Re: jessie-backport of WordPress for DSA 3997-1?
On 20 Oct 2017, at 18:06, Rodrigo Campos <rodrigo@sdfg.com.ar> wrote:
>
> On Fri, Oct 20, 2017 at 04:55:04PM +0100, Jim Leek wrote:
>> Hi Rodrigo,
>>
>> is 4.8.2+dfsg-2 the correct version for the jessie-backport?
>
> Sorry, not sure what you mean.
>
> 4.8.2+dfsg-2 is the latest version in unstable and testing now, right? That is
> what I say I can backport to jessie.
No. Packages in jessie-backports, aka *old*stable, must come from stretch, aka
*stable*, which is currently on 4.7.5+dfsg-2+deb9u1 and contains the security
fixes you're after. That is the version that should be backported.
Regards,
James
NB: You *can* backport from testing to oldstable, but those belong in
oldstable-backports-sloppy, and should be avoided if possible as upgrades
can become more complicated.
Reply to: