[Fwd: Re: DSA updates on the web]
Hello,
here a forward of mails exchanged with the Debian Securiy Team.
Is it possible to keep the website DSA archive synchronized with the
latest bulletins and revisions ?
----- Forwarded message -----
From: Martin Schulze <joey@infodrom.org>
To: Nicolas Gregoire <ngregoire@exaprobe.com>
Nicolas Gregoire wrote:
> I'm currently using DSA bulletins received via the Debian security list
> to keep my own repository up to date. I want to switch to web-based
> bulletins, in order to get the information fast even in mail outages.
DSAs will appear after they were released and distributed via mail. This
can take days if not weeks. It's not remotely as reliable as via mail.
> But it appears that revisons are not presents on the website. For
> example, DSA #499 had a second release with version rsync_2.5.5-0.5 but
> the website (http://www.debian.org/security/2004/dsa-499) shows only
> rsync_2.5.5-0.4.
>
> Same thing for DSA #532 (libapache-mod-ssl_2.8.9-2.4 versus
> libapache-mod-ssl_2.8.9-2.3) ...
>
> Is it the "normal behavior" ?
Yes.
You may want to drop the web team a note to include it (debian-www@lists...)
Regards,
Joey
--
Nicolas Gregoire ----- Consultant en Sécurité des Systèmes d'Information
ngregoire@exaprobe.com ------[ ExaProbe ]------ http://www.exaprobe.com/
PGP KeyID:CA61B44F FingerPrint:1CC647FF1A55664BA2D2AFDACA6A21DACA61B44F
Reply to: