Accepted wordpress 4.1.30+dfsg-0+deb8u1 (source all) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 10 May 2020 21:09:21 +0530
Source: wordpress
Binary: wordpress wordpress-l10n wordpress-theme-twentyfifteen wordpress-theme-twentyfourteen wordpress-theme-twentythirteen
Architecture: source all
Version: 4.1.30+dfsg-0+deb8u1
Distribution: jessie-security
Urgency: high
Maintainer: Craig Small <csmall@debian.org>
Changed-By: Utkarsh Gupta <utkarsh@debian.org>
Description:
wordpress - weblog manager
wordpress-l10n - weblog manager - language files
wordpress-theme-twentyfifteen - weblog manager - twentytfifteen theme files
wordpress-theme-twentyfourteen - weblog manager - twentyfourteen theme files
wordpress-theme-twentythirteen - weblog manager - twentythirteen theme files
Closes: 959391
Changes:
wordpress (4.1.30+dfsg-0+deb8u1) jessie-security; urgency=high
.
* Non-maintainer upload by the LTS Team.
* New upstream version 4.1.30+dfsg.
* Security release, fixes 5 security bugs (Closes: #959391)
- CVE-2020-11025
XSS vulnerability in the navigation section of Customizer allows
JavaScript code to be executed.
- CVE-2020-11026
uploaded files to Media section to lead to script execution.
- CVE-2020-11027
Password reset link does not expire.
- CVE-2020-11028
Private posts can be found through searching by date.
- CVE-2020-11029
XSS in stats() method in class-wp-object-cache.
Checksums-Sha1:
176a7332bbce5f894474a481e3ca30b22efb5245 2597 wordpress_4.1.30+dfsg-0+deb8u1.dsc
bd1addcd140e2b3b1abe746196823682561f3ff4 4650532 wordpress_4.1.30+dfsg.orig.tar.xz
b564b87436c6abf3a59eced8f7cb2b7aa3686b65 6043320 wordpress_4.1.30+dfsg-0+deb8u1.debian.tar.xz
9a210c635885ab04fabad84e61ac01e8e5f96a46 3092434 wordpress_4.1.30+dfsg-0+deb8u1_all.deb
3c2bb1a5c4dbd2c098e1b00bba4d9c819f5acd25 4241588 wordpress-l10n_4.1.30+dfsg-0+deb8u1_all.deb
7a3b65944a465b3f5499837a74aec48880a0f832 505890 wordpress-theme-twentyfifteen_4.1.30+dfsg-0+deb8u1_all.deb
cebbbcea62bc16c9fc8cbb2cf1e6defa7b6294dd 804824 wordpress-theme-twentyfourteen_4.1.30+dfsg-0+deb8u1_all.deb
665165c21e291526cd8e222f8d416be9d43e523e 324302 wordpress-theme-twentythirteen_4.1.30+dfsg-0+deb8u1_all.deb
Checksums-Sha256:
15d3e039c123dc0740d23b5c4005e841770ed53b33c386e89611af1c22f3f6f9 2597 wordpress_4.1.30+dfsg-0+deb8u1.dsc
ec86262413badf30cfe8c274dfec24094296303ba4f478b0f136fc2d7449c193 4650532 wordpress_4.1.30+dfsg.orig.tar.xz
7efff4b0f444f41b53696085dec24a8374be39d93df1fe263af1494256ef3173 6043320 wordpress_4.1.30+dfsg-0+deb8u1.debian.tar.xz
faea0b118a0abe7de3ad2813b570e4ad08580f2e048fb7a2fb8e20e32a8f6435 3092434 wordpress_4.1.30+dfsg-0+deb8u1_all.deb
cdbec22a87f48a5a88d6b82b9a0509deacb5d9cd37d0579501b6feaa72dab621 4241588 wordpress-l10n_4.1.30+dfsg-0+deb8u1_all.deb
f46cc7a2bc52dc919f65d058e58fbde89477775299400b324b2082c618e86fe2 505890 wordpress-theme-twentyfifteen_4.1.30+dfsg-0+deb8u1_all.deb
d6117d4e8a47c71a9a442a47876ef4337e387c9e021a1a410535b5b138bc5b47 804824 wordpress-theme-twentyfourteen_4.1.30+dfsg-0+deb8u1_all.deb
df28ebe42303dd3ce5c2a95f7eba8298ee3609cc4c45caf93f53ee43a56e7a0d 324302 wordpress-theme-twentythirteen_4.1.30+dfsg-0+deb8u1_all.deb
Files:
cda57614d554ad342a143a682670e189 2597 web optional wordpress_4.1.30+dfsg-0+deb8u1.dsc
872a35ca412bd89bb3c7c399a27fdfce 4650532 web optional wordpress_4.1.30+dfsg.orig.tar.xz
eb32f45f98ac9693c2fd8feb09563336 6043320 web optional wordpress_4.1.30+dfsg-0+deb8u1.debian.tar.xz
04b79f7cf392af9aecb2efa5b80d4d35 3092434 web optional wordpress_4.1.30+dfsg-0+deb8u1_all.deb
e3d37962e5d3eac4aff2e857bfa5b59c 4241588 localization optional wordpress-l10n_4.1.30+dfsg-0+deb8u1_all.deb
253e67d467bea649c978d93a9a56e2c0 505890 web optional wordpress-theme-twentyfifteen_4.1.30+dfsg-0+deb8u1_all.deb
e27f7d29697df4f61bdbb17a7bbacdf0 804824 web optional wordpress-theme-twentyfourteen_4.1.30+dfsg-0+deb8u1_all.deb
0aa751a55c1cea481539a475f2e452ff 324302 web optional wordpress-theme-twentythirteen_4.1.30+dfsg-0+deb8u1_all.deb
-----BEGIN PGP SIGNATURE-----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=+DMj
-----END PGP SIGNATURE-----
Reply to: