Hi Holger,
> So I ran it asking it to unclaim packages which didnt see activity in
> dla-needed.txt for more than 3 weeks. These are the results from running
> ./bin/review-update-needed --lts --unclaim 1814400
>
> -libav (Hugo Lefeuvre)
> +libav
> last NOTE: 20180529: Just contacted some of the CVE reporters to ask for the reproducers, CC-ed team ML.
> that's Last-Update: 2018-09-22 12:04 (59 days ago)
> AFAICS this is a legit unclaim. Hugo, would you mind to unclaim this?
I don't mind. This is probably the best thing to do.
I kept this claimed for the following reasons:
+ I have few reproducers which I am not allowed to redistribute publicly.
They are not 'working' directly and investigations are very
costly, usually ~8-10h/CVE which did not fit in my available time these
last months.
+ I was handling the contact with Diego Biurrun, a libav developer who
taking part to the libav maintainance in Debian LTS a while ago. For
some reasons he had to stop and it is unlikely that he will start
again.
+ I am still interested in libav work.
> -liblivemedia (Hugo Lefeuvre)
> +liblivemedia
> last NOTE: *doesnt have a date to it*
> and there's not Last-Update.
> Not sure what to do with it, Hugo?
I have released the update 20mn ago ;)
cheers,
Hugo
--
Hugo Lefeuvre (hle) | www.owl.eu.com
RSA4096_ 360B 03B3 BF27 4F4D 7A3F D5E8 14AA 1EB8 A247 3DFD
ed25519_ 37B2 6D38 0B25 B8A2 6B9F 3A65 A36F 5357 5F2D DC4C
Attachment:
signature.asc
Description: PGP signature