Re: Accepted wordpress 4.5.2+dfsg-1~bpo8+1 (source all) into jessie-backports

[Rodrigo Campos <rodrigo@sdfg.com.ar>]

On Sun, May 08, 2016 at 07:37:57AM +0200, Alexander Wirt wrote:
> On Sun, 08 May 2016, Craig Small wrote:
> 
> > The changelog for 4.5.2+dfsg-1 mentions it fixes a XSS attack,
> > 4.5.2+dfsg-1~bpo8-1 is the backport of that same package. Is that enough,
> > or you want the bpo change to mention its a security release?
> Yes. And don't forget http://backports.debian.org/Contribute/#index3h2

Yes it's enough, or yes the bpo changelog should mention it also?

Will do the BSA the next time! Should Craig, the sponsor, request it? (I'm not
sure, but it says "If you upload...", so I guess it is. But just to be sure)



Thanks a lot,
Rodrigo