Re: owncloud updates

2013-05-09 Thread Jonathan Riddell
Any movement on this? Can I update to newer versions as SRUs or shall I
upload empty packages as SRUs?

Jonathan



On 18 April 2013 16:11, Jonathan Riddell j...@jriddell.org wrote:

 Owncloud is a package which doesn't like to work on our 6 monthly
 timetable.  It has many security vulnerabilities and 3rd party php and
 javascript libraries which are often not packaged in older versions of
 Ubuntu.  It's been suggested that the tech board might allow it to be
 updated wholesale to new versions including adding the shipped 3rd party
 libraries to the package as needed, so I've prepared these

 https://bugs.launchpad.net/ubuntu/+source/owncloud/+bug/1079150

 Does the tech board approve of updating these as a SRU?

 Jonathan


-- 
technical-board mailing list
technical-board@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/technical-board


owncloud updates

2013-04-22 Thread Jonathan Riddell
Owncloud is a package which doesn't like to work on our 6 monthly
timetable.  It has many security vulnerabilities and 3rd party php and
javascript libraries which are often not packaged in older versions of
Ubuntu.  It's been suggested that the tech board might allow it to be
updated wholesale to new versions including adding the shipped 3rd party
libraries to the package as needed, so I've prepared these

https://bugs.launchpad.net/ubuntu/+source/owncloud/+bug/1079150

Does the tech board approve of updating these as a SRU?

Jonathan
-- 
technical-board mailing list
technical-board@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/technical-board


Re: owncloud updates

2013-04-22 Thread Kees Cook
On Thu, Apr 18, 2013 at 04:11:49PM +0100, Jonathan Riddell wrote:
 Owncloud is a package which doesn't like to work on our 6 monthly
 timetable.  It has many security vulnerabilities and 3rd party php and
 javascript libraries which are often not packaged in older versions of
 Ubuntu.  It's been suggested that the tech board might allow it to be
 updated wholesale to new versions including adding the shipped 3rd party
 libraries to the package as needed, so I've prepared these
 
 https://bugs.launchpad.net/ubuntu/+source/owncloud/+bug/1079150
 
 Does the tech board approve of updating these as a SRU?

Is there any hope of having the security problems in the libraries fixed
directly? That would be much nicer; it'd fix anyone using those libraries
beyond just owncloud...

-Kees

-- 
Kees Cook

-- 
technical-board mailing list
technical-board@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/technical-board