Sync wordpress 3.6.1 (universe) from Debian stable-security

[Jeremy Bícha]

WordPress only maintains a single stable release (like Google Chrome) and doesn't backport bug fixes or security fixes to old releases.

Debian has recently released WordPress 3.6.1, the latest security update, to both Debian Wheezy and Squeeze. Since we're in sync with Debian, we should just backport their packages.

3.6.1+dfsg-1~deb7u1 to quantal and raring
3.6.1+dfsg-1~deb6u1 to precise (the deb7 package needs newer packages than are available for precise)

http://pts.debian.net/media/packages/w/wordpress/changelog-3.6.1%2Bdfsg-1~deb7u1

Build logs at https://launchpad.net/~jbicha/+archive/dev/+packages

[Jeremy Bícha (jbicha)]

When testing with my PPA, it looks like the 3.6.1 .orig.tar.gz uploaded to saucy/sid is not the same as was uploading to Debian stable-security so a straight sync might be rejected by Launchpad.

[Marc Deslauriers (mdeslaur)]

I believe upgrading to a new release will break existing installations until an administrator does some migration work. I don't think this is acceptable as a security update.

If you feel strongly that we should update our stable releases to 3.6.1, please discuss this with the SRU team and see if it can be done with an SRU.

[Jamie Strandboge (jdstrand)]

13.10 has 3.6.1+dfsg-1.

[Steve Langasek (vorlon)]

The Precise Pangolin has reached end of life, so this bug will not be fixed for that release