Hi Disclaimer: I'm not a member of release team, so this is not binding statement :-)
On Thu, Jan 05, 2017 at 01:01:10AM -0500, Harlan Lieberman-Berg wrote: > > Package: release.debian.org > Severity: normal > Tags: jessie > User: release.debian....@packages.debian.org > Usertags: pu > > In order to fix two CVEs deemed not important enough for DSAs, I have prepared > a new version of jq (1.4-2.2) for p-u. Debdiff from version in stable is > attached. > > Can upload to s-p-u if the debdiff looks good to you. > > diff -Nru jq-1.4/debian/changelog jq-1.4/debian/changelog > --- jq-1.4/debian/changelog 2014-07-21 02:53:57.000000000 -0400 > +++ jq-1.4/debian/changelog 2017-01-05 00:26:08.000000000 -0500 > @@ -1,3 +1,11 @@ > +jq (1.4-2.2) jessie; urgency=high Even though that is possible in this case, since 1.4-2.2 never in the archive I would suggest to use the convention 1.4-2.1+deb8u1 for the upload. Regards, Salvatore
