Bug#859122: 31 DLAs missing from the website

2019-09-09 Thread Brian May
Holger Levsen  writes:

> the script disagrees on DLA 607-1 and 377-1 and indeed
> https://www.debian.org/lts/security/2016/dla-607 does not exist.
> while https://www.debian.org/lts/security/2016/dla-377 does (which
> matches debian-www.git)
>
> do you know what's up with DLA-607?

Oops. I looked at it, then forgot to finish.

See https://salsa.debian.org/webmaster-team/webwml/merge_requests/222

Not sure why you referenced dla-377 - is there something wrong with this
one?
-- 
Brian May 



Bug#859122: 31 DLAs missing from the website

2019-08-29 Thread Holger Levsen
On Thu, Aug 22, 2019 at 05:38:18PM +1000, Brian May wrote:
> I believe all of these have now been resolved.

and YAY! (& sorry I forgot that in my previous mail!)


signature.asc
Description: PGP signature


Bug#859122: 31 DLAs missing from the website

2019-08-29 Thread Holger Levsen
control: retitle -1 1 DLA missing from the website (or not)
thanks

Hi Brian,

On Thu, Aug 22, 2019 at 05:38:18PM +1000, Brian May wrote:
> On Wed, Aug 14, 2019 at 11:16:50AM +, Holger Levsen wrote:
> > ~/Projects/debian-www/webwml$ ../cron/parts/10-check-advisories --mode DLA  
> > 2>&1
> > ERROR: .data or .wml file missing for DLA 1885-1
> > ERROR: .data or .wml file missing for DLA 1884-1
> > ERROR: .data or .wml file missing for DLA 1879-1
> > ERROR: .data or .wml file missing for DLA 1877-1
> > ERROR: .data or .wml file missing for DLA 1871-1
> > ERROR: .data or .wml file missing for DLA 1846-2
> > ERROR: .data or .wml file missing for DLA 1833-2
> > ERROR: .data or .wml file missing for DLA 1784-1
> > ERROR: .data or .wml file missing for DLA 607-1
> > ERROR: .data or .wml file missing for DLA 567-1
> > ERROR: .data or .wml file missing for DLA 377-1
> > ERROR: .data or .wml file missing for DLA 267-1
> > ERROR: .data or .wml file missing for DLA 115-2
> > ERROR: .data or .wml file missing for DLA 145-2
> 
> I believe all of these have now been resolved.

the script disagrees on DLA 607-1 and 377-1 and indeed
https://www.debian.org/lts/security/2016/dla-607 does not exist.
while https://www.debian.org/lts/security/2016/dla-377 does (which
matches debian-www.git)

do you know what's up with DLA-607?


-- 
cheers,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature


Bug#859122: 31 DLAs missing from the website

2019-08-22 Thread Brian May
On Wed, Aug 14, 2019 at 11:16:50AM +, Holger Levsen wrote:
> ~/Projects/debian-www/webwml$ ../cron/parts/10-check-advisories --mode DLA  
> 2>&1
> ERROR: .data or .wml file missing for DLA 1885-1
> ERROR: .data or .wml file missing for DLA 1884-1
> ERROR: .data or .wml file missing for DLA 1879-1
> ERROR: .data or .wml file missing for DLA 1877-1
> ERROR: .data or .wml file missing for DLA 1871-1
> ERROR: .data or .wml file missing for DLA 1846-2
> ERROR: .data or .wml file missing for DLA 1833-2
> ERROR: .data or .wml file missing for DLA 1784-1
> ERROR: .data or .wml file missing for DLA 607-1
> ERROR: .data or .wml file missing for DLA 567-1
> ERROR: .data or .wml file missing for DLA 377-1
> ERROR: .data or .wml file missing for DLA 267-1
> ERROR: .data or .wml file missing for DLA 115-2
> ERROR: .data or .wml file missing for DLA 145-2

I believe all of these have now been resolved.
-- 
Brian May 



Bug#859122: 31 DLAs missing from the website

2019-08-15 Thread Holger Levsen
Hi Brian,

thanks for caring about this old information!

On Thu, Aug 15, 2019 at 05:31:51PM +1000, Brian May wrote:
> Where to from here? Should I invent an appropriate DLA-145-2 based on
> the information above?

yes, that seems very reasonable.


-- 
tschau,
cheers,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature


Bug#859122: 31 DLAs missing from the website

2019-08-15 Thread Brian May
Holger Levsen  writes:

> ERROR: .data or .wml file missing for DLA 145-2

Hmm. Looks like that really should exist, and point to next version
5.3.3-7+squeeze25

(DLA-145-1 points to 5.3.3-7+squeeze24)


Here is the relevant information I can find:


commit f225a141ff91e4790ef74f00893cf29c2521eff6
Author: Thorsten Alteholz 
Date:   Mon Feb 2 16:30:14 2015 +

DLA-145-1 php5 regression update

git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@31913 
e39458fd-73e7-0310-bf30-c45bca0a0e42

diff --git a/data/DLA/list b/data/DLA/list
index efe2117968..abf5a895cd 100644
--- a/data/DLA/list
+++ b/data/DLA/list
@@ -1,3 +1,5 @@
+[02 Feb 2015] DLA-145-2 php5 - regression update
+   [squeeze] - php5 5.3.3-7+squeeze25
 [31 Jan 2015] DLA-145-1 php5 - security update
{CVE-2014-0237 CVE-2014-0238 CVE-2014-2270 CVE-2014-8117}
[squeeze] - php5 5.3.3-7+squeeze24



php5 (5.3.3-7+squeeze25) squeeze-lts; urgency=high

  * Non-maintainer upload by the Squeeze LTS Team.
  * as the patch for PHP bug 68739 seems to break cURL cookie handling
it is removed again in this version, CVE-2015-TEMP-1.patch is affected
(bug report can be found in: 
 https://lists.debian.org/debian-lts/2015/02/msg7.html)

 -- Thorsten Alteholz   Mon, 02 Feb 2015 14:17:00 +0100


* https://bugs.php.net/bug.php?id=68739: upstream bug.

* https://lists.debian.org/debian-lts/2015/02/msg7.html contains
technical information on the regression.


So it looks like the fix was reverted, which means in turn means that
CVE-2015-TEMP-1 was not fixed despite DLA 145-1 declaring otherwise,
however no point worrying about that now :-)


Where to from here? Should I invent an appropriate DLA-145-2 based on
the information above?
-- 
Brian May 



Bug#859122: 31 DLAs missing from the website

2019-08-14 Thread Holger Levsen
Hi Brian,

On Wed, Aug 14, 2019 at 05:16:46PM +1000, Brian May wrote:
> On Mon, Apr 15, 2019 at 12:06:35PM +, Holger Levsen wrote:
> > many thanks for all your fixes on this bug!
> Can you please rerun the command:
> ~/Projects/debian-www/webwml$ ../cron/parts/10-check-advisories --mode DLA

~/Projects/debian-www/webwml$ ../cron/parts/10-check-advisories --mode DLA  2>&1
ERROR: .data or .wml file missing for DLA 1885-1
ERROR: .data or .wml file missing for DLA 1884-1
ERROR: .data or .wml file missing for DLA 1879-1
ERROR: .data or .wml file missing for DLA 1877-1
ERROR: .data or .wml file missing for DLA 1871-1
ERROR: .data or .wml file missing for DLA 1846-2
ERROR: .data or .wml file missing for DLA 1833-2
ERROR: .data or .wml file missing for DLA 1784-1
ERROR: .data or .wml file missing for DLA 607-1
ERROR: .data or .wml file missing for DLA 567-1
ERROR: .data or .wml file missing for DLA 377-1
ERROR: .data or .wml file missing for DLA 267-1
ERROR: .data or .wml file missing for DLA 115-2
ERROR: .data or .wml file missing for DLA 145-2

> I am loosing track of which DLAs are still missing, and it looks like
> I can't run that command myself.

it's not merged into master but it's only in MR#1 for the cron.git repo
of debian-www...

Thanks for looking into this again!


-- 
cheers,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature


Bug#859122: 31 DLAs missing from the website

2019-08-14 Thread Brian May
On Mon, Apr 15, 2019 at 12:06:35PM +, Holger Levsen wrote:
> many thanks for all your fixes on this bug!

Can you please rerun the command:

~/Projects/debian-www/webwml$ ../cron/parts/10-check-advisories --mode DLA

I am loosing track of which DLAs are still missing, and it looks like
I can't run that command myself.

Thanks
-- 
Brian May 



Bug#859122: 31 DLAs missing from the website

2019-04-15 Thread Holger Levsen
control: retitle -1 7 DLAs missing from the website (or not)
thanks

Hi Brian,

many thanks for all your fixes on this bug!

On Fri, Apr 12, 2019 at 04:03:25PM +1000, Brian May wrote:
> > ERROR: .data or .wml file missing for DLA 1130-1
> > ERROR: .data or .wml file missing for DLA 719-1
> > ERROR: .data or .wml file missing for DLA 706-1
> > ERROR: .data or .wml file missing for DLA 659-1
> Looks like these are all mine, I have copies of the outgoing emails, but
> from my private mail archives, not in the public web archive. So I guess
> that means I am the only one who can fix these :-)

and you did. Many thanks for that!

> > ERROR: .data or .wml file missing for DLA 772-1

this one has been dealt with

> > ERROR: .data or .wml file missing for DLA 607-1
> > ERROR: .data or .wml file missing for DLA 567-1
> > ERROR: .data or .wml file missing for DLA 377-1
> > ERROR: .data or .wml file missing for DLA 267-1
> > ERROR: .data or .wml file missing for DLA 115-2
> > ERROR: .data or .wml file missing for DLA 145-2
> I can't actually find these - or anything like them - in the mailing
> list archives or on my computer.

I believe those DLAs were allocated but never used. We will need to double
check and then probably provide dummy/empty DLAs documenting this.

> * I can find DLA-567-2 but not a DLA-567-1; I suspect DLA-567-2 was sent
>   instead of DLA-567-1.

fun ;)

> > ERROR: .data or .wml file missing for DLA 580-1
> 
> I suspect that might be this email:
> 
> Date: Mon, 1 Aug 2016 12:05:55 +0200
> From: Balint Reczey 
> Subject: [SECURITY] [REGRESSION] [DLA -] graphite2 regression update
> To: debian-lts-annou...@lists.debian.org
> Mail-Followup-To: debian-...@lists.debian.org
> 
> Source: https://lists.debian.org/debian-lts-announce/2016/08/msg0.html
> 
> Impossible to mark a positive identication, however the email was sent
> after DLA-578-1, before DLA-582-1, and the package name matches, and the
> security tracker has similar title.

seems like DLA 580 indeed.


-- 
tschau,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature


Bug#859122: 31 DLAs missing from the website

2019-04-12 Thread Brian May
Holger Levsen  writes:

> ~/Projects/debian-www/webwml$ ../cron/parts/10-check-advisories --mode DLA  
> ERROR: .data or .wml file missing for DLA 1685-1
> ERROR: .data or .wml file missing for DLA 1684-1
> ERROR: .data or .wml file missing for DLA 1683-1
> ERROR: .data or .wml file missing for DLA 1682-1

I haven't look at these.

> ERROR: .data or .wml file missing for DLA 1130-1
> ERROR: .data or .wml file missing for DLA 719-1
> ERROR: .data or .wml file missing for DLA 706-1
> ERROR: .data or .wml file missing for DLA 659-1

Looks like these are all mine, I have copies of the outgoing emails, but
from my private mail archives, not in the public web archive. So I guess
that means I am the only one who can fix these :-)

> ERROR: .data or .wml file missing for DLA 772-1
> ERROR: .data or .wml file missing for DLA 607-1
> ERROR: .data or .wml file missing for DLA 567-1
> ERROR: .data or .wml file missing for DLA 377-1
> ERROR: .data or .wml file missing for DLA 267-1
> ERROR: .data or .wml file missing for DLA 115-2
> ERROR: .data or .wml file missing for DLA 145-2

I can't actually find these - or anything like them - in the mailing
list archives or on my computer.

* I can find DLA-567-2 but not a DLA-567-1; I suspect DLA-567-2 was sent
  instead of DLA-567-1.

> ERROR: .data or .wml file missing for DLA 580-1

I suspect that might be this email:

Date: Mon, 1 Aug 2016 12:05:55 +0200
From: Balint Reczey 
Subject: [SECURITY] [REGRESSION] [DLA -] graphite2 regression update
To: debian-lts-annou...@lists.debian.org
Mail-Followup-To: debian-...@lists.debian.org

Source: https://lists.debian.org/debian-lts-announce/2016/08/msg0.html

Impossible to mark a positive identication, however the email was sent
after DLA-578-1, before DLA-582-1, and the package name matches, and the
security tracker has similar title.

I can't find the original DLA that caused the breakage however.

I also noticed this other email without a DLA:
https://lists.debian.org/debian-lts-announce/2016/08/msg00010.html

As far as I can tell, this one may not actually have a DLA.

> ERROR: .data or .wml file missing for DLA 0015-1
> ERROR: .data or .wml file missing for DLA 0014-1
> ERROR: .data or .wml file missing for DLA 0013-1
> ERROR: .data or .wml file missing for DLA 0012-1
> ERROR: .data or .wml file missing for DLA 0011-1
> ERROR: .data or .wml file missing for DLA 0010-1
> ERROR: .data or .wml file missing for DLA 0009-1
> ERROR: .data or .wml file missing for DLA 0008-1
> ERROR: .data or .wml file missing for DLA 0007-1
> ERROR: .data or .wml file missing for DLA 0006-1
> ERROR: .data or .wml file missing for DLA 0005-1
> ERROR: .data or .wml file missing for DLA 0004-1
> ERROR: .data or .wml file missing for DLA 0003-1
> ERROR: .data or .wml file missing for DLA 0002-1
> ERROR: .data or .wml file missing for DLA 0001-1

These are fixed.
-- 
Brian May 



Bug#859122: 31 DLAs missing from the website

2019-02-22 Thread Holger Levsen
control: tags -1 - patch
control: retitle -1 31 DLAs missing from the website
thanks

Hi,

due to the work of mostly Antoine and Laura, over 1600 DLAs are now
visible on www.debian.org/lts - this is pretty awesome IMO!

A few are still missing however:

~/Projects/debian-www/webwml$ ../cron/parts/10-check-advisories --mode DLA  
ERROR: .data or .wml file missing for DLA 1685-1
ERROR: .data or .wml file missing for DLA 1684-1
ERROR: .data or .wml file missing for DLA 1683-1
ERROR: .data or .wml file missing for DLA 1682-1
ERROR: .data or .wml file missing for DLA 1130-1
ERROR: .data or .wml file missing for DLA 772-1
ERROR: .data or .wml file missing for DLA 719-1
ERROR: .data or .wml file missing for DLA 706-1
ERROR: .data or .wml file missing for DLA 659-1
ERROR: .data or .wml file missing for DLA 607-1
ERROR: .data or .wml file missing for DLA 580-1
ERROR: .data or .wml file missing for DLA 567-1
ERROR: .data or .wml file missing for DLA 377-1
ERROR: .data or .wml file missing for DLA 267-1
ERROR: .data or .wml file missing for DLA 115-2
ERROR: .data or .wml file missing for DLA 145-2
ERROR: .data or .wml file missing for DLA 0015-1
ERROR: .data or .wml file missing for DLA 0014-1
ERROR: .data or .wml file missing for DLA 0013-1
ERROR: .data or .wml file missing for DLA 0012-1
ERROR: .data or .wml file missing for DLA 0011-1
ERROR: .data or .wml file missing for DLA 0010-1
ERROR: .data or .wml file missing for DLA 0009-1
ERROR: .data or .wml file missing for DLA 0008-1
ERROR: .data or .wml file missing for DLA 0007-1
ERROR: .data or .wml file missing for DLA 0006-1
ERROR: .data or .wml file missing for DLA 0005-1
ERROR: .data or .wml file missing for DLA 0004-1
ERROR: .data or .wml file missing for DLA 0003-1
ERROR: .data or .wml file missing for DLA 0002-1
ERROR: .data or .wml file missing for DLA 0001-1

I suppose we should be able to fix those as well ;)


-- 
tschau,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C

In Europe there are people prosecuted by courts because they saved other people
from drowning in the  Mediterranean Sea.  That is almost as absurd  as if there
were people being prosecuted because they save humans from drowning in the sea.


signature.asc
Description: PGP signature