Bug#1090074: stale action items in action needed list?

2024-12-15 Thread Martin Rampersad
Package: tracker.debian.org Hello, While viewing the tracker page for package asterisk, I saw that there are open security issues for bookworm and trixie in the tracker action needed panel, but all links in the action item list lead to security-tracker.debian.org pages which do not mention either

Bug#1031046: Only include in Bookworm with commitment to stable updates

2024-12-15 Thread Martin Rampersad
Jonas, My expectations and understanding of how things work in Debian were way off. My frustration and entitlement were loud and misdirected and I apologize for that, you've been extremely patient. It is very easy for a person to use Debian software for years without understanding anything that

Bug#1031046: Only include in Bookworm with commitment to stable updates

2024-12-14 Thread Martin Rampersad
I think I understand now. I would like do what is needed for asterisk. My current focus is the asterisk bug tracker, as you have mentioned. Thanks again, Martin

Bug#1031046: Only include in Bookworm with commitment to stable updates

2024-12-13 Thread Martin Rampersad
> Why later? Whay not now? My efforts to close this bug have failed. I have already said the same thing as Marco: That I would do it, and stated my use case as he did. I can only assume his offer was deemed reliable because he has a proven track record within the Debian community, which I don't h

Bug#1031046: Only include in Bookworm with commitment to stable updates

2024-12-13 Thread Martin Rampersad
Jonas, Regarding how to resolve this bug, see #1030669 which has the same demand and was closed by a promise from Marco d'Itri. If you don't look him up or already know who he is, he says "I manage about 150 instances of Varnish, so let's just assume that I have the experience needed and some moti

Bug#1031046: Only include in Bookworm with commitment to stable updates

2024-12-12 Thread Martin Rampersad
It is my assumption that this bug opened because the security team was left with a stable package that nobody on the pkg-voip-team was maintaining, so I understand why they don't want that to happen again, especially with a package with as many CVEs as asterisk. Please correct me if I'm wrong ab

Bug#1031046: Only include in Bookworm with commitment to stable updates

2024-12-12 Thread Martin Rampersad
Jonas, Will you close #1031046 if I file a bug with the tracker pseudo-package? If no, what do you need for this bug to close? Martin

Bug#1031046: Only include in Bookworm with commitment to stable updates

2024-12-12 Thread Martin Rampersad
Hi Moritz, I have joined the pkg-voip-team and I am willing to backport/test security fixes across the three year lifecycle for asterisk. Is there some action you need us to take to allow this bug to close? The tracker (https://tracker.debian.org/pkg/asterisk) states that there are three secu