Re: jessie-backport of WordPress for DSA 3997-1?
On 20 Oct 2017, at 18:06, Rodrigo Campos <email@example.com> wrote:
> On Fri, Oct 20, 2017 at 04:55:04PM +0100, Jim Leek wrote:
>> Hi Rodrigo,
>> is 4.8.2+dfsg-2 the correct version for the jessie-backport?
> Sorry, not sure what you mean.
> 4.8.2+dfsg-2 is the latest version in unstable and testing now, right? That is
> what I say I can backport to jessie.
No. Packages in jessie-backports, aka *old*stable, must come from stretch, aka
*stable*, which is currently on 4.7.5+dfsg-2+deb9u1 and contains the security
fixes you're after. That is the version that should be backported.
NB: You *can* backport from testing to oldstable, but those belong in
oldstable-backports-sloppy, and should be avoided if possible as upgrades
can become more complicated.