Re: NEW queue processing causes relaxed treatment of security issues

[Andrea Pappacoda <andrea@pappacoda.it>]

Hi Sebastiaan,

> Il giorno 14 gen 2026, alle ore 13:56, Sebastiaan Couwenberg <sebastic@xs4all.nl> ha scritto:
> It's shows that you don't maintain enough shared library packages with frequent SONAME bumps.
> 
> Filing bugs for those is ludicrous, and would need to be an exception to this requirement opening the floodgates for more.
> 
> Requiring bugreports for binary-NEW packages is a dumb idea, let's stop entertaining it.

I’d argue that the real issue here is that SONAME bumps shouldn’t need to go to NEW, or at least not in the same queue as regular new packages.
But this issue has been discussed at length in other threads, and I don’t want to resurrect the topic now.

Only opening bugs for actually new packages (which, with ITPs, we already do) and using that for discussions with the FTP (DFSG?) team would then sound more reasonable.

Bye!