Re: Security update of Wordpress

[Craig Small <csmall@debian.org>]

I had a similar query from the security team. I think you are looking for changeset 37798.

I got a security update but waiting on the team.

I cannot see why 4.1.12 doesn't have this.

https://core.trac.wordpress.org/changeset/37798

 - Craig

On Tue, Jul 26, 2016 at 4:42 PM Markus Koschany <apo@debian.org> wrote:

Hi Craig,

I have prepared a security update for Wordpress in Wheezy and pushed my
work to

https://anonscm.debian.org/cgit/collab-maint/wordpress.git/commit/?h=wheezy&id=d1f7bfa1d5109509bb4ab7ab23d0e7e7dc8736cc

I intend to release it soon but I haven't found the changeset / fix for
CVE-2016-5836 yet. Do you have any idea where can I find more
information about that? Your update for Jessie doesn't seem to include
it. I looked at the diff between 4.5.2 and 4.5.3 and could find some
changes regarding oEmbed but I would appreciate another confirmation.

Regards,

Markus