Re: No DLA for xen, librsvg, libidn?
On Wed, 18 May 2016, Antoine Beaupré wrote:
> On 2016-05-18 03:45:57, Raphael Hertzog wrote:
> > On Tue, 17 May 2016, Antoine Beaupré wrote:
> >> It would be great to have better consistency here.
> >
> > Yes, just like we ensure that we get an Accepted mail before sending the
> > DLA, we must make sure that the DLA has gone through. We are all (supposed
> > to be) subscribed to debian-lts-announce and it should not be hard to
> > verify it (I for one have all LTS related mails in a single folder so it's
> > easy to spot stuff like this).
>
> I wonder if some of that stuff should be automated. I am fairly new with
> the security process, how often do mistakes like this happen anyways?
They usually happen for new contributors who have not used signed mails
very often. Once they figured out the way to do it, it usually never
happens again.
> And how hard would it be to automate this?
No idea. But I don't think it's worth investing time into this.
Cheers,
--
Raphaël Hertzog ◈ Debian Developer
Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/
Reply to: