The GLSA index page (glsa.gentoo.org) currently lists only the first affected package in the "Package" column. There are often multiple packages affected, so the list is somewhat misleading. The list should also include a Date column listing the last revision date.
OTOH we could drop the "Bug" column to gain some horizontal room. Most people don't want to get to the bug at this point, and if they wanted to, they could click on the GLSA first. I know this page is dynamically generated but couldn't find where the script resides and/or who wrote it. Any clue ?
blackace wrote the script.
Note that "fixing" this might break the RDF feed generator (in xsl/glsaindex-rdf.xsl)...
that's ok -- blackace wrote that, too :)
blackace brought up a good point in IRC -- in some cases (like kernel GLSAs) the list of affected packages is quite lengthy. In those cases, I think it's unreasonable to expect that all packages be displayed in the package column. Perhaps a compromise would be to have a more link? So, if there are three affected packages, foo, bar and bee, the package column might say: app-something/foo (more...) this will at least inform the reader that they need to click through and read the whole advisory. thoughts?
That is a good idea, except that having a "(more...)" link is redundant since the GLSA number links to the full announcement. What do you think of displaying the package name if there is only one affected package, and a count "(34 affected)" if there is more than one ? This could also be taken advantage of for the RDF feed with little to no effort.
I suppose blackace compromise is acceptable... The best thing would be to have an ALT or ACRONYM on the package names that let you see the whole list by just putting the mouse cursor over the "(...)" without having to click on anything.... but I don't think GuideXML supports this. The advantage of having all the affected package names is to make the list easily searchable for a given package, but it might make the rows a little thick and/or ruin the presentation. Maybe we should have POC HTML showing how it would look like if all packages were in to see if it's acceptable ?
OK, 2003 GLSAs have been converted and committed. You can proceed with the new glsa.gentoo.org informations...
blackace any news on this one?
Seems like the solution from comment #5 is in place now. On a minor note, could we get the Updated timestamp updated as each GLSA is added? Right now it reads "Updated March 29, 2004".
It now says "Updated every 60 minutes" :) I think we are done here.
