Hi,
On 03/07/2026 03:04, Utkarsh Gupta wrote:
I want to flag the growing size of our security-tracker git
repositories and see how y'all feel about tackling it. I brought this
up at the last LTS meeting and was glad to hear I'm not alone. :)
Please, let's not all spend time investigating this issue independently :)
As discussed during said meeting, Helmut, Santiago and I have already
put some hours into this, including exchanging with the security team.
Much is detailed in the meeting notes:
https://lists.debian.org/debian-lts/2026/06/msg00045.html
in the debian-security / debian-security-tracker mailing lists:
https://lists.debian.org/debian-security/2026/06/msg00001.html
https://lists.debian.org/debian-security-tracker/2026/06/msg00009.html
https://lists.debian.org/debian-security-tracker/2026/07/msg00006.html
and in my monthly report:
https://lists.debian.org/debian-lts/2026/07/msg00004.html
Current work-arounds are also documented:
https://lts-team.pages.debian.net/cve-triage.html#debian-security-tracker
Cheers!
Sylvain
