[Bug 1582340] Re: [SRU] Sync drupal7 7.43-3 (universe) from Debian unstable (main)
Brian Murray
brian at ubuntu.com
Thu Jun 2 19:07:37 UTC 2016
Hello Nish, or anyone else affected,
Accepted drupal7 into xenial-proposed. The package will build now and be
available at https://launchpad.net/ubuntu/+source/drupal7/7.43-3~16.04.0
in a few hours, and then in the -proposed repository.
Please help us by testing this new package. See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to
enable and use -proposed. Your feedback will aid us getting this update
out to other Ubuntu users.
If this package fixes the bug for you, please add a comment to this bug,
mentioning the version of the package you tested, and change the tag
from verification-needed to verification-done. If it does not fix the
bug for you, please add a comment stating that, and change the tag to
verification-failed. In either case, details of your testing will help
us make a better decision.
Further information regarding the verification process can be found at
https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in
advance!
** Changed in: drupal7 (Ubuntu Xenial)
Status: New => Fix Committed
** Tags added: verification-needed
--
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1582340
Title:
[SRU] Sync drupal7 7.43-3 (universe) from Debian unstable (main)
Status in drupal7 package in Ubuntu:
Fix Released
Status in drupal7 source package in Xenial:
Fix Committed
Bug description:
Drupal7 in 16.04 has been left as broken while we wait on upstream
Drupal7 to gain PHP7.0 compatibility. This has been achieved in
Debian's current version, which we should be able to sync as we have
no delta currently.
[Impact]
* drupal7 is currently uninstallable in 16.04.
[Test Case]
* There is no test case for this issue, other than attempting to
install drupal7 itself, which will currently fail due to php5
dependencies.
[Regression Potential]
* As drupal7 is currently uninstallable, there is no possibility of
regression in 16.04 itself.
[Other Info]
* To reiterate, the plan for drupal7 in 16.04 was to wait for PHP7 compatibility to be available and to SRU in the corresponding version.
Please sync drupal7 7.43-3 (universe) from Debian unstable (main)
Changelog entries since current xenial version 7.41-1:
drupal7 (7.43-3) unstable; urgency=medium
* Moved the farbstatic sources from debian/missing-sources
todebian/missing-sources/misc, to keep lintian happy
* The right name for one of our conditional dependencies is no longer
php-sqlite, but php-sqlite3. Thanks to Nish Aravamudan for pointing
this out!
-- Gunnar Wolf <gwolf at debian.org> Mon, 09 May 2016 12:25:34 -0500
drupal7 (7.43-2) unstable; urgency=medium
* Update dependencies to use PHP 7 instead of 5 (Closes: #821482)
* Updated debian/watch to work reliably
* Standards-version 3.9.6.0→3.9.8 (no changes needed)
-- Gunnar Wolf <gwolf at debian.org> Mon, 09 May 2016 10:54:11 -0500
drupal7 (7.43-1) unstable; urgency=high
* New upstream version
* Fixes several security vulnerabilities (SA-CORE-2016-001): File
upload access bypass and DoS, brute force amplification attack via
XML-RPC, open redirect via path manipulation, reflected file
download, wrong modes set on some user accounts setting saves,
information disclosure of email addresses
* Several non-security bugfixes from 7.42 included
* Fix typo in README.Debian
* Add several needed lintian overrides
-- Gunnar Wolf <gwolf at debian.org> Thu, 25 Feb 2016 22:43:55 -0600
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/drupal7/+bug/1582340/+subscriptions
More information about the Ubuntu-sponsors
mailing list