Re: Bug#761945: fixing links for DLAs in the security tracker
Hi Antoine,
On Wed, Mar 29, 2017 at 10:33:34AM -0400, Antoine Beaupré wrote:
> On 2017-03-29 07:29:06, Salvatore Bonaccorso wrote:
> > Hi,
> >
> > On Wed, Mar 29, 2017 at 06:28:49AM +0200, Salvatore Bonaccorso wrote:
> >> Hi,
> >>
> >> On Tue, Mar 28, 2017 at 10:16:52PM +0000, Holger Levsen wrote:
> >> > On Tue, Mar 28, 2017 at 10:35:34PM +0200, Moritz Muehlenhoff wrote:
> >> > > Well, you don't have a web site comparable to
> >> > > https://www.debian.org/security/2017/dsa-3796, so where should
> >> > > it possibly link to?
> >> >
> >> > I guess it's time to create this "web site" then :)
> >>
> >> See as well https://bugs.debian.org/761945 (and respective clones for
> >> debian-wwww).
> >
> > The security-tracker side of this has been implemented now, Paul Wise
> > did the corresponding work. But around 400 DLA's are not yet imported
> > so many links will sow a page not found.
> >
> > A working example:
> > https://security-tracker.debian.org/tracker/DLA-55-1 or
> > https://security-tracker.debian.org/tracker/DLA-400-1
>
> So I guess the next steps are for the LTS team:
>
> 1. update the documentation so that updating the website is part of the
> workflow
>
> 2. import old DLA advisories into the websites
>
> I can try and complete this by the end of the week.
If you want to look at this part: There is a ./parse-dla.pl script in
the webwml CVS, which is used to import the DLAs (this is an
analogeous script to parse-advisory.pl which is used to import the
DSAs).
The "manual" steps one would perform are roughly:
./parse-dla.pl $message
cvs add $year/dla-$nr.{wml,data}
cvs commit -m '[DLA $nr] $source security update'
The background work leading to that was done by Frank Lichtenheld in
#762255.
having something on the debian-wwww side which does this
automatically, once a DSA or DLA arrives would help surely the
debian-www team who then "only" have to do the translations and fix
obvious mistakes. OTOH keep in mind: When the debian-wwww team imports
a DSA or DLA they may need to do some adjustments so, I'm not sure if
it's liked to have the automatism, since sometimes before cvs commit
some changes need to be done on the .wml file.
Writing the above a bit in a hurry let me know if unclear what I
meant.
Regards,
Salvatore
Reply to: