Hello Sylvain, Thanks for the direct feedback, and sorry for taking up the Security Team's time with the caddy and unbound mix-ups. In both cases I should have cross-checked dla-needed.txt more carefully before reaching out, rather than going on what I'd pieced together myself.
Point taken on NM being the right path for working inside LTS properly. The identification step for a fresh application is already done (two current DDs have signed the key), so I'm going ahead and filing on https://www.google.com/url?q=http://nm.debian.org&source=gmail&ust=1790977438146000&sa=E now rather than continuing to send LTS patches outside the process. I'll hold off on further LTS submissions here until that's in place. Thanks again for taking the time to lay out where things actually stand. Ivo On Thu, Oct 01, 2026 09:48 PM, Sylvain Beucler <[email protected]> wrote: > Hello Ivo, > > On 28/09/2026 20:57, Ivo Marino wrote: > > Prepared fixes for a batch of unbound CVEs against bookworm's 1.17.1. I'd > > originally sent this to [email protected], since it doesn't > > appear on dla-needed.txt or dsa-needed.txt and none of the CVEs carry a > > no-dsa note either, so I wasn't sure which track it belonged on. Moritz > > Mühlenhoff clarified that bookworm security updates are entirely LTS's > > now, so following up here instead. > As I already mentioned, you need to go through the NM process at > nm.debian.org if you want to contribute to LTS (AFAICS you're still not > registered there). Without DD status, you do not have write access to > the security tracker, to the announcement mailing lists, to the porter > boxes, to debusine, and so on. Unlike NM, we're not structured to work > this way, which probably explains why your contributions remained > unanswered so far. > > You misunderstood the dla-needed.txt notes for 'caddy', and here it > seems you missed the 'unbound' entry entirely (which I added earlier > this year). This made you take time from the Security Team on two > occasions. This is a clear sign that you need to study the Debian > context and processes further to avoid basic misunderstandings. > > Thanks for your interest in LTS, and good luck with the NM. > > Sylvain Beucler > Debian LTS Team >
