Re: about 500 DLAs missing from the website
Hi Antoine, On Sun, Feb 03, 2019 at 02:08:06PM +0100, Salvatore Bonaccorso wrote: > Thanks for working on this. indeed! > On Fri, Feb 01, 2019 at 01:44:10PM -0500, Antoine Beaupré wrote: > > On 2018-12-19 18:05:36, Antoine Beaupré wrote: > > > The DLAs are visible here: > > > https://www-staging.debian.org/security/2018/dla-1580 that one is also visible on https://www.debian.org/security/2018/dla-1580 now \o/ > > > One thing that's unclear is how the entries get added to the main list > > > in: > > > https://www-staging.debian.org/security/2018/ > IMHO they should not be mixed into the same namespace as the DSAs. > https://www.debian.org/security/ is very specific to the > debian-security-announce list and contains items for e.g. contacting > the Debian security team or referecing the respective FAQ. I agree. (Thus I think https://salsa.debian.org/webmaster-team/webwml/merge_requests/50 should be cloded and not merged.) OTOH I plan to review https://salsa.debian.org/webmaster-team/webwml/merge_requests/53 once more and then merge it.) > I think having a dedicated https://www.debian.org/lts/ where those can > be collected and having further information on LTS would be somehow > better. Yup. > This will need an adjustment to the tracker side as well so that > sources filed for Debian LTS DLA's will not link to > https://www.debian.org/security/$year/dla-$nr . *nods* > If a dedicated subpage is not needed and the only purpose is to link > to a webversion, and the DLA's do not show up in the overall view then > possibly the status quo is still okay. I think it's ok for now / the current situation is an improvement over what we had before, but we really want/need one a dedicated page like https://www.debian.org/lts/ too. On Sun, Feb 03, 2019 at 02:38:02PM +0100, Laura Arjona Reina wrote: > Note that we already have some DLAs published in > www.debian.org/security/, for the years 2014, 2015 and 2016. See > for > example: > > https://www.debian.org/security/2014/index > > I don't mind to move the already published DLAs to other place if > people > decides it's better, but I frankly don't know if/where these URLs are > used/publicised (in Debian and maybe other places too), and we may > need > to setup redirectors from the current URLs to the new ones (no problem > with that, I say it only to not forget, in case we decide to move all > the DLAs to a different place). right. we should do that and probably track this with a bug... -- tschau, Holger --- holger@(debian|reproducible-builds|layer-acht).org PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C signature.asc Description: PGP signature
Re: about 500 DLAs missing from the website
On Sun, Feb 03, 2019 at 02:08:06PM +0100, Salvatore Bonaccorso wrote: > IMHO they should not be mixed into the same namespace as the DSAs. > https://www.debian.org/security/ is very specific to the > debian-security-announce list and contains items for e.g. contacting > the Debian security team or referecing the respective FAQ. +1 Cheers, Moritz
Re: about 500 DLAs missing from the website
Hello El 3/2/19 a las 14:08, Salvatore Bonaccorso escribió: > Hi Antoinie, > > [adding team@s.d.o to CC] > > Thanks for working on this. > > On Fri, Feb 01, 2019 at 01:44:10PM -0500, Antoine Beaupré wrote: >> On 2018-12-19 18:05:36, Antoine Beaupré wrote: >>> The DLAs are visible here: >>> >>> https://www-staging.debian.org/security/2018/dla-1580 >>> >>> One thing that's unclear is how the entries get added to the main list >>> in: >>> >>> https://www-staging.debian.org/security/2018/ >>> >>> That still needs to be cleared up. >> >> That's actually in the webwml code, I opened a MR to add those: >> >> https://salsa.debian.org/webmaster-team/webwml/merge_requests/50 > > IMHO they should not be mixed into the same namespace as the DSAs. > https://www.debian.org/security/ is very specific to the > debian-security-announce list and contains items for e.g. contacting > the Debian security team or referecing the respective FAQ. > Note that we already have some DLAs published in www.debian.org/security/, for the years 2014, 2015 and 2016. See for example: https://www.debian.org/security/2014/index I don't mind to move the already published DLAs to other place if people decides it's better, but I frankly don't know if/where these URLs are used/publicised (in Debian and maybe other places too), and we may need to setup redirectors from the current URLs to the new ones (no problem with that, I say it only to not forget, in case we decide to move all the DLAs to a different place). Kind regards, -- Laura Arjona Reina https://wiki.debian.org/LauraArjona > I think having a dedicated https://www.debian.org/lts/ where those can > be collected and having further information on LTS would be somehow > better. > > This will need an adjustment to the tracker side as well so that > sources filed for Debian LTS DLA's will not link to > https://www.debian.org/security/$year/dla-$nr . > > If a dedicated subpage is not needed and the only purpose is to link > to a webversion, and the DLA's do not show up in the overall view then > possibly the status quo is still okay. > > What do you think? >
Re: about 500 DLAs missing from the website
Hi Antoinie, [adding team@s.d.o to CC] Thanks for working on this. On Fri, Feb 01, 2019 at 01:44:10PM -0500, Antoine Beaupré wrote: > On 2018-12-19 18:05:36, Antoine Beaupré wrote: > > The DLAs are visible here: > > > > https://www-staging.debian.org/security/2018/dla-1580 > > > > One thing that's unclear is how the entries get added to the main list > > in: > > > > https://www-staging.debian.org/security/2018/ > > > > That still needs to be cleared up. > > That's actually in the webwml code, I opened a MR to add those: > > https://salsa.debian.org/webmaster-team/webwml/merge_requests/50 IMHO they should not be mixed into the same namespace as the DSAs. https://www.debian.org/security/ is very specific to the debian-security-announce list and contains items for e.g. contacting the Debian security team or referecing the respective FAQ. I think having a dedicated https://www.debian.org/lts/ where those can be collected and having further information on LTS would be somehow better. This will need an adjustment to the tracker side as well so that sources filed for Debian LTS DLA's will not link to https://www.debian.org/security/$year/dla-$nr . If a dedicated subpage is not needed and the only purpose is to link to a webversion, and the DLA's do not show up in the overall view then possibly the status quo is still okay. What do you think? Regards, Salvatore
Re: about 500 DLAs missing from the website
On 2018-12-19 18:05:36, Antoine Beaupré wrote: > The DLAs are visible here: > > https://www-staging.debian.org/security/2018/dla-1580 > > One thing that's unclear is how the entries get added to the main list > in: > > https://www-staging.debian.org/security/2018/ > > That still needs to be cleared up. That's actually in the webwml code, I opened a MR to add those: https://salsa.debian.org/webmaster-team/webwml/merge_requests/50 > In the meantime, I did do a mass > import here: > > https://salsa.debian.org/webmaster-team/webwml/merge_requests/47 ... and I just updated that with the latest, up until DLA-1657-1. A. -- It will be a great day when our schools get all the money they need and the air force has to hold a bake sale to buy a bomber. - Unknown
