Re: about 500 DLAs missing from the website

Hi Antoine,

On Sun, Feb 03, 2019 at 02:08:06PM +0100, Salvatore Bonaccorso wrote:
> Thanks for working on this.

indeed!

> On Fri, Feb 01, 2019 at 01:44:10PM -0500, Antoine Beaupré wrote:
> > On 2018-12-19 18:05:36, Antoine Beaupré wrote:
> > > The DLAs are visible here:
> > > https://www-staging.debian.org/security/2018/dla-1580

that one is also visible on
https://www.debian.org/security/2018/dla-1580 now \o/

> > > One thing that's unclear is how the entries get added to the main list
> > > in:
> > > https://www-staging.debian.org/security/2018/
> IMHO they should not be mixed into the same namespace as the DSAs.
> https://www.debian.org/security/ is very specific to the
> debian-security-announce list and contains items for e.g. contacting
> the Debian security team or referecing the respective FAQ.
 
I agree.

(Thus I think
https://salsa.debian.org/webmaster-team/webwml/merge_requests/50 should
be cloded and not merged.)

OTOH I plan to review
https://salsa.debian.org/webmaster-team/webwml/merge_requests/53 once
more and then merge it.)

> I think having a dedicated https://www.debian.org/lts/ where those can
> be collected and having further information on LTS would be somehow
> better.

Yup.

> This will need an adjustment to the tracker side as well so that
> sources filed for Debian LTS DLA's will not link to
> https://www.debian.org/security/$year/dla-$nr .

*nods*

> If a dedicated subpage is not needed and the only purpose is to link
> to a webversion, and the DLA's do not show up in the overall view then
> possibly the status quo is still okay.

I think it's ok for now / the current situation is an improvement over
what we had before, but we really want/need one a dedicated page like
https://www.debian.org/lts/ too.


On Sun, Feb 03, 2019 at 02:38:02PM +0100, Laura Arjona Reina wrote:
> Note that we already have some DLAs published in
> www.debian.org/security/YYYY, for the years 2014, 2015 and 2016. See
> for
> example:
> 
> https://www.debian.org/security/2014/index
> 
> I don't mind to move the already published DLAs to other place if
> people
> decides it's better, but I frankly don't know if/where these URLs are
> used/publicised (in Debian and maybe other places too), and we may
> need
> to setup redirectors from the current URLs to the new ones (no problem
> with that, I say it only to not forget, in case we decide to move all
> the DLAs to a different place).

right. we should do that and probably track this with a bug...


-- 
tschau,
	Holger

-------------------------------------------------------------------------------
               holger@(debian|reproducible-builds|layer-acht).org
       PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C

-----BEGIN PGP SIGNATURE-----
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=bOsr
-----END PGP SIGNATURE-----