From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <gentoo-dev+bounces-64453-garchives=archives.gentoo.org@lists.gentoo.org>
Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80])
	by finch.gentoo.org (Postfix) with ESMTP id 569F4138247
	for <garchives@archives.gentoo.org>; Sat, 18 Jan 2014 16:34:04 +0000 (UTC)
Received: from pigeon.gentoo.org (localhost [127.0.0.1])
	by pigeon.gentoo.org (Postfix) with SMTP id 5F7C3E0B83;
	Sat, 18 Jan 2014 16:33:59 +0000 (UTC)
Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183])
	(using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by pigeon.gentoo.org (Postfix) with ESMTPS id 7090EE09A4
	for <gentoo-dev@lists.gentoo.org>; Sat, 18 Jan 2014 16:33:58 +0000 (UTC)
Received: from mail-pb0-f41.google.com (mail-pb0-f41.google.com [209.85.160.41])
	(using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
	(No client certificate requested)
	(Authenticated sender: djc)
	by smtp.gentoo.org (Postfix) with ESMTPSA id BD1E933F974
	for <gentoo-dev@lists.gentoo.org>; Sat, 18 Jan 2014 16:33:57 +0000 (UTC)
Received: by mail-pb0-f41.google.com with SMTP id up15so4785861pbc.14
        for <gentoo-dev@lists.gentoo.org>; Sat, 18 Jan 2014 08:33:56 -0800 (PST)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20130820;
        h=mime-version:reply-to:in-reply-to:references:from:date:message-id
         :subject:to:cc:content-type;
        bh=WMz1pQS8lhtDNYlJLPDeJC4RnAmysCqnvG4xBaiKuMA=;
        b=CRokg3xxik+vIXto+eC/YhLeuwNC7krQuqJhBivil51iAc0vlOi8rTW9sUHrcig9Rf
         odEQaaZwp6YPdSPBuzNabdGqkRF/FyBmnjx5sCm3rNzQGkPdIKmbpid3W1r6vtvYVc6D
         e+PImY8OAjEehzmQrfUEEb3PM6eNUjP1Hu7Z27PFuAiCw7WKKolDclFLdJC1Gxq/4lhV
         G/1vcdROIVJ1BXRD3fzrFJLV+08aE9RcBTD8S4foW5GJF/u7v1ytZ0aS4Zj7AxkIWOrR
         Fj+Uq/yN1g+/XCLO0kfeOKB1VS+FyRHCydAnoSNAdRmkal6zW52s5CvvCEEQBs/HDTtl
         N9FA==
X-Received: by 10.68.12.138 with SMTP id y10mr8770523pbb.101.1390062836829;
 Sat, 18 Jan 2014 08:33:56 -0800 (PST)
Precedence: bulk
List-Post: <mailto:gentoo-dev@lists.gentoo.org>
List-Help: <mailto:gentoo-dev+help@lists.gentoo.org>
List-Unsubscribe: <mailto:gentoo-dev+unsubscribe@lists.gentoo.org>
List-Subscribe: <mailto:gentoo-dev+subscribe@lists.gentoo.org>
List-Id: Gentoo Linux mail <gentoo-dev.gentoo.org>
X-BeenThere: gentoo-dev@lists.gentoo.org
Reply-to: gentoo-dev@lists.gentoo.org
MIME-Version: 1.0
Received: by 10.70.93.39 with HTTP; Sat, 18 Jan 2014 08:33:36 -0800 (PST)
In-Reply-To: <1390062615.24148.87.camel@belkin5>
References: <1390059274.24148.80.camel@belkin5> <52DAA58B.7060402@gentoo.org> <1390062615.24148.87.camel@belkin5>
From: Dirkjan Ochtman <djc@gentoo.org>
Date: Sat, 18 Jan 2014 17:33:36 +0100
Message-ID: <CAKmKYaAtFGCr2nVUepBUN-VagU7wYt6szugcd2ZJ70cqbGvjjQ@mail.gmail.com>
Subject: Re: [gentoo-dev] Regarding long delays on GLSA generation
To: Gentoo Development <gentoo-dev@lists.gentoo.org>
Cc: security@gentoo.org
Content-Type: text/plain; charset=UTF-8
X-Archives-Salt: 097ba279-f3be-493b-b18a-d3575737c5c4
X-Archives-Hash: a059b3525e474a24466cbb4512a935f6

On Sat, Jan 18, 2014 at 5:30 PM, Pacho Ramos <pacho@gentoo.org> wrote:
> What I want to achieve is to try to get this problem solved, I don't
> think has any sense to have pending GLSA bugs waiting for ages (yes,
> ages), I see this for really a lot of packages, the pointed one was only
> one example, but there are many more (like glib, dotnet stuff...)

>From my perception, the security team in recent months has gone
through great lengths to improve the process and to work on the
backlog of old security bugs. AIUI, this *is* getting fixed, it just
takes some time to fix it properly.

Cheers,

Dirkjan