Re: more missing DLAs on the website
Holger Levsen writes: > ERROR: .data or .wml file missing for DLA 0015-1 > ERROR: .data or .wml file missing for DLA 0014-1 > ERROR: .data or .wml file missing for DLA 0013-1 > ERROR: .data or .wml file missing for DLA 0012-1 > ERROR: .data or .wml file missing for DLA 0011-1 > ERROR: .data or .wml file missing for DLA 0010-1 > ERROR: .data or .wml file missing for DLA 0009-1 > ERROR: .data or .wml file missing for DLA 0008-1 > ERROR: .data or .wml file missing for DLA 0007-1 > ERROR: .data or .wml file missing for DLA 0006-1 > ERROR: .data or .wml file missing for DLA 0005-1 > ERROR: .data or .wml file missing for DLA 0004-1 > ERROR: .data or .wml file missing for DLA 0003-1 > ERROR: .data or .wml file missing for DLA 0002-1 > ERROR: .data or .wml file missing for DLA 0001-1 Looks like ./parse-dla.pl might require a bit a coaxing to work with these entries: + test -f 2019/dla-0001.data + grep -lr Subject: gnutls26 security update debian-lts-announce.d + FILE=debian-lts-announce.d/new/155681.M924097P13369Q2.silverfish + ./parse-dla.pl debian-lts-announce.d/new/155681.M924097P13369Q2.silverfish Could not parse advisory filename 'debian-lts-announce.d/new/155681.M924097P13369Q2.silverfish'. DLA name missing in '' At quick glance this looks like it can't see the "Package:" value in the email for some reason, however I can't see an obvious reason right now. -- Brian May
Re: more missing DLAs on the website
Hi Brian, On Tue, Apr 09, 2019 at 07:38:19AM +1000, Brian May wrote: > Holger Levsen writes: > > > ERROR: .data or .wml file missing for DLA 1750-1 > > ERROR: .data or .wml file missing for DLA 1730-2 > > ERROR: .data or .wml file missing for DLA 719-1 > > ERROR: .data or .wml file missing for DLA 706-1 > > ERROR: .data or .wml file missing for DLA 659-1 > > ERROR: .data or .wml file missing for DLA 607-1 > > ERROR: .data or .wml file missing for DLA 580-1 > > ERROR: .data or .wml file missing for DLA 567-1 > > ERROR: .data or .wml file missing for DLA 377-1 > > ERROR: .data or .wml file missing for DLA 267-1 > > ERROR: .data or .wml file missing for DLA 115-2 > > ERROR: .data or .wml file missing for DLA 145-2 > > ERROR: .data or .wml file missing for DLA 0015-1 > > ERROR: .data or .wml file missing for DLA 0014-1 > > ERROR: .data or .wml file missing for DLA 0013-1 > > ERROR: .data or .wml file missing for DLA 0012-1 > > ERROR: .data or .wml file missing for DLA 0011-1 > > ERROR: .data or .wml file missing for DLA 0010-1 > > ERROR: .data or .wml file missing for DLA 0009-1 > > ERROR: .data or .wml file missing for DLA 0008-1 > > ERROR: .data or .wml file missing for DLA 0007-1 > > ERROR: .data or .wml file missing for DLA 0006-1 > > ERROR: .data or .wml file missing for DLA 0005-1 > > ERROR: .data or .wml file missing for DLA 0004-1 > > ERROR: .data or .wml file missing for DLA 0003-1 > > ERROR: .data or .wml file missing for DLA 0002-1 > > ERROR: .data or .wml file missing for DLA 0001-1 > > > > I suspect the first 15 need a bit more manual work, as the mails sent at > > that time didnt contain DLA IDs, the next 10 need investigation (some > > are missing because the ID was never used, we should probably create > > empty/dummy entries for those) and the last two are probably just > > oversights by their authors, who I'll now ping seperatly via IRC. > > Why are some of these 3 digits and others 4 digits? I can't help but > feel that might be an error somewhere. I'm almost sure this (the 000X-1 ones) is due to that in the beginning when LTS was bootstraped, there were open question on how to name the advisories etc ... For reference see for instance <201407122127.19638.hol...@layer-acht.org> were it was even not yet clear to use DLA. I'm almost sure that at the very beginning much was experimented to find the correct way forward. Regards, Salvatore
Re: more missing DLAs on the website
Holger Levsen writes: > ERROR: .data or .wml file missing for DLA 1750-1 > ERROR: .data or .wml file missing for DLA 1730-2 > ERROR: .data or .wml file missing for DLA 719-1 > ERROR: .data or .wml file missing for DLA 706-1 > ERROR: .data or .wml file missing for DLA 659-1 > ERROR: .data or .wml file missing for DLA 607-1 > ERROR: .data or .wml file missing for DLA 580-1 > ERROR: .data or .wml file missing for DLA 567-1 > ERROR: .data or .wml file missing for DLA 377-1 > ERROR: .data or .wml file missing for DLA 267-1 > ERROR: .data or .wml file missing for DLA 115-2 > ERROR: .data or .wml file missing for DLA 145-2 > ERROR: .data or .wml file missing for DLA 0015-1 > ERROR: .data or .wml file missing for DLA 0014-1 > ERROR: .data or .wml file missing for DLA 0013-1 > ERROR: .data or .wml file missing for DLA 0012-1 > ERROR: .data or .wml file missing for DLA 0011-1 > ERROR: .data or .wml file missing for DLA 0010-1 > ERROR: .data or .wml file missing for DLA 0009-1 > ERROR: .data or .wml file missing for DLA 0008-1 > ERROR: .data or .wml file missing for DLA 0007-1 > ERROR: .data or .wml file missing for DLA 0006-1 > ERROR: .data or .wml file missing for DLA 0005-1 > ERROR: .data or .wml file missing for DLA 0004-1 > ERROR: .data or .wml file missing for DLA 0003-1 > ERROR: .data or .wml file missing for DLA 0002-1 > ERROR: .data or .wml file missing for DLA 0001-1 > > I suspect the first 15 need a bit more manual work, as the mails sent at > that time didnt contain DLA IDs, the next 10 need investigation (some > are missing because the ID was never used, we should probably create > empty/dummy entries for those) and the last two are probably just > oversights by their authors, who I'll now ping seperatly via IRC. Why are some of these 3 digits and others 4 digits? I can't help but feel that might be an error somewhere. -- Brian May
Re: more missing DLAs on the website
retitle 859122 25 DLAs missing from the website thanks On Wed, Apr 03, 2019 at 05:47:42PM +1100, Brian May wrote: > > Thanks for this offer! I don't think anybody would complain if you do this > > work... quite the contrary :) > I fixed some more: > https://salsa.debian.org/webmaster-team/webwml/merge_requests/99 great, thank you! > I created this dodgy script to do them one at a time, that uses the > output of the other script: nice, thanks for sharing as well! Running Antoine's 10-check-advisories script, I now only see these missing: ERROR: .data or .wml file missing for DLA 1750-1 ERROR: .data or .wml file missing for DLA 1730-2 ERROR: .data or .wml file missing for DLA 719-1 ERROR: .data or .wml file missing for DLA 706-1 ERROR: .data or .wml file missing for DLA 659-1 ERROR: .data or .wml file missing for DLA 607-1 ERROR: .data or .wml file missing for DLA 580-1 ERROR: .data or .wml file missing for DLA 567-1 ERROR: .data or .wml file missing for DLA 377-1 ERROR: .data or .wml file missing for DLA 267-1 ERROR: .data or .wml file missing for DLA 115-2 ERROR: .data or .wml file missing for DLA 145-2 ERROR: .data or .wml file missing for DLA 0015-1 ERROR: .data or .wml file missing for DLA 0014-1 ERROR: .data or .wml file missing for DLA 0013-1 ERROR: .data or .wml file missing for DLA 0012-1 ERROR: .data or .wml file missing for DLA 0011-1 ERROR: .data or .wml file missing for DLA 0010-1 ERROR: .data or .wml file missing for DLA 0009-1 ERROR: .data or .wml file missing for DLA 0008-1 ERROR: .data or .wml file missing for DLA 0007-1 ERROR: .data or .wml file missing for DLA 0006-1 ERROR: .data or .wml file missing for DLA 0005-1 ERROR: .data or .wml file missing for DLA 0004-1 ERROR: .data or .wml file missing for DLA 0003-1 ERROR: .data or .wml file missing for DLA 0002-1 ERROR: .data or .wml file missing for DLA 0001-1 I suspect the first 15 need a bit more manual work, as the mails sent at that time didnt contain DLA IDs, the next 10 need investigation (some are missing because the ID was never used, we should probably create empty/dummy entries for those) and the last two are probably just oversights by their authors, who I'll now ping seperatly via IRC. -- tschau, Holger --- holger@(debian|reproducible-builds|layer-acht).org PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C In Europe there are people prosecuted by courts because they saved other people from drowning in the Mediterranean Sea. That is almost as absurd as if there were people being prosecuted because they save humans from drowning in the sea. signature.asc Description: PGP signature
Re: more missing DLAs on the website
Holger Levsen writes: > Thanks for this offer! I don't think anybody would complain if you do this > work... quite the contrary :) I fixed some more: https://salsa.debian.org/webmaster-team/webwml/merge_requests/99 I created this dodgy script to do them one at a time, that uses the output of the other script: === cut == #!/bin/sh set -e set -x if ! test -f "2019/dla-$1.data" then FILE="$(grep -lr "Subject: \[SECURITY\] \[DLA $1-1\]" debian-lts-announce.d)" ./parse-dla.pl "$FILE" make -C 2019 "dla-$1.en.html" git add "2019/dla-$1.data" "2019/dla-$1.wml" git commit -m "DLA-$1-1 advisory" fi === cut === -- Brian May
Re: more missing DLAs on the website
Am 02.04.19 um 14:16 schrieb Sylvain Beucler: > Hi, > > On Tue, Apr 02, 2019 at 12:55:31PM +0200, Markus Koschany wrote: >> Am 02.04.19 um 12:39 schrieb Sylvain Beucler: >>> Ideally we could then cron this out as Markus suggested. >> >> So far I had no problems with the parse script. I just download the html >> file from the DLA announcement manually and then I use the script. The >> idea to use a block would certainly simplify the parsing though. > > The script can be used directly on the DLA text/mail, btw (it's not > based on the list archive, no need to download). I use Thunderbird for emails and I found it simpler to manage it that way but maybe the work flow has its merits for other MUAs. > Also I remember fixing one of your DLAs before a webwml admin made an > angry commit, the script is sometimes silently bogus. Sorry for the inconveniences. > On Tue, Apr 02, 2019 at 11:57:43AM +, Holger Levsen wrote: >> On Tue, Apr 02, 2019 at 12:55:31PM +0200, Markus Koschany wrote: >>> First of all, thank you for your improvements on the parse script. I >>> share your concerns about the usefulness of translating the security >>> advisories. >> >> just because you/we understand English doesnt mean the whole world does. > > I'm sure everybody understands the importance of translation, I did > quite a lot of i18n myself. Just wondering its usefulness for DLAs. > > But I figured that translating the DLAs is a matter of priority for > the translators, not us, so let's do the i18n on our side, and let the > translators prioritize :) [...] I have worked on i18n too in the past. Nobody questions the importance of translations in general but the target group for DLAs are system administrators who will most likely be comfortable with reading an advisory in English. As long as we have so many untranslated strings in desktop applications, games or documentation, something the casual user would use, it feels like the time could be spent elsewhere. Markus signature.asc Description: OpenPGP digital signature
Re: more missing DLAs on the website
Hi, On Tue, Apr 02, 2019 at 12:55:31PM +0200, Markus Koschany wrote: > Am 02.04.19 um 12:39 schrieb Sylvain Beucler: > > Ideally we could then cron this out as Markus suggested. > > So far I had no problems with the parse script. I just download the html > file from the DLA announcement manually and then I use the script. The > idea to use a block would certainly simplify the parsing though. The script can be used directly on the DLA text/mail, btw (it's not based on the list archive, no need to download). Also I remember fixing one of your DLAs before a webwml admin made an angry commit, the script is sometimes silently bogus. On Tue, Apr 02, 2019 at 11:57:43AM +, Holger Levsen wrote: > On Tue, Apr 02, 2019 at 12:55:31PM +0200, Markus Koschany wrote: > > First of all, thank you for your improvements on the parse script. I > > share your concerns about the usefulness of translating the security > > advisories. > > just because you/we understand English doesnt mean the whole world does. I'm sure everybody understands the importance of translation, I did quite a lot of i18n myself. Just wondering its usefulness for DLAs. But I figured that translating the DLAs is a matter of priority for the translators, not us, so let's do the i18n on our side, and let the translators prioritize :) > > I agree without the translations we could also consider to > > link to the mail archive. > > and then the mail archive software changes one day, and the links break. > > i agree there is a little overhead currently, but a.) there are benefits > in doing so and b.) we can make the overhead go away. I'll recap the rationale points in the Development wiki page in a few days unless somebody beats me to it. Cheers! Sylvain
Re: more missing DLAs on the website
On Tue, Apr 02, 2019 at 12:55:31PM +0200, Markus Koschany wrote: > First of all, thank you for your improvements on the parse script. I > share your concerns about the usefulness of translating the security > advisories. just because you/we understand English doesnt mean the whole world does. > I agree without the translations we could also consider to > link to the mail archive. and then the mail archive software changes one day, and the links break. i agree there is a little overhead currently, but a.) there are benefits in doing so and b.) we can make the overhead go away. -- tschau, Holger --- holger@(debian|reproducible-builds|layer-acht).org PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C signature.asc Description: PGP signature
Re: more missing DLAs on the website
Am 02.04.19 um 12:39 schrieb Sylvain Beucler: > Hi, > > On 02/04/2019 12:09, Holger Levsen wrote: >> On Tue, Apr 02, 2019 at 11:52:58AM +0200, Sylvain Beucler wrote: >>> OK so I guess we need DLA translations ;) >>> I was wondered whether actual users asked for them, but let's assume so. >> you might not be aware, but: >> >> ~/Projects/debian-www/webwml$ for i in english french russian danish >> japanese ; do echo -n "$i: " ; find |grep -i dla|grep -c $i ; done >> english: 3574 >> french: 703 >> russian: 424 >> danish: 73 >> japanese: 108 > > That's precisely what I'm worried about: we're taking resources from > translators (and for quite boring texts), so I hope users do care about it. > I don't see security advisory translations in other distros, so we > better be confident this is worth the effort - including our effort to > double-publish DLAs at the website :) First of all, thank you for your improvements on the parse script. I share your concerns about the usefulness of translating the security advisories. I agree without the translations we could also consider to link to the mail archive. https://salsa.debian.org/webmaster-team/webwml/merge_requests/47 >>> Cool, though we still have the parse-dla limitations, i.e. the results >>> needs to be manually checked every time. >> yup. and besides #859123 there is also #922246: "www/lts: if DLA-1234-1 and >> DLA-1234-2 exist, only that last one shows up in indexes" >> >>> It seems implicit given my involvement in the discussions and fixes for >>> the past weeks, but I'm willing to help improve this too :) >> yay. please just go ahead. ;) > > One issue is that I proposed to simplify the handling of parse-dla to > make is more robust (grab DLA description as a block instead of > the fragile regexp-based HTMLization) > - but no involved parties answer. > I'll let some time pass, then I guess I'll make the change and see who > complains :P > > Ideally we could then cron this out as Markus suggested. So far I had no problems with the parse script. I just download the html file from the DLA announcement manually and then I use the script. The idea to use a block would certainly simplify the parsing though. Regards, Markus signature.asc Description: OpenPGP digital signature
Re: more missing DLAs on the website
Hi, On 02/04/2019 12:09, Holger Levsen wrote: > On Tue, Apr 02, 2019 at 11:52:58AM +0200, Sylvain Beucler wrote: >> OK so I guess we need DLA translations ;) >> I was wondered whether actual users asked for them, but let's assume so. > you might not be aware, but: > > ~/Projects/debian-www/webwml$ for i in english french russian danish japanese > ; do echo -n "$i: " ; find |grep -i dla|grep -c $i ; done > english: 3574 > french: 703 > russian: 424 > danish: 73 > japanese: 108 That's precisely what I'm worried about: we're taking resources from translators (and for quite boring texts), so I hope users do care about it. I don't see security advisory translations in other distros, so we better be confident this is worth the effort - including our effort to double-publish DLAs at the website :) >>> https://salsa.debian.org/webmaster-team/webwml/merge_requests/47 >> Cool, though we still have the parse-dla limitations, i.e. the results >> needs to be manually checked every time. > yup. and besides #859123 there is also #922246: "www/lts: if DLA-1234-1 and > DLA-1234-2 exist, only that last one shows up in indexes" > >> It seems implicit given my involvement in the discussions and fixes for >> the past weeks, but I'm willing to help improve this too :) > yay. please just go ahead. ;) One issue is that I proposed to simplify the handling of parse-dla to make is more robust (grab DLA description as a block instead of the fragile regexp-based HTMLization) - but no involved parties answer. I'll let some time pass, then I guess I'll make the change and see who complains :P Ideally we could then cron this out as Markus suggested. - Sylvain
Re: more missing DLAs on the website
On Tue, Apr 02, 2019 at 11:52:58AM +0200, Sylvain Beucler wrote: > OK so I guess we need DLA translations ;) > I was wondered whether actual users asked for them, but let's assume so. you might not be aware, but: ~/Projects/debian-www/webwml$ for i in english french russian danish japanese ; do echo -n "$i: " ; find |grep -i dla|grep -c $i ; done english: 3574 french: 703 russian: 424 danish: 73 japanese: 108 > > https://salsa.debian.org/webmaster-team/webwml/merge_requests/47 > Cool, though we still have the parse-dla limitations, i.e. the results > needs to be manually checked every time. yup. and besides #859123 there is also #922246: "www/lts: if DLA-1234-1 and DLA-1234-2 exist, only that last one shows up in indexes" > It seems implicit given my involvement in the discussions and fixes for > the past weeks, but I'm willing to help improve this too :) yay. please just go ahead. ;) -- tschau, Holger --- holger@(debian|reproducible-builds|layer-acht).org PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C signature.asc Description: PGP signature
Re: more missing DLAs on the website
Hi, On 02/04/2019 10:59, Holger Levsen wrote: > On Mon, Apr 01, 2019 at 08:51:00PM +0200, Sylvain Beucler wrote: >> I wondered whether we needed translations at: > because: > [...] > - translations OK so I guess we need DLA translations ;) I was wondered whether actual users asked for them, but let's assume so. > - https://www.debian.org/lts/security/2019/dla-1735 is a much better URL > than https://lists.debian.org/debian-lts-announce/2019/03/msg02342.html for > DLA-1735 > - much better means easier to refer/find after the fact OK though I personally would either check the index page (www or lists) to look-up by name, or https://security-tracker.debian.org/tracker/DLA--1 to look-up by ID. > >> I would be willing to help here, however don't want to step on anybodies >> toes... > \o/ > > Thanks for this offer! I don't think anybody would complain if you do this > work... quite the contrary :) > >> Has anybody considered writing a script (assuming such a thing doesn't >> already exist) that will somehow fetch the DLA from the mailing list >> archive (given the URL), extract the contents from the ... >> tags and then then calls parse-dla.pl on the result? > Such a script exists, see the top of > https://salsa.debian.org/webmaster-team/webwml/merge_requests/47 Cool, though we still have the parse-dla limitations, i.e. the results needs to be manually checked every time. It seems implicit given my involvement in the discussions and fixes for the past weeks, but I'm willing to help improve this too :) Cheers! Sylvain
Re: more missing DLAs on the website
On Mon, Apr 01, 2019 at 08:51:00PM +0200, Sylvain Beucler wrote: > Is there a rationale on why we are updating the website, by the way? > And with a full copy of the advisory? > (instead of e.g. pointing to the list archives). > I wondered whether we needed translations at: because: - https://www.debian.org/lts/security/2019/dla-1735 is a much better URL than https://lists.debian.org/debian-lts-announce/2019/03/msg02342.html for DLA-1735 - much better means easier to refer/find after the fact - translations -- tschau, Holger --- holger@(debian|reproducible-builds|layer-acht).org PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C signature.asc Description: PGP signature
Re: more missing DLAs on the website
Hi Chris, On Tue, Apr 02, 2019 at 03:59:09AM -0400, Chris Lamb wrote: > Really sorry about this. I've made a corresponding MR, now pending > merge. I think I managed to skip this as it was a change of process, > but I've made it more obvious in my "checklist" now. great, thank you! -- tschau, Holger --- holger@(debian|reproducible-builds|layer-acht).org PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C signature.asc Description: PGP signature
Re: more missing DLAs on the website
On Tue, Apr 02, 2019 at 05:26:14PM +1100, Brian May wrote: > I would be willing to help here, however don't want to step on anybodies > toes... \o/ Thanks for this offer! I don't think anybody would complain if you do this work... quite the contrary :) > Has anybody considered writing a script (assuming such a thing doesn't > already exist) that will somehow fetch the DLA from the mailing list > archive (given the URL), extract the contents from the ... > tags and then then calls parse-dla.pl on the result? Such a script exists, see the top of https://salsa.debian.org/webmaster-team/webwml/merge_requests/47 -- tschau, Holger --- holger@(debian|reproducible-builds|layer-acht).org PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C signature.asc Description: PGP signature
Re: more missing DLAs on the website
Hi Holger, > the number of missing DLAs on https://www.debian.org/lts/security/ has > recently gone up again. Missing are: [..] > Chris Lamb [DLA 1719-1] libjpeg-turbo security update Really sorry about this. I've made a corresponding MR, now pending merge. I think I managed to skip this as it was a change of process, but I've made it more obvious in my "checklist" now. Best wishes, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org chris-lamb.co.uk `-
Re: more missing DLAs on the website
Holger Levsen writes: > If somebody picks up the rest, I'd also be really thankful. And probably > not just me! ;) I would be willing to help here, however don't want to step on anybodies toes... Has anybody considered writing a script (assuming such a thing doesn't already exist) that will somehow fetch the DLA from the mailing list archive (given the URL), extract the contents from the ... tags and then then calls parse-dla.pl on the result? (even better if it could look up the URL automatically, but that might be slightly harder...) -- Brian May
Re: more missing DLAs on the website
Hi, Is there a rationale on why we are updating the website, by the way? And with a full copy of the advisory? (instead of e.g. pointing to the list archives). I wondered whether we needed translations at: https://lists.debian.org/debian-lts/2019/03/msg00101.html https://lists.debian.org/debian-lts/2019/03/msg00152.html but I didn't get any feedback. This doesn't seem to be a tool issue (I made a few fixes btw) but rather a matter of priority and man power. Understanding the goals in the first place would help IMHO :) Cheers! Sylvain On 01/04/2019 19:45, Holger Levsen wrote: > hi, > > the number of missing DLAs on https://www.debian.org/lts/security/ has > recently gone up again. Missing are: > > Emilio Pozuelo Monfort [DLA 1746-1] drupal7 security update > Emilio Pozuelo Monfort [DLA 1745-1] libdatetime-timezone-perl new upstream > version > Emilio Pozuelo Monfort [DLA 1744-1] tzdata new upstream version > Emilio Pozuelo Monfort [DLA 1743-1] thunderbird security update > Abhijith PA[DLA 1742-1] wordpress security update > Thorsten Alteholz [DLA 1741-1] php5 security update > Mike Gabriel [DLA 1740-1] libav security update > Thorsten Alteholz [DLA 1734-1] libraw security update > Emilio Pozuelo Monfort [DLA 1732-1] openjdk-7 security update > Mike Gabriel [DLA 1730-1] libssh2 security update > Thorsten Alteholz [DLA 1729-1] wireshark security update > Mike Gabriel [DLA 1728-1] openssh security update > Emilio Pozuelo Monfort [DLA 1727-1] firefox-esr security update > Emilio Pozuelo Monfort [DLA 1726-1] bash security update > Thorsten Alteholz [DLA 1725-1] rsync security update > Emilio Pozuelo Monfort [DLA 1724-1] ntfs-3g security update > Mike Gabriel [DLA 1723-1] cron security update > Emilio Pozuelo Monfort [DLA 1722-1] firefox-esr security update > Chris Lamb [DLA 1719-1] libjpeg-turbo security update > Abhijith PA[DLA 1714-1] libsdl2 security update > Abhijith PA[DLA 1713-1] libsdl1.2 security update > Emilio Pozuelo Monfort [DLA 1712-1] libsndfile security update > Markus Koschany[DLA 1711-1] systemd security update > Bastian Blank [DLA 1709-1] waagent security update > Bastian Blank [DLA 1688-1] waagent update > Emilio Pozuelo Monfort [DLA 1684-1] systemd security update > Emilio Pozuelo Monfort [DLA 1683-1] rdesktop security update > > What surprise me is that some people sometimes appearantly manage to > update the website and some times not, I wonder why? > > I'd also like to remind everyone - who is a paid contributor via > freexian - that it's your duty to update the website or provide an MR > via https://salsa.debian.org/webmaster-team/webwml/merge_requests > > If your name is listed above, *please* update the website or provide an MR > via https://salsa.debian.org/webmaster-team/webwml/merge_requests for > those DLAs. > > If somebody picks up the rest, I'd also be really thankful. And probably > not just me! ;) > > > Last not least: I've thought about (not) naming people but decided to do > so because I don't consider this public shaming but quite the contrary, > everybody listed above has done great work! Which just has a tiny flaw > which I'm sure you also want to fix, thus I made it easier for you to see if > you're affected. > I'm also sure this is mostly a tooling issue. #859123 is the best place > to discuss fixes. > >
more missing DLAs on the website
hi, the number of missing DLAs on https://www.debian.org/lts/security/ has recently gone up again. Missing are: Emilio Pozuelo Monfort [DLA 1746-1] drupal7 security update Emilio Pozuelo Monfort [DLA 1745-1] libdatetime-timezone-perl new upstream version Emilio Pozuelo Monfort [DLA 1744-1] tzdata new upstream version Emilio Pozuelo Monfort [DLA 1743-1] thunderbird security update Abhijith PA[DLA 1742-1] wordpress security update Thorsten Alteholz [DLA 1741-1] php5 security update Mike Gabriel [DLA 1740-1] libav security update Thorsten Alteholz [DLA 1734-1] libraw security update Emilio Pozuelo Monfort [DLA 1732-1] openjdk-7 security update Mike Gabriel [DLA 1730-1] libssh2 security update Thorsten Alteholz [DLA 1729-1] wireshark security update Mike Gabriel [DLA 1728-1] openssh security update Emilio Pozuelo Monfort [DLA 1727-1] firefox-esr security update Emilio Pozuelo Monfort [DLA 1726-1] bash security update Thorsten Alteholz [DLA 1725-1] rsync security update Emilio Pozuelo Monfort [DLA 1724-1] ntfs-3g security update Mike Gabriel [DLA 1723-1] cron security update Emilio Pozuelo Monfort [DLA 1722-1] firefox-esr security update Chris Lamb [DLA 1719-1] libjpeg-turbo security update Abhijith PA[DLA 1714-1] libsdl2 security update Abhijith PA[DLA 1713-1] libsdl1.2 security update Emilio Pozuelo Monfort [DLA 1712-1] libsndfile security update Markus Koschany[DLA 1711-1] systemd security update Bastian Blank [DLA 1709-1] waagent security update Bastian Blank [DLA 1688-1] waagent update Emilio Pozuelo Monfort [DLA 1684-1] systemd security update Emilio Pozuelo Monfort [DLA 1683-1] rdesktop security update What surprise me is that some people sometimes appearantly manage to update the website and some times not, I wonder why? I'd also like to remind everyone - who is a paid contributor via freexian - that it's your duty to update the website or provide an MR via https://salsa.debian.org/webmaster-team/webwml/merge_requests If your name is listed above, *please* update the website or provide an MR via https://salsa.debian.org/webmaster-team/webwml/merge_requests for those DLAs. If somebody picks up the rest, I'd also be really thankful. And probably not just me! ;) Last not least: I've thought about (not) naming people but decided to do so because I don't consider this public shaming but quite the contrary, everybody listed above has done great work! Which just has a tiny flaw which I'm sure you also want to fix, thus I made it easier for you to see if you're affected. I'm also sure this is mostly a tooling issue. #859123 is the best place to discuss fixes. -- tschau, Holger --- holger@(debian|reproducible-builds|layer-acht).org PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C signature.asc Description: PGP signature
