Re: DSA-2099-1 vs. tracker

[Michael Gilbert <michael.s.gilbert@gmail.com>]

On Fri, 3 Sep 2010 21:34:14 +0200, Francesco Poli wrote:
> On Fri, 3 Sep 2010 15:04:45 -0400 Michael Gilbert wrote:
> 
> > On Fri, 3 Sep 2010 19:17:53 +0200, Francesco Poli wrote:
> [...]
> > > Yes, I could thus discover the members of this secret cabal who
> > > corrects data in the tracker, but stays behind the curtains and does
> > > not reply on debian-security-tracker@l.d.o !!   ;-)
> > 
> > it's no secret; it is (at least for me at least) a matter of laziness.
> > why spend time on a follow-up email when the info is already publicly
> > available?
> 
> I think that threads (reporting a tracker inconsistency) on this
> mailing list should be somehow closed with a confirmation that the
> problem has been dealt with.
> Otherwise someone else could think "I'll fix this up" and waste his/her
> time in looking at the tracker and saying to him/herself "mmmh, but
> this seems to be already OK..."

there are already multiple resources available that likely prevent this:
the -commits mailing list and the svn log are good indicators.

> It's something like closing bug reports, I would say.
> That's why I follow up myself, when I notice that the problem has been
> fixed, but no reply has been sent to the list...
> It's kinda weird, I admit, and that's why I began joking about
> it...  ;-)

we try to fix up issues mentioned here as soon as we can, and i don't
know of anything slipping through the cracks for long periods of time.
if something does get overlooked, just send a reminder after a couple
days.

thanks,
mike