Skip to content
Commits on Source (2)
......@@ -73,6 +73,8 @@ parser.add_argument('--lts', action='store_true',
help='Act as a member of the LTS team')
parser.add_argument('--no-dsa', dest='no_dsa', action='store_true',
help='Say that issues are low severity (no need for DSA/DLA)')
parser.add_argument('--minor', dest='minor_issues', action='store_true',
help='Say that issues are low severity and someone will work on them (LTS team only)')
parser.add_argument('--mailer', action='store', default='mutt -H {}',
help='Command executed. Must contain {} to be replaced '
'by the filename of the draft contact mail')
......@@ -83,7 +85,8 @@ args = parser.parse_args()
cc = 'debian-lts@lists.debian.org' if args.lts else 'team@security.debian.org'
team = 'lts' if args.lts else 'sec'
model = 'no-dsa' if args.no_dsa else 'update-planned'
template_file = 'templates/{}-{}.txt'.format(team, model)
minor = '-minor' if args.minor_issues and args.lts else ''
template_file = 'templates/{}-{}{}.txt'.format(team, model, minor)
# Basic check
instructions = "packages/{}.txt".format(args.package)
......
Content-Type: text/plain; charset=utf-8
To: {{ to }}
Cc: {{ cc }}
Subject: Jessie update of {{ package }} (minor security issues)?
The Debian LTS team recently reviewed the security issue(s) affecting your
package in Jessie:
{%- if cve -%}
{% for entry in cve %}
https://security-tracker.debian.org/tracker/{{ entry }}
{%- endfor -%}
{%- else %}
https://security-tracker.debian.org/tracker/source-package/{{ package }}
{%- endif %}
We decided that a member of the LTS team should take a look at this
package, although the security impact of still open issues is low. When
resources are available on our side, one of the LTS team members will
start working on fixes for those minor security issues, as we think that
the jessie users would most certainly benefit from a fixed package.
If you'd rather want to work on such an update yourself, you're welcome
to do so. Please send us a short notification to the debian-lts mailing
list (debian-lts@lists.debian.org), expressing your intention to work on
issues yourself. Otherwise, no action is required from your side.
When working on issues, please try to follow the workflow we have defined
here: https://wiki.debian.org/LTS/Development
If that workflow is a burden to you, feel free to just prepare an
updated source package and send it to debian-lts@lists.debian.org (via a
debdiff, or with an URL pointing to the source package, or even with a
pointer to your packaging repository), and the members of the LTS team
will take care of the rest. However please make sure to submit a tested
package.
Thank you very much.
{{ sender }},
on behalf of the Debian LTS team.