Re: Better handling of NEW packages (yes, sec related)

2009-10-28 Thread Raphael Geissert
Nico Golde wrote: > > What if we write a script that tracks NEW and checks that with the list of > our NFUs and embedded code-copies list and write a mail to this list in > case a NEW package needs review? Given the package is named properly this > should be rather easy to script and work effectiv

Re: Better handling of NEW packages (yes, sec related)

2009-10-28 Thread Raphael Geissert
Michael Gilbert wrote: > > i think this is a great idea. i was a bit surprised by all of the old > (2005/2006) issues that you converted from NFUs in your last tracker > update. There were actually some more, but I had doubts about marking them as they were probably already fixed long ago, and

Re: Better handling of NEW packages (yes, sec related)

2009-10-27 Thread Nico Golde
Hi, * Raphael Geissert [2009-10-26 21:43]: > Yesterday I went through the list of NFUs and reviewed some of those that I > recognised as being in the archive. Although this process could be more or > less automated by using the information by the NVD (in a similar way its > use was mentioned on th

Re: Better handling of NEW packages (yes, sec related)

2009-10-26 Thread Michael Gilbert
On Mon, 26 Oct 2009 14:46:44 -0600, Raphael Geissert wrote: > Hi, > > Yesterday I went through the list of NFUs and reviewed some of those that I > recognised as being in the archive. Although this process could be more or > less automated by using the information by the NVD (in a similar way its

Better handling of NEW packages (yes, sec related)

2009-10-26 Thread Raphael Geissert
Hi, Yesterday I went through the list of NFUs and reviewed some of those that I recognised as being in the archive. Although this process could be more or less automated by using the information by the NVD (in a similar way its use was mentioned on the other thread), there's also a gap between the