[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Claim apache-log4j1.2 and nss in dla-needed.txt



Am 29.12.19 um 19:24 schrieb Holger Levsen:
> On Sun, Dec 29, 2019 at 07:13:15PM +0100, Markus Koschany wrote:
>> I also recommend to let me handle triaging work because I am officially
>> frontdesk at the moment. You can always grab a package and work on it
>> but let frontdesk handle general triaging work or at least CC him/her or
>> move the discussion to debian-lts for more public awareness.
>  
> that's what Chris did?!


I was referring to the private conversation between Chris, the security
team and myself and the fact that Chris marked apache-log4j1.2 EOL. The
idea is, if you are not frontdesk but want to do some important triaging
like marking a package as end-of-life, then at least inform frontdesk or
discuss it publicly. The discussion part happened _after_ the decision.
I have just copied my private reply to debian-lts because it is relevant
for all team members. It's all good now.

Markus


Attachment: signature.asc
Description: OpenPGP digital signature


Reply to: