Re: Accepted wordpress 4.5.2+dfsg-1~bpo8+1 (source all) into jessie-backports
On Mon, 09 May 2016, Rodrigo Campos wrote:
> On Sun, May 08, 2016 at 07:37:57AM +0200, Alexander Wirt wrote:
> > On Sun, 08 May 2016, Craig Small wrote:
> >
> > > The changelog for 4.5.2+dfsg-1 mentions it fixes a XSS attack,
> > > 4.5.2+dfsg-1~bpo8-1 is the backport of that same package. Is that enough,
> > > or you want the bpo change to mention its a security release?
> > Yes. And don't forget http://backports.debian.org/Contribute/#index3h2
>
> Yes it's enough, or yes the bpo changelog should mention it also?
Yes, please include it in the changelog.
>
> Will do the BSA the next time! Should Craig, the sponsor, request it? (I'm not
> sure, but it says "If you upload...", so I guess it is. But just to be sure)
No, do it know. You can use 110 as BSA number,
Alex
Reply to: