Bug#827111: jessie-pu: package exim4/4.84.2-2

["Adam D. Barratt" <adam@adam-barratt.org.uk>]

[CC += team@security]

On Mon, 2016-07-25 at 19:35 +0200, Andreas Metzler wrote:
> now we have 4.84.2-1+deb8u1 in stable security and 4.84.2-2 in spu would
> overwrite it at the next stable release. How do I fix this properly?

:-(

The DSA claims -2+deb8u1 was released, but that's clearly incorrect.

> a) Redo 4.84.2-2 with 4.84.2-1+deb8u1 merged in

Packages in p-u have been built on buildds, are already on mirrors and
may be on users' systems, so this is a no-go

> b) Release 4.84.2-3 with 4.84.2-1+deb8u1 merged in

Could we have a debdiff of that option, just to check that we're on the
same page as to exactly what that means, please?

Regards,

Adam