Re: gifsicle update

[Alexander Wirt <formorer@formorer.de>]

On Fri, 12 Jan 2018, Herbert Fortes wrote:

Hi,

> Gifsicle just accepted security fix[0]. And there is
> a backport in oldstable - 1.88-3~bpo8+1 - that I 
> did in the past.
> 
> [0] - https://security-tracker.debian.org/tracker/source-package/gifsicle
> 
> I want to update the package. And so, I only need
> to get the source which is in backport and put the patch
> there. The debian /changelog will look like this:
> 
> +gifsicle (1.88-3~bpo8+2) jessie-backports; urgency=medium
> +
> +  * Closes: CVE-2017-1000421
> +
> + -- Herbert Parentes Fortes Neto <hpfn@debian.org>  DATE
> +
> gifsicle (1.88-3~bpo8+1) jessie-backports; urgency=medium
> 
>   * Rebuild for jessie-backports. 
> 
>  -- Herbert Parentes Fortes Neto <hpfn@debian.org>  Sun, 11 Jun 2017 08:59:03 -0300
> 
> 
> Or I need to get the source from Jessie? If so, please
> tell me how the debian/changelog entry needs to be. I
> am worry about the version number.
Source for backports to oldstable is jessie. So please do backport 1.88-3+deb9u1

Alex