Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.security > #5015 > unrolled thread

Re: [SECURITY] [DSA 3672-1] irssi security update

Back to article view | Back to linux.debian.security

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.

Contents

  Re: [SECURITY] [DSA 3672-1] irssi security update martin f krafft <madduck@debian.org> - 2016-09-21 22:20 +0200
    Re: [SECURITY] [DSA 3672-1] irssi security update Moritz Muehlenhoff <jmm@inutil.org> - 2016-09-21 22:50 +0200
      Re: [SECURITY] [DSA 3672-1] irssi security update martin f krafft <madduck@debian.org> - 2016-09-21 22:50 +0200
        Re: [SECURITY] [DSA 3672-1] irssi security update Salvatore Bonaccorso <carnil@debian.org> - 2016-09-22 07:40 +0200

#5015 — Re: [SECURITY] [DSA 3672-1] irssi security update

[Multipart message — attachments visible in raw view] — view raw

also sprach Salvatore Bonaccorso <carnil@debian.org> [2016-09-21 21:53 +0200]:
> -------------------------------------------------------------------------
> Debian Security Advisory DSA-3672-1                   security@debian.org
> https://www.debian.org/security/                     Salvatore Bonaccorso
> September 21, 2016                    https://www.debian.org/security/faq
> -------------------------------------------------------------------------

The DSA is not on the website yet. Maybe it'd be better to wait for
web sync before sending, or force web sync?

-- 
 .''`.   martin f. krafft <madduck@d.o> @martinkrafft
: :'  :  proud Debian developer
`. `'`   http://people.debian.org/~madduck
  `-  Debian - when you have better things to do than fixing systems
 
"the search for the perfect martini is a fraud. the perfect martini
 is a belt of gin from the bottle; anything else is the decadent
 trappings of civilization."
                                                            -- t. k.

[toc] | [next] | [standalone]

#5016

B0;115;0cOn Wed, Sep 21, 2016 at 10:14:34PM +0200, martin f krafft wrote:
> also sprach Salvatore Bonaccorso <carnil@debian.org> [2016-09-21 21:53 +0200]:
> > -------------------------------------------------------------------------
> > Debian Security Advisory DSA-3672-1                   security@debian.org
> > https://www.debian.org/security/                     Salvatore Bonaccorso
> > September 21, 2016                    https://www.debian.org/security/faq
> > -------------------------------------------------------------------------
> 
> The DSA is not on the website yet. Maybe it'd be better to wait for
> web sync before sending, or force web sync?

No, the mailing announcements and the Debian Security Tracker are the canonical
source of information. The entries on the website are added subsequently by
the Debian WWW team.

Cheers,
        Moritz

[toc] | [prev] | [next] | [standalone]

#5017

[Multipart message — attachments visible in raw view] — view raw

also sprach Moritz Muehlenhoff <jmm@inutil.org> [2016-09-21 22:40 +0200]:
> No, the mailing announcements and the Debian Security Tracker are the canonical
> source of information. The entries on the website are added subsequently by
> the Debian WWW team.

You are listing https://www.debian.org/security/ in the
announcement, not the security tracker though. This is also not
addressed in the FAQ. Hence maybe it'd make sense to add a note to
the announcement?

-- 
 .''`.   martin f. krafft <madduck@d.o> @martinkrafft
: :'  :  proud Debian developer
`. `'`   http://people.debian.org/~madduck
  `-  Debian - when you have better things to do than fixing systems
 
"i am not in favour of long engagements. they give people the
 opportunity of finding out each other's character before marriage,
 which i think is never advisable."
                                                      -- oscar wilde

[toc] | [prev] | [next] | [standalone]

#5018

[Multipart message — attachments visible in raw view] — view raw

Hi Martin,

On Wed, Sep 21, 2016 at 10:45:14PM +0200, martin f krafft wrote:
> also sprach Moritz Muehlenhoff <jmm@inutil.org> [2016-09-21 22:40 +0200]:
> > No, the mailing announcements and the Debian Security Tracker are the canonical
> > source of information. The entries on the website are added subsequently by
> > the Debian WWW team.
> 
> You are listing https://www.debian.org/security/ in the
> announcement, not the security tracker though. This is also not
> addressed in the FAQ. Hence maybe it'd make sense to add a note to
> the announcement?

Do you have a wording suggestion for a FAQ entry to document this? The
website get generated only few times a day, so this was always the
case so far. I expect people to be subscribed to d-s-a for the
security-advisories. The webpage gives as the paragraph states --
web-access to older DSAs, FAQ, and other information. This is the
reason for that paragraph beeing there, not for beeing the canonical
source for advisories.

Does this helps? If you have a suggested wording for a FAQ entry,
would be appreciated, and we could add it.

Regards,
Salvatore

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.security

csiph-web