.txt

Hello Roberto, On Thu, 14 Mar 2024, Roberto C. Sánchez wrote: > Santiago and I are in agreement that at the moment the best available > option is to use dla-needed.txt even for tracking work that needs to > happen after the DLA is released, specifically working toward an upload > to (old)stable.