[Bug 900244] [NEW] Please backport openssl

2011-12-05 Thread Jon Staley
*** This bug is a security vulnerability *** Private security bug reported: Currently openssl in lucid is at version 0.9.8k, would it be possible to get a backport of the 1.0.0 series as anything less than 0.9.8r breaks PCI compliance. ** Affects: lucid-backports Importance: Undecided

[Bug 900244] Re: Please backport openssl

2011-12-05 Thread Micah Gersten
** Visibility changed to: Public ** This bug is no longer flagged as a security vulnerability -- You received this bug notification because you are a member of Ubuntu Backporters, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/900244 Title: Please backport openssl To

[Bug 900244] Re: Please backport openssl

2011-12-05 Thread Micah Gersten
Thank you for requesting this backport. It's not true that anything less than 0.9.8r breaks PCI compliance. It just breaks automated PCI compliance testing. The Ubuntu security team regularly backports patches for OpenSSL to keep the version in Lucid patched for security vulnerabilities. Also,

[Bug 900244] Re: Please backport openssl

2011-12-05 Thread Marc Deslauriers
See also our FAQ on the subject: https://wiki.ubuntu.com/SecurityTeam/FAQ#Versions -- You received this bug notification because you are a member of Ubuntu Backporters, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/900244 Title: Please backport openssl To manage

[Bug 900244] Re: Please backport openssl

2011-12-05 Thread Jon Staley
Thanks for the prompt response. This was due to automatic PCI compliance testing. I'll look through the security notices to check for the patches and or issues that have cropped up with our testing process. Thanks for the information and the security notices url, I was unaware of that. -- You

[Bug 900513] [NEW] Backport blobby 0.9c-1 from precise

2011-12-05 Thread Felix Geyer
Public bug reported: Please backport blobby 0.9c-1 from precise. I have tested that it buils, installs and runs fine. ** Affects: oneiric-backports Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Backporters, which is

[Bug 900513] Re: Backport blobby 0.9c-1 from precise

2011-12-05 Thread Micah Gersten
This seems fine except it hasn't built on armel yet in precise, let's wait for it to build there before going forward with this. Please reset to Confirmed once it's built on armel in precise. ** Changed in: oneiric-backports Status: New = Incomplete -- You received this bug notification

[Bug 315506] Re: Please backport puppet 2.6.2 or newer to hardy (LTS)

2011-12-05 Thread Colin Watson
Glenn, you subscribed me to this bug; but FYI I only fixed bug 638213 as an archive administrator acting on instructions from the ubuntu- backporters team. In this context I might as well have been a robot. I do not make decisions about backports myself (that's the ubuntu- backporters team), so

[Bug 315506] Re: Please backport puppet 2.6.2 or newer to hardy (LTS)

2011-12-05 Thread Micah Gersten
lucid-backports only has 2.6.1, if you want 2.6.2 on hardy, you'll end up with 2.6.4-2ubuntu2.6 from natty, but this must be backported to hardy, lucid, and maverick. If this is what you wish, let me know, and I'll prepare packages for you to test. -- You received this bug notification because