Hi - I've reviewed, built (with some changes), and tested the debdiffs
and now I'm about to publish what I have. The changes that I made are:

 - I didn't feel like the Landscape changes were appropriate for a security 
update and dropped those patches
   + The SRU process is more appropriate for those changes
   + I considered leaving them in but ultimately decided that I didn't have a 
way to easily test the changes
 - The versioning needed to be adjusted, the pocket needed to be set to 
RELEASE-security, and the changelog formatting needed a bit of adjusting, as 
well
   + See https://wiki.ubuntu.com/SecurityTeam/UpdatePreparation#Packaging for 
details
 - The patch descriptions for CVE-2015-7529 were updated to make it clear that 
08121d87 "[sosreport] clean up private temporary directory" had also been 
applied
 - The 14.04 debdiff was updated to fix CVE-2014-0246
 - The 14.04 debdiff for CVE-2015-7529 was missing a description

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2015-7529

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1525271

Title:
  CVE-2015-7529 needs to be backported to supported releases

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sosreport/+bug/1525271/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to