Hi Craig, On Thu, Mar 14, 2019 at 09:20:05PM +1100, Craig Small wrote: > Source: wordpress > Version: 5.0.3+dfsg1-1 > Severity: important > Tags: security > > This release also includes a pair of security fixes that handle how > comments are filtered and then stored in the database. With a > maliciously crafted comment, a WordPress post was vulnerable to > cross-site scripting. > > WordPress versions 5.1 and earlier are affected by these bugs, which > are fixed in version 5.1.1. Updated versions of WordPress 5.0 and > earlier are also available for any users who have not yet updated to > 5.1.
Given we are in freeze, the fix cannot enter now buster withouth having an ack from release team. Can you check if it would be feasible to make this upload enter buster? Regards, Salvatore
