Hi Antoine, On Sun, Feb 03, 2019 at 02:08:06PM +0100, Salvatore Bonaccorso wrote: > Thanks for working on this.
indeed! > On Fri, Feb 01, 2019 at 01:44:10PM -0500, Antoine Beaupré wrote: > > On 2018-12-19 18:05:36, Antoine Beaupré wrote: > > > The DLAs are visible here: > > > https://www-staging.debian.org/security/2018/dla-1580 that one is also visible on https://www.debian.org/security/2018/dla-1580 now \o/ > > > One thing that's unclear is how the entries get added to the main list > > > in: > > > https://www-staging.debian.org/security/2018/ > IMHO they should not be mixed into the same namespace as the DSAs. > https://www.debian.org/security/ is very specific to the > debian-security-announce list and contains items for e.g. contacting > the Debian security team or referecing the respective FAQ. I agree. (Thus I think https://salsa.debian.org/webmaster-team/webwml/merge_requests/50 should be cloded and not merged.) OTOH I plan to review https://salsa.debian.org/webmaster-team/webwml/merge_requests/53 once more and then merge it.) > I think having a dedicated https://www.debian.org/lts/ where those can > be collected and having further information on LTS would be somehow > better. Yup. > This will need an adjustment to the tracker side as well so that > sources filed for Debian LTS DLA's will not link to > https://www.debian.org/security/$year/dla-$nr . *nods* > If a dedicated subpage is not needed and the only purpose is to link > to a webversion, and the DLA's do not show up in the overall view then > possibly the status quo is still okay. I think it's ok for now / the current situation is an improvement over what we had before, but we really want/need one a dedicated page like https://www.debian.org/lts/ too. On Sun, Feb 03, 2019 at 02:38:02PM +0100, Laura Arjona Reina wrote: > Note that we already have some DLAs published in > www.debian.org/security/YYYY, for the years 2014, 2015 and 2016. See > for > example: > > https://www.debian.org/security/2014/index > > I don't mind to move the already published DLAs to other place if > people > decides it's better, but I frankly don't know if/where these URLs are > used/publicised (in Debian and maybe other places too), and we may > need > to setup redirectors from the current URLs to the new ones (no problem > with that, I say it only to not forget, in case we decide to move all > the DLAs to a different place). right. we should do that and probably track this with a bug... -- tschau, Holger ------------------------------------------------------------------------------- holger@(debian|reproducible-builds|layer-acht).org PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C
Description: PGP signature