Accepted wordpress 4.1.31+dfsg-0+deb8u1 (source all) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 01 Jul 2020 14:29:08 +0530
Source: wordpress
Binary: wordpress wordpress-l10n wordpress-theme-twentyfifteen wordpress-theme-twentyfourteen wordpress-theme-twentythirteen
Architecture: source all
Version: 4.1.31+dfsg-0+deb8u1
Distribution: jessie-security
Urgency: high
Maintainer: Craig Small <csmall@debian.org>
Changed-By: Utkarsh Gupta <utkarsh@debian.org>
Description:
wordpress - weblog manager
wordpress-l10n - weblog manager - language files
wordpress-theme-twentyfifteen - weblog manager - twentytfifteen theme files
wordpress-theme-twentyfourteen - weblog manager - twentyfourteen theme files
wordpress-theme-twentythirteen - weblog manager - twentythirteen theme files
Closes: 962685
Changes:
wordpress (4.1.31+dfsg-0+deb8u1) jessie-security; urgency=high
.
* Non-maintainer upload by the LTS Team.
* New upstream version 4.1.31+dfsg.
* Security release, fixes 6 security bugs (Closes: #962685)
- CVE-2020-4046
Authenticated XSS through embed block.
- CVE-2020-4047
Authenticated XSS via media attachment page.
- CVE-2020-4048
Open redirect in wp_validate_redirect().
- CVE-2020-4049
Authenticated self-XSS via theme uploads.
- CVE-2020-4050
'set-screen-option' filter misuse by plugins leading to privilege
escalation.
* Prevent unmoderated comments from search engine indexation.
Checksums-Sha1:
5796a35b71b460f4851c35f38b8832c749217e42 2597 wordpress_4.1.31+dfsg-0+deb8u1.dsc
e1f68c7b5fc14ab750fa6f966453a21af8a6d9d9 4650088 wordpress_4.1.31+dfsg.orig.tar.xz
66e5d9f17bc060e9ef6a8d49dad25a799be463f7 6043488 wordpress_4.1.31+dfsg-0+deb8u1.debian.tar.xz
9d6fdbfa4cac40b217db749677474e5e1c781098 3092648 wordpress_4.1.31+dfsg-0+deb8u1_all.deb
6c9bde750cbde39f8d93ccedd9c3e14c758b75d2 4240952 wordpress-l10n_4.1.31+dfsg-0+deb8u1_all.deb
1648207746be54534746758888c3ad19f9ae6632 506060 wordpress-theme-twentyfifteen_4.1.31+dfsg-0+deb8u1_all.deb
b49aa6a306f54f7dfabbd5324f5e0764cd5861dc 805018 wordpress-theme-twentyfourteen_4.1.31+dfsg-0+deb8u1_all.deb
4cd213bf70fb104efbb483518d3f8dd94f57e40d 324566 wordpress-theme-twentythirteen_4.1.31+dfsg-0+deb8u1_all.deb
Checksums-Sha256:
2a01d495ae9cfbf284c63272e0e64ffca427237c46894e99ebd3c2b4bab7d6d8 2597 wordpress_4.1.31+dfsg-0+deb8u1.dsc
636e3595fc0c696f91f62f2639ec8cfe0df7b539ebe15cab9401150b74b766e8 4650088 wordpress_4.1.31+dfsg.orig.tar.xz
97d2b9f6332938608a48ba37abb8ab802f3ee3f49bd2701d42709b90a512a47a 6043488 wordpress_4.1.31+dfsg-0+deb8u1.debian.tar.xz
344ea3f250c50ef532e88e15285505ed74dff359f83aa7469292344cc990f0f8 3092648 wordpress_4.1.31+dfsg-0+deb8u1_all.deb
c2ab882f1f0f41871080998c5af9f6e33e951d20d039536b819613446ba0da94 4240952 wordpress-l10n_4.1.31+dfsg-0+deb8u1_all.deb
416e054e227f2d5ffc06b4672d4698c6bd9d33b3b05731d03a3b6d94a5752692 506060 wordpress-theme-twentyfifteen_4.1.31+dfsg-0+deb8u1_all.deb
6b37017de3fc75078279658e998bbc7219b68797b760b417b214363f9b74f3a9 805018 wordpress-theme-twentyfourteen_4.1.31+dfsg-0+deb8u1_all.deb
2eeb0315b0c49b4862ccb17287ef7b0bc44366c49469965308dd5b4e958ff288 324566 wordpress-theme-twentythirteen_4.1.31+dfsg-0+deb8u1_all.deb
Files:
d70a53a2711ac29ea2322fae50d5bb9b 2597 web optional wordpress_4.1.31+dfsg-0+deb8u1.dsc
6bcda4502f3ef72c2c6ce585a4972064 4650088 web optional wordpress_4.1.31+dfsg.orig.tar.xz
3cfd4d1122d97a66757a0a636af8b2cc 6043488 web optional wordpress_4.1.31+dfsg-0+deb8u1.debian.tar.xz
7621ca8d6ef420184cb0920fb9d72354 3092648 web optional wordpress_4.1.31+dfsg-0+deb8u1_all.deb
7049786e210ffd4ede34261518276315 4240952 localization optional wordpress-l10n_4.1.31+dfsg-0+deb8u1_all.deb
fbbee0dd649b545430128ad171f3ec86 506060 web optional wordpress-theme-twentyfifteen_4.1.31+dfsg-0+deb8u1_all.deb
5c7ff0a93283a9770fe64db64c1b12ec 805018 web optional wordpress-theme-twentyfourteen_4.1.31+dfsg-0+deb8u1_all.deb
54f3b0b6b60c8d3ff4f51f6d56e038c9 324566 web optional wordpress-theme-twentythirteen_4.1.31+dfsg-0+deb8u1_all.deb
-----BEGIN PGP SIGNATURE-----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=6eIm
-----END PGP SIGNATURE-----