Bug#321896: Incorrect security info on AMD64 page
"Adam D. Barratt" <debian-www@adam-barratt.org.uk> wrote:
> On Tue, 2005-08-09 at 00:19 -0500, Ross Combs wrote:
> > "Adam D. Barratt" <debian-www@adam-barratt.org.uk> wrote:
> >
> > > This is not the case - see
> > > http://lists.debian.org/debian-devel-announce/2005/08/msg00001.html
> >
> > I believe you are mistaken. I filed the report after trying to use
> > security.debian.org and having to dig up the old post to see why it
> > wasn't working.
> >
> > It is still not working (yes, the directory seems to exist, but I
> > can't believe there are zero security updates for AMD64 sarge.
>
> The message referred to above says:
>
> "Joey Schulze from the Security Team offered to do an accumulative
> security announce, covering all the amd64 packages which now get added
> for all the past advisories[1], so expect one big DSA in the near future.
> (ETA is Monday at the moment).
> All new DSAs from now on will simply include amd64."
Ok, but that doesn't change the fact it isn't in place. People are
being pointed to a non-working security solution until it happens.
Every announcement has promised it "soon" but it has not happened yet.
The ETA in that announcement has also passed.
> I'm assuming the cumulative announcement has been delayed for some
> reason (although the above does only provide an ETA). Other than that,
> the message is dated last Wednesday - there have been no security
> updates for *any* architecture between then and now.
>
> I'm afraid at the moment the best advice is to wait for a) the promised
> cumulative announcement and/or b) the next standard DSA.
Well, I can accept that if it really is coming soon, but I've been
waiting since May for it to happen. Is there any other information
besides the announcement which leads you to believe this will happen
in the next few days? It only gives an ETA which has already passed.
Can't a quick note be added which tells people how to install security
updates in the meantime?
-Ross
Reply to: