IRC logs for #aegir, 2019-12-19 (GMT)

2019-12-18
2019-12-20
TimeNickMessage
[11:36:34]* siliconmeadow has quit (Quit: Connection closed for inactivity)
[20:22:44]* Shwele has joined #aegir
[20:23:22]<Shwele>heya guys. Security upgrade is up for drupal, when can we expect aegir upgrade?
[20:23:34]<Shwele>or is it out already, didn't check yet
[23:47:52]<colan[m]>Isn't that only for D8?
[23:48:12]<colan[m]>Shwele ^^^^
[23:48:57]<Shwele>think not, sec
[23:49:12]* shaneonabike has joined #aegir
[23:50:07]<Shwele>https://www.drupal.org/project/drupal/releases/7.69
[23:50:13]<Shwele>it was released yesterday
[23:53:27]* shaneonabike has left #aegir ()
[00:10:00]<Shwele>Also, I have been experiencing a weird bug with crons on aegir. If you got time colan or bgm, or xuri, would be nice to have a short discussion.
[00:17:34]<colan[m]>Shwele The only one for D7 states:
[00:17:34]<colan[m]>"Multiple vulnerabilities are possible if Drupal is configured to allow .tar, .tar.gz, .bz2 or .tlz file uploads and processes them."
[00:18:03]<colan[m]>I don't believe Aegir does that, in core at least.
[00:18:21]<colan[m]>So not urgent I'm thinking.
[00:19:30]<colan[m]>Post your issue somewhere so we can have a look?
[00:19:42]<Shwele>Good then, at least was vigilant about it.
[00:19:54]<Shwele>When you say post, drupal7 forums, on aegir?
[00:20:57]<colan[m]>I mean explain the issue somewhere. ๐Ÿ˜€
[00:21:11]<Shwele>will do and post it here :)
[00:21:29]<colan[m]>๐Ÿ‘
[00:29:24]<jonpugh[m]>@helmo42:matrix.org: are you able to coordinate a release today? I can assist
[00:30:19]<jonpugh[m]>Perhaps after we can try out 4.x branch and get it in CI
[00:44:19]* shaneonabike has joined #aegir
[00:44:21]* shaneonabike has left #aegir ()
[01:01:31]<viashimo_>jonpugh[m]: is aegir 4.x supporting both d7 and d8?
[01:07:25]<jonpugh[m]>Of course :)
[01:07:44]<jonpugh[m]>It's just a quick port to switch to Provision4 CLI
[01:08:25]<helmo42[m]>jonpugh: Yeah, we should try to do a release. Not sure though of an 3.19 is viable or better to just do a quick 3.18.4 with just the security update of core
[01:08:51]<jonpugh[m]>Yeah, lots of potential patches to approve
[01:09:00]<jonpugh[m]>Get the update out the door first
[01:11:03]<viashimo_>jonpugh[m]: cool
[01:13:49]<viashimo_>jonpugh[m]: are there any considerations upgading from 3.x to 4.x? I'd be interesting in trying to get it on a dev server here so that folks can put it through it's paces
[01:13:57]<viashimo_>interested*
[01:14:29]* bgm has joined #aegir
[01:16:34]* bgm has quit (Client Quit)
[01:27:57]<jonpugh[m]>Good to know, it will need testers
[01:28:12]<jonpugh[m]>It's not been in active development for some time, but that's about to change
[03:32:22]* Shwele has quit (Quit: Leaving)
[03:46:07]* siliconmeadow has joined #aegir
[04:06:35]* shaneonabike has joined #aegir
[06:02:11]<helmo42[m]>Pipeline is now running for a 3.18.4 release that includes 7.69
[06:02:13]<helmo42[m]>https://gitlab.com/aegir/provision/pipelines/104445405
[06:32:48]* shaneonabike has left #aegir ()
[06:39:33]<helmo42[m]>The build is complete but my first manual test is failing ... although that seems to be an issue of my mesy dev vm. Moving on to another vm
[06:44:27]* azend|vps has joined #aegir
[06:49:37]<helmo42[m]>Next test went OK ... 3.18.4 is not in the stable deb repo.
[06:50:10]<viashimo_>not, or now?
[06:50:51]<helmo42[m]>now
[06:50:59]<helmo42[m]>typo ;(
[06:51:36]<viashimo_>np, just wanted to check
[06:51:44]<viashimo_>helmo42[m]: thanks for your work!
[07:18:45]* fndtn357[m] has quit (*.net *.split)
[09:04:56]* TaoStyle has joined #aegir