[Bug 1582340] Re: [SRU] Sync drupal7 7.43-3 (universe) from Debian unstable (main)

Brian Murray brian at ubuntu.com
Thu Jun 2 19:07:37 UTC 2016


Hello Nish, or anyone else affected,

Accepted drupal7 into xenial-proposed. The package will build now and be
available at https://launchpad.net/ubuntu/+source/drupal7/7.43-3~16.04.0
in a few hours, and then in the -proposed repository.

Please help us by testing this new package.  See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to
enable and use -proposed.  Your feedback will aid us getting this update
out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug,
mentioning the version of the package you tested, and change the tag
from verification-needed to verification-done. If it does not fix the
bug for you, please add a comment stating that, and change the tag to
verification-failed.  In either case, details of your testing will help
us make a better decision.

Further information regarding the verification process can be found at
https://wiki.ubuntu.com/QATeam/PerformingSRUVerification .  Thank you in
advance!

** Changed in: drupal7 (Ubuntu Xenial)
       Status: New => Fix Committed

** Tags added: verification-needed

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1582340

Title:
  [SRU] Sync drupal7 7.43-3 (universe) from Debian unstable (main)

Status in drupal7 package in Ubuntu:
  Fix Released
Status in drupal7 source package in Xenial:
  Fix Committed

Bug description:
  Drupal7 in 16.04 has been left as broken while we wait on upstream
  Drupal7 to gain PHP7.0 compatibility. This has been achieved in
  Debian's current version, which we should be able to sync as we have
  no delta currently.

  [Impact]

   * drupal7 is currently uninstallable in 16.04.

  [Test Case]

   * There is no test case for this issue, other than attempting to
  install drupal7 itself, which will currently fail due to php5
  dependencies.

  [Regression Potential]

   * As drupal7 is currently uninstallable, there is no possibility of
  regression in 16.04 itself.

  [Other Info]
   
   * To reiterate, the plan for drupal7 in 16.04 was to wait for PHP7 compatibility to be available and to SRU in the corresponding version.

  Please sync drupal7 7.43-3 (universe) from Debian unstable (main)

  Changelog entries since current xenial version 7.41-1:

  drupal7 (7.43-3) unstable; urgency=medium

    * Moved the farbstatic sources from debian/missing-sources
      todebian/missing-sources/misc, to keep lintian happy
    * The right name for one of our conditional dependencies is no longer
      php-sqlite, but php-sqlite3. Thanks to Nish Aravamudan for pointing
      this out!

   -- Gunnar Wolf <gwolf at debian.org>  Mon, 09 May 2016 12:25:34 -0500

  drupal7 (7.43-2) unstable; urgency=medium

    * Update dependencies to use PHP 7 instead of 5 (Closes: #821482)
    * Updated debian/watch to work reliably
    * Standards-version 3.9.6.0→3.9.8 (no changes needed)

   -- Gunnar Wolf <gwolf at debian.org>  Mon, 09 May 2016 10:54:11 -0500

  drupal7 (7.43-1) unstable; urgency=high

    * New upstream version
    * Fixes several security vulnerabilities (SA-CORE-2016-001): File
      upload access bypass and DoS, brute force amplification attack via
      XML-RPC, open redirect via path manipulation, reflected file
      download, wrong modes set on some user accounts setting saves,
      information disclosure of email addresses
    * Several non-security bugfixes from 7.42 included
    * Fix typo in README.Debian
    * Add several needed lintian overrides

   -- Gunnar Wolf <gwolf at debian.org>  Thu, 25 Feb 2016 22:43:55 -0600

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/drupal7/+bug/1582340/+subscriptions



More information about the Ubuntu-sponsors mailing list