On Sun, May 26, 2019 at 11:14:29AM +0100, Chris Lamb wrote: > Can you clarify your "don't think so"? Note that I was talking about a > hypothetical improved/patched version of dak that had native support > for publishing .buildinfo files, not the current one.
well, sure, a hypothetical improved/patched version of dak can do
anything and also has the feature to only release .buildinfo files once
the package/bug is unembargoed.
(the underlying problem with the security (and thus the LTS) archive is
that it might contain fixes for issues still under CVE-embargo, thus
these (and their mere existance) must not become public before they may
become public.)
--
tschau,
Holger
-------------------------------------------------------------------------------
holger@(debian|reproducible-builds|layer-acht).org
PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C
signature.asc
Description: PGP signature
