[Pkg-owncloud-maintainers] Bug#769471: unblock: owncloud/7.0.3+dfsg-1

David Prévot taffit at debian.org
Thu Nov 13 21:21:32 UTC 2014


Package: release.debian.org
Severity: normal
User: release.debian.org at packages.debian.org
Usertags: unblock

TL;DR: upstream point release update with security fixes

Hi,

Please unblock package owncloud

The 7.0.3 upstream point release was expected on October 22nd (just in
time for the freeze), but was delayed until today to properly fix some
bugs. Furthermore, “Several security fixes” were added on last minute.

In order to minimize the debdiff proposed today, I’ve uploaded in time
for Jessie a pre-rc2 version on October 24th, still, the filtered
debdiff is bigger than I would have hopped:

	65 files changed, 678 insertions(+), 208 deletions(-)

As shown by the binary debdiff in P.-S., only two files are actually
added (besides l10n changes). Because I believe shipping an actual point
release version (instead of an homemade pre-rc one) would be best, and
to be on the safe side of including all security fixes (that will only
be disclosed in two weeks per upstream policy) rather sooner than
latter, I kindly ask you to consider this unusual request (I should
probably have asked for a pre-approval earlier, but I already pushed the
rc3 to Sid in the hope of gathering as much testing as possible.

The attached debdiff is filtered using the command:

debdiff --ignore-space ../owncloud_7.0.3{~rc2~20141023,}+dfsg-1.dsc | \
	filterdiff -x '*/core/doc/*' \
	-x '*/*/l10n/*' -x '*/apps/*/l10n/*' \
	-x'*/apps/*/tests/*' -x'*3rdparty/phpass/c/*'

- the documentation ('*/core/doc/*') change is irrelevant, since it’s
  provided by owncloud-doc anyway (bug report follows);
- the localisation changes are filtered away too;
- the tests are not shipped (nor used at build time yet since they rely
  on an installed ownCloud instance), and the removed phpass/c files
  upstream were already removed from the binary Debian package.

The full Debian changelog entries follows. The changes are kept minimal
within the (debian/) packaging, here are the rationales:

  * Restrict php-aws-sdk version
(php-aws-sdk 3 was recently uploaded to experimental, but is not
 backward compatible withe the version 2. currently needed, as provided
 in Jessie)

  * Update documentation from Jessie+1 to Stretch             
(Just clarifies the release names in README.Debian)

  * Update upstream changelog
(Updates the date and adds an entry about security fixes)

  * Refresh patches
(Just hunks)

  * Drop new JSON and JavaScript translation sources
(The translation sources are not shipped in the binary package, this
 changes makes sure this affirmation stays true).

owncloud (7.0.3+dfsg-1) unstable; urgency=medium

  [ David Prévot ]
  * Restrict php-aws-sdk version
  * Update documentation from Jessie+1 to Stretch
  * Update upstream changelog

  [ Frank Karlitschek ]
  * 7.0.3

  [ Vincent Petry ]
  * Convert StorageNotAvailableException to SabreDAV exception

  [ Lukas Reschke ]
  * Use proper array key

  [ Thomas Müller ]
  * Ensure there is a connection object within \OC_DB::enableCaching()

 -- David Prévot <taffit at debian.org>  Thu, 13 Nov 2014 13:49:51 -0400

owncloud (7.0.3~rc3+dfsg-1) unstable; urgency=medium

  * Upload to unstable in order to gather as much testing as possible before
    proposing the final version (to the release team) for Jessie

  [ Jörn Friedrich Dreyer ]
  * fix files_external storage id migration
  * allow passing driver options, fixes #11718
  * add driver options to config samples

  [ Vincent Petry ]
  * Properly register sharing hooks and proxies
  * Check for cert bundle existence before using it
  * Store curl error message directly

  [ Frank Karlitschek ]
  * 7.0.3 RC3

  [ David Prévot ]
  * Refresh patches
  * Drop new JSON and JavaScript translation sources

 -- David Prévot <taffit at debian.org>  Fri, 07 Nov 2014 06:49:19 -0400

owncloud (7.0.3~rc2+dfsg-1) experimental; urgency=medium

  * Upload to experimental not to prevent the migration of the previous
    version into testing

  [ Frank Karlitschek ]
  * 7.0.3RC1

  [ David Prévot ]
  * Refresh patches

 -- David Prévot <taffit at debian.org>  Thu, 30 Oct 2014 15:36:06 -0400

unblock owncloud/7.0.3+dfsg-1

Thanks a lot in advance for considering.

Regards

David

P.-S.: $ debdiff ../owncloud_7.0.3{~rc2~20141023,}+dfsg-1_amd64.changes 
[The following lists of changes regard files as different if they have
different names, permissions or owners.]

Files in second .changes but not in first
-----------------------------------------
-rw-r--r--  root/root   /usr/share/owncloud/apps/bookmarks/l10n/az.php
-rw-r--r--  root/root   /usr/share/owncloud/apps/bookmarks/l10n/bn_IN.php
-rw-r--r--  root/root   /usr/share/owncloud/apps/bookmarks/l10n/ta_IN.php
-rw-r--r--  root/root   /usr/share/owncloud/lib/private/db/adaptermysql.php
-rw-r--r--  root/root   /usr/share/owncloud/lib/private/db/sqlitesessioninit.php

Files in first .changes but not in second
-----------------------------------------
-rw-r--r--  root/root   /usr/share/owncloud/apps/bookmarks/l10n/ja_JP.php
-rw-r--r--  root/root   /usr/share/owncloud/apps/bookmarks/l10n/zh_CN.GB2312.php

Control files: lines which differ (wdiff format)
------------------------------------------------
Installed-Size: [-26652-] {+26674+}
Recommends: exim4 | mail-transport-agent, [-php-aws-sdk,-] {+php-aws-sdk (<< 3),+} php-crypt-blowfish (>= 1.1.0~RC2-2~), php-dropbox, php-google-api-php-client (<< 1), php5-apcu | php5-xcache, php5-cli, php5-curl, php5-intl, php5-ldap, php5-mcrypt, smbclient
Version: [-7.0.3~rc2~20141023+dfsg-1-] {+7.0.3+dfsg-1+}
-------------- next part --------------
A non-text attachment was scrubbed...
Name: oc.diff
Type: text/x-diff
Size: 140436 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-owncloud-maintainers/attachments/20141113/87cc8e62/attachment-0001.diff>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-owncloud-maintainers/attachments/20141113/87cc8e62/attachment-0001.sig>


More information about the Pkg-owncloud-maintainers mailing list