Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.security > #4932 > unrolled thread

Call for testing: upcoming wordpress security update

Back to article view | Back to linux.debian.security

Contents

  Call for testing: upcoming wordpress security update Salvatore Bonaccorso <carnil@debian.org> - 2016-08-01 10:30 +0200
    Re: Call for testing: upcoming wordpress security update donoban <donoban@riseup.net> - 2016-08-01 11:40 +0200
      Re: Call for testing: upcoming wordpress security update donoban <donoban@riseup.net> - 2016-08-02 16:20 +0200
        Re: Call for testing: upcoming wordpress security update Jakub Wilk <jwilk@debian.org> - 2016-08-02 16:40 +0200
          Re: Call for testing: upcoming wordpress security update donoban <donoban@riseup.net> - 2016-08-02 17:30 +0200
            Re: Call for testing: upcoming wordpress security update Paul Wise <pabs@debian.org> - 2016-08-02 18:00 +0200
          Re: Call for testing: upcoming wordpress security update Holger Levsen <holger@layer-acht.org> - 2016-08-02 19:20 +0200
        Re: Call for testing: upcoming wordpress security update Craig Small <csmall@debian.org> - 2016-08-04 13:30 +0200

#4932 — Call for testing: upcoming wordpress security update

[Multipart message — attachments visible in raw view] — view raw

Hi

We would like to expose the packages for the upcoming wordpress update
a bit for additional testing. Please find them at

https://people.debian.org/~carnil/tmp/wordpress

and report any problem *introduced* by updating to these packages
directly to team@security.debian.org and including Craig Small
<csmall@debian.org> .

Thanks in advance,

Regards,
Salvatore

[toc] | [next] | [standalone]

#4933

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 08/01/2016 10:28 AM, Salvatore Bonaccorso wrote:
> Hi
> 
> We would like to expose the packages for the upcoming wordpress
> update a bit for additional testing. Please find them at
> 
> https://people.debian.org/~carnil/tmp/wordpress
> 
> and report any problem *introduced* by updating to these packages 
> directly to team@security.debian.org and including Craig Small 
> <csmall@debian.org> .
> 
> Thanks in advance,
> 
> Regards, Salvatore
> 

Hi,

Pretty off-topic, time ago I read this on Debian wiki:

wiki.debian.org/WordPress#Upgrading_the_installed_WordPress_version

When I saw it I thought, "this breaks the Debian package upgrade
policy, but maybe this package is an exception".

Now your email confirms WordPress packages respect Debian policy and
the Wiki is wrong.

Regards.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBCAAGBQJXnxagAAoJEBQTENjj7Qilu3AP/i3AwzjGX1kER8ZMSniAx5jD
aBdIGd7XRnCBF9bOBdq114Z9yheCCaMayUNqKHtSXQVPOp6dQNKmx1xp5HPW+8FD
NaILwsgRQtOVoOvSFiDP2ZXZNqNhxN4pm6qEZYgaIj7dpbCMtEDt04mt4oj9Y3vT
spmx+hk08Kdx2B4Xo1bt2gkU5MyOygPBOkWf7DqYVE62BQXzFfBxBThT1eXEBDcV
TCtcXgB2hfsf4+lqVarbKbXvohNO5Wpv0tx/Cw+x/Z45NcVgOD8G9g04p7yH/3Am
KEOvIXhDv/XH7oWsePubySd0AQunKz8Tj4SrskT5PEgLbp2A6IUZ5zGsWOaNm68h
b+Fm3WIuHrXDu4kZnpCAeB+7HpN9LsltjQmVHD/Zv/8m/3yraUZ3DhuRmS7QZ6xQ
ZcdqDmXoZY/phYAViECCfQjCwTIGsjpmB/8OpoAE4dF/38ylzk8COZvvk6S8VQQc
xciHKmV0pmpF3Mm3gBIXazxSJ3Wz8gV+5AYd2vw/0GkZT7O7xnQtXxXTqq6jeNi1
8aY6JAN5b4TJc6Fs9MUbiOqlc5M6kGnkPoiO2aYW+ty/BZ6lsiooWTqJtuzcQQWG
25nkc3m8ES1VUxtuOHfJYGtlGxxEaTtre9p3qZ/AfrYfWF3N+7fOCDxTie9RULpy
cOpE6Rp94EoJRj9gE9U6
=ztRK
-----END PGP SIGNATURE-----

[toc] | [prev] | [next] | [standalone]

#4936

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 08/01/2016 11:30 AM, donoban wrote:
> On 08/01/2016 10:28 AM, Salvatore Bonaccorso wrote:
>> Hi
> 
>> We would like to expose the packages for the upcoming wordpress 
>> update a bit for additional testing. Please find them at
> 
>> https://people.debian.org/~carnil/tmp/wordpress
> 
>> and report any problem *introduced* by updating to these packages
>>  directly to team@security.debian.org and including Craig Small 
>> <csmall@debian.org> .
> 
>> Thanks in advance,
> 
>> Regards, Salvatore
> 
> 
> Hi,
> 
> Pretty off-topic, time ago I read this on Debian wiki:
> 
> wiki.debian.org/WordPress#Upgrading_the_installed_WordPress_version
>
>  When I saw it I thought, "this breaks the Debian package upgrade 
> policy, but maybe this package is an exception".
> 
> Now your email confirms WordPress packages respect Debian policy
> and the Wiki is wrong.
> 
> Regards.
> 

You spend a lot of time and effort backporting bugfixes for old
versions of programs and then your Wiki says: "Ey dude, delete all
this stuff an download it from upstream".
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=ArAe
-----END PGP SIGNATURE-----

[toc] | [prev] | [next] | [standalone]

#4937

* donoban <donoban@riseup.net>, 2016-08-02, 16:09:
>You spend a lot of time and effort backporting bugfixes for old 
>versions of programs and then your Wiki says: "Ey dude, delete all this 
>stuff an download it from upstream".

Wiki is world-writable. It's safe to assume that everything there is 
nonsense unless proven otherwise.

-- 
Jakub Wilk

[toc] | [prev] | [next] | [standalone]

#4938

On 08/02/2016 04:37 PM, Jakub Wilk wrote:
> Wiki is world-writable. It's safe to assume that everything there is
> nonsense unless proven otherwise.

Not so world-writable:
"Account creation failed: Due to an ongoing spam attack, this wiki is
configured to not automatically create wiki accounts for some users.
Please contact wiki@debian.org first if you wish to create an account,
and describe what you want to do in the wiki.."

Well, the Wiki is wrong, as I've already supposed. What I did not
imagine is that this does not worry anyone.

[toc] | [prev] | [next] | [standalone]

#4939

On Tue, Aug 2, 2016 at 11:27 PM, donoban wrote:

> Not so world-writable:
> "Account creation failed: Due to an ongoing spam attack, this wiki is
> configured to not automatically create wiki accounts for some users.
> Please contact wiki@debian.org first if you wish to create an account,
> and describe what you want to do in the wiki.."

I've just whitelisted your email now so things should work OK if you
try to register again. Please let us know if you have any problems.

-- 
bye,
pabs

https://wiki.debian.org/PaulWise

[toc] | [prev] | [next] | [standalone]

#4940

[Multipart message — attachments visible in raw view] — view raw

On Tue, Aug 02, 2016 at 04:37:31PM +0200, Jakub Wilk wrote:
> Wiki is world-writable. It's safe to assume that everything there is
> nonsense unless proven otherwise.
 
It's also safe to assume that we'll al die one day, though that's also
not very helpful.

A useful first step to assess the qualilty of the information on any given page
on wiki.d.o is usually to look at the page history and see who edited
it.


-- 
cheers,
	Holger

[toc] | [prev] | [next] | [standalone]

#4955

[Multipart message — attachments visible in raw view] — view raw

I probably should login and fix that.

On Wed, Aug 3, 2016 at 12:09 AM donoban <donoban@riseup.net> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> On 08/01/2016 11:30 AM, donoban wrote:
> > On 08/01/2016 10:28 AM, Salvatore Bonaccorso wrote:
> >> Hi
> >
> >> We would like to expose the packages for the upcoming wordpress
> >> update a bit for additional testing. Please find them at
> >
> >> https://people.debian.org/~carnil/tmp/wordpress
> >
> >> and report any problem *introduced* by updating to these packages
> >>  directly to team@security.debian.org and including Craig Small
> >> <csmall@debian.org> .
> >
> >> Thanks in advance,
> >
> >> Regards, Salvatore
> >
> >
> > Hi,
> >
> > Pretty off-topic, time ago I read this on Debian wiki:
> >
> > wiki.debian.org/WordPress#Upgrading_the_installed_WordPress_version
> >
> >  When I saw it I thought, "this breaks the Debian package upgrade
> > policy, but maybe this package is an exception".
> >
> > Now your email confirms WordPress packages respect Debian policy
> > and the Wiki is wrong.
> >
> > Regards.
> >
>
> You spend a lot of time and effort backporting bugfixes for old
> versions of programs and then your Wiki says: "Ey dude, delete all
> this stuff an download it from upstream".
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2
>
> iQIcBAEBCAAGBQJXoKmDAAoJEBQTENjj7Qilz/UP/iGtpDZJ69JJByXMnxNa/7eS
> Axe+wbbrVtsrhVENOvF5QkS8O4oASEnonx3IuWT7ZDN2T4SuYTNwaKIPfYk0Hhlj
> pS3qh/7oyp2g/VPAWpU5u20NMIVTpMXlvJrqFgoyans5/f1N+YBKkYbAv11p9ok3
> JDnYYzuWvZFUGdL4exvvmXJ9VZpngH5N6NE2k/8g1TSsKq4WI68El5f3QFgboZZv
> s3powMQQld1C4YeTxkw4UISBQ7GJPC8QRO+zDE0ekBGtkPvME4gVQBsRpgMCtAGC
> MBHbhWOwUTCAl7TSIBwEw3GxigVgnYEG6s4D9DA8iE5FB+oXt4Kmb2B0XHbiyLTN
> VYZ7js/f4WMqNncadfLCGKpJn4QfJHXhI6StZ0szqoJwspyXTshFHneaqZCXNCJ3
> 82qnNEVAkXhV5/95U3YJ1bYUSVv63P/ynV10/XuYPRU6h2Q8yzGHX1SNoWr/yfdl
> g59jEIGLMqjA0D/aA5fIgohP/MVgPFuGoNvxRR13fTgF3JtgnDw9eksgQCKY1GzG
> IoTygfa/l35ICcV5Cvbz7UugHx4hjnZvMSnlTpuel+t/EQPKf5B/mFeRdGDNGxGD
> /90oisr9Zp3QlIOiBRjOAkpm7tvA6bHBP3dNtVXWvav1Ob7IItVKTEwoT/ebEAez
> uRSucg2npQIVSdXaEwTT
> =ArAe
> -----END PGP SIGNATURE-----
>

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.security

csiph-web