[Pkg-owncloud-maintainers] Owncloud / security support

[David Prévot]

Hi Moritz,

Thanks for your quick reply.

Le 28/08/2014 12:27, Moritz Mühlenhoff a écrit :
> On Wed, Aug 27, 2014 at 06:30:44PM -0400, David Prévot wrote:
>> Le 25/03/2014 12:32, David Prévot a écrit :
>>> Le 25/03/2014 11:41, Moritz Muehlenhoff a écrit :

> What about Zend Framework, IIRC it's also entangled into owncloud?

I intend to follow up on Zend Framework too (I’ve NMUed it twice already
for security issues), and just made my intent clear in #759575.

> Could you add a README.Debian file which indicates this to users?

I’ve just added the following on top of the existing README.Debian, and
will do the same for the php-sabre* packages that will be shipped in
Jessie (“Jessie+1” will be replaced by the next stable codename once
known), thanks in advance for any fix/improvement/review/remark if you
have some:

> Security support
> ----------------
> 
> Since upstream support of ownCloud 7 will end during Jessie’s lifetime,
> security support will be provided on a best effort basis with upstream help. 
> Eventually, this package may be removed from once Jessie+1 is released if the
> security support becomes too complicated or time-consuming, so ownCloud users 
> will be advised to upgrade their servers to the new stable release.


Regards

David



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-owncloud-maintainers/attachments/20140828/30460e49/attachment.sig>