-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 09 Oct 2025 20:03:14 +1100
Source: wordpress
Architecture: source
Version: 6.8.3+dfsg1-1
Distribution: unstable
Urgency: medium
Maintainer: Craig Small <csmall@debian.org>
Changed-By: Craig Small <csmall@debian.org>
Closes: 1117047
Changes:
wordpress (6.8.3+dfsg1-1) unstable; urgency=medium
.
* New upstream security release Closes: #1117047
Fixes the following CVEs:
- Stored XSS in nav menus CVE-2025-58674
- Data exposure CVE-2025-58246
* Update copyright files to use download links
Checksums-Sha1:
4756579a9ab7a95d138ae855a1ca169d6e851943 2422 wordpress_6.8.3+dfsg1-1.dsc
5c2771f2140ba44f1b7e7f324ccecdf4d6eb2a5c 22351292 wordpress_6.8.3+dfsg1.orig.tar.xz
f06be9dac354ce312969f0f68d0bc49fddaf082d 6912896 wordpress_6.8.3+dfsg1-1.debian.tar.xz
29558c3d0a4599845a74ee2934e668c231c5883b 7588 wordpress_6.8.3+dfsg1-1_amd64.buildinfo
Checksums-Sha256:
491ff8d3406e4036db98bfcd1a377315f5b0b3f26481f00a09ddfde15af3f7b6 2422 wordpress_6.8.3+dfsg1-1.dsc
97c8d75a3e18c848434ff250f4461184730a9c8094402fa61a57714cfce724db 22351292 wordpress_6.8.3+dfsg1.orig.tar.xz
0cce628f62a1aff2356629a238cc47f45d1136f60edf910fe9a3bd4fa67109fb 6912896 wordpress_6.8.3+dfsg1-1.debian.tar.xz
e07a5b8621ecb6006c2f8bb95799d3078ba574766d294186d952636e37de32fd 7588 wordpress_6.8.3+dfsg1-1_amd64.buildinfo
Files:
85c98c17cd68664d5327ec086301b335 2422 web optional wordpress_6.8.3+dfsg1-1.dsc
e67aaba6b7a84cd70df0cc847f4ca812 22351292 web optional wordpress_6.8.3+dfsg1.orig.tar.xz
a2431e748f52256f413b06a5a3304b47 6912896 web optional wordpress_6.8.3+dfsg1-1.debian.tar.xz
8fedba9e42b2ed4716412f2d1b93a8db 7588 web optional wordpress_6.8.3+dfsg1-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEXT3w9TizJ8CqeneiAiFmwP88hOMFAmjne9UACgkQAiFmwP88
hOOSbQ//UMAUgLtVtlZMyWHupBGLMZZEG9paJj6yr5X23zI7ONj9m8PfVgEoi3VL
0VykEKR0MRPi7clZReTFbk4RlQsBjZxqW35tXA+9kfHbXaeAxvowmMddjYlDu2Ey
N4ywG1s6jdG0BQUOetaDkxqVs2cg4ZpLkjDeUUACe2Js4PotGX8m55ELdDs++RMc
TmW4hrsMfU/VF9FSPD2LYEpgsXB/c+Q3DelLe8HYl0ldju2IP8nG3EkezfwWjPqW
FU13iT38UkcU9y0QGgSbI9D13HZXftCoTn/qfWk+I+v26lTWWnl9/Z/z15Yd9v/H
03RQ87B0bVvwFyV232YFMop5fyMg5+2Liu9rfUofCwNhyPH1sr4XLNBnZzcM5v6d
BHcea6klNdREGSSVEklaTY2RVJjdbW4W7GN4ckIhJPRLZFfKMQ6DppCBKYcO9rLh
CqXpedh1jM/bgFarhrymulZakhfttTU5tKd3MtEFgS5AjpSKb95V2IXzF7iW5MfM
4lwwqbUFWyykXvGdL2vGPn+1W90zMvpocUqDlnlEJdzZ04EoIwLz9HimBvT/XvU+
ScfPrs+5sbDYgFiWjbNZ4JHr2/O9H33Nb8GTHoUjkcAA6Dq6BgSwNZoawJe5Jhgw
j7IrG3WVLizDxh7kuT9gk+hb9JXQjMb+11x1bLJwto2OAbnBfMU=
=QsCA
-----END PGP SIGNATURE-----
Attachment:
pgpwnIvlNfkQ6.pgp
Description: PGP signature