--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian.org@packages.debian.org
Usertags: unblock
Please unblock package wordpress
Wordpress 4.0 which is currently in Jessie has several
security bugs, see upstream announcement at
https://wordpress.org/news/2014/11/wordpress-4-0-1/
for details. Security bug is #770425.
The Debian 4.0.1+dfsg-1 package is *only* this upstream
change, I have no fixed anything else in order to give
the smallest delta to what we already have. I not that
the debdiff shows libphp-phpmailer version bump but
version 5.2.9+dfsg-2 is in jessie so there's no problem there.
- Craig
unblock wordpress/4.0.1+dfsg-1
-- System Information:
Debian Release: jessie/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 3.16.0-4-amd64 (SMP w/6 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
File lists identical (after any substitutions)
Control files of package wordpress: lines which differ (wdiff format)
---------------------------------------------------------------------
Depends: apache2 | httpd, libapache2-mod-php5 | php5, ca-certificates, mysql-client | mariadb-client, php5-gd, php5-mysql | php5-mysqlnd, wordpress-theme-twentyfourteen, libjs-cropper (>= 1.2.2), libphp-phpmailer (>= [-5.2.8+dfsg),-] {+5.2.9+dfsg),+} libphp-snoopy (>= 1.2.4)
Installed-Size: [-15462-] {+15468+}
Version: [-4.0+dfsg-1-] {+4.0.1+dfsg-1+}
Control files of package wordpress-l10n: lines which differ (wdiff format)
--------------------------------------------------------------------------
Depends: wordpress (= [-4.0+dfsg-1)-] {+4.0.1+dfsg-1)+}
Version: [-4.0+dfsg-1-] {+4.0.1+dfsg-1+}
Control files of package wordpress-theme-twentyfourteen: lines which differ (wdiff format)
------------------------------------------------------------------------------------------
Version: [-4.0+dfsg-1-] {+4.0.1+dfsg-1+}
Control files of package wordpress-theme-twentythirteen: lines which differ (wdiff format)
------------------------------------------------------------------------------------------
Installed-Size: [-638-] {+639+}
Version: [-4.0+dfsg-1-] {+4.0.1+dfsg-1+}
Control files of package wordpress-theme-twentytwelve: lines which differ (wdiff format)
----------------------------------------------------------------------------------------
Version: [-4.0+dfsg-1-] {+4.0.1+dfsg-1+}
--- End Message ---
--- Begin Message ---
On 2014-11-23 12:54, Craig Small wrote:
> Package: release.debian.org
> Severity: normal
> User: release.debian.org@packages.debian.org
> Usertags: unblock
>
> Please unblock package wordpress
>
> Wordpress 4.0 which is currently in Jessie has several
> security bugs, see upstream announcement at
> https://wordpress.org/news/2014/11/wordpress-4-0-1/
> for details. Security bug is #770425.
>
> The Debian 4.0.1+dfsg-1 package is *only* this upstream
> change, I have no fixed anything else in order to give
> the smallest delta to what we already have. I not that
> the debdiff shows libphp-phpmailer version bump but
> version 5.2.9+dfsg-2 is in jessie so there's no problem there.
>
> - Craig
>
> unblock wordpress/4.0.1+dfsg-1
>
> [...]
Unblocked, thanks.
For future reference, please include the source debdiff next time
(possibly, along with the binary debdiffs).
~Niels
--- End Message ---