Re: not many tasks in dla-needed.txt, is extra CVE triaging required

Hi Mike See answers below. On Thu, 29 Nov 2018 at 12:58, Mike Gabriel wrote: > Hi all, > > the last days I found the data/dla-needed.txt in the security-tracker > Git repo rather empty, no new work-needing packages have been added by > LTS frontdesk and I wonder the following things: > >* a

Re: Xen 4.4 updates vs. Xen Stretch backport

On 2018-11-28 22:44:52, Moritz Muehlenhoff wrote: > On Wed, Nov 28, 2018 at 12:59:11PM +0100, Peter Dreuw wrote: >> Hi out there, >> Another option would be backporting the Xen >> 4.8.4+xsa273+shim4.10.1+xsa273-1+deb9u10 (and following) package from >> Stretch to Jessie. > > What would be the point

not many tasks in dla-needed.txt, is extra CVE triaging required

Hi all, the last days I found the data/dla-needed.txt in the security-tracker Git repo rather empty, no new work-needing packages have been added by LTS frontdesk and I wonder the following things: * are we behind with LTS CVE triaging? * is the security team behind with CVE triaging an