-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 30 Mar 2019 23:52:28 +0530 Source: wordpress Binary: wordpress wordpress-l10n wordpress-theme-twentyfifteen wordpress-theme-twentyfourteen wordpress-theme-twentythirteen Architecture: source all Version: 4.1.26+dfsg-1+deb8u1 Distribution: jessie-security Urgency: medium Maintainer: Craig Small <csm...@debian.org> Changed-By: Abhijith PA <abhij...@debian.org> Description: wordpress - weblog manager wordpress-l10n - weblog manager - language files wordpress-theme-twentyfifteen - weblog manager - twentytfifteen theme files wordpress-theme-twentyfourteen - weblog manager - twentyfourteen theme files wordpress-theme-twentythirteen - weblog manager - twentythirteen theme files Closes: 924546 Changes: wordpress (4.1.26+dfsg-1+deb8u1) jessie-security; urgency=medium . * Non-maintainer upload by the Debian LTS team. * Fix CVE-2019-8942: remote code execution by uploading a crafted image containing PHP code. * Fix CVE-2019-9787: Remote Code Execution by unauthenticated users in a default configuration. (Closes: #924546) Checksums-Sha1: 75f6d5dca324662b244e5cd9839fd8f035dc0d2a 2597 wordpress_4.1.26+dfsg-1+deb8u1.dsc 5d999dbd11dff9454f69fa3a4636864ce3536702 5994822 wordpress_4.1.26+dfsg.orig.tar.gz f661bfa8bfb2727a82afc6f5668a517bc246629d 5982204 wordpress_4.1.26+dfsg-1+deb8u1.debian.tar.xz f040008860f536eaa1ae23ee639fd8547d47fae9 3090556 wordpress_4.1.26+dfsg-1+deb8u1_all.deb 1975ab78d1d49e596c9d364887d6de335c6db20d 4250232 wordpress-l10n_4.1.26+dfsg-1+deb8u1_all.deb 9a7412e7eb05579f275e0cf084dc59c7b490f44e 505242 wordpress-theme-twentyfifteen_4.1.26+dfsg-1+deb8u1_all.deb 1571e710be71d80e3986d33988e21771e851139f 804122 wordpress-theme-twentyfourteen_4.1.26+dfsg-1+deb8u1_all.deb c37dd0b4e49c0cad60de647a05a4351ec11a14a7 323862 wordpress-theme-twentythirteen_4.1.26+dfsg-1+deb8u1_all.deb Checksums-Sha256: 54cfdebb1e65593aa7ce95fceb89af1da563f9359106d09ad15eb89211006f78 2597 wordpress_4.1.26+dfsg-1+deb8u1.dsc c8e9a1477d703c78a20895b95690ef011c0b67bba1d7a48a191e56a1152b958c 5994822 wordpress_4.1.26+dfsg.orig.tar.gz 4a477c86c32874f7e487e5948c9c198743c0af6885c3c15d4485cddea28165c2 5982204 wordpress_4.1.26+dfsg-1+deb8u1.debian.tar.xz 25ccdfe7cef4709485e2d48b416e06c2c2c666884738c1b0a2d06136fa19cb74 3090556 wordpress_4.1.26+dfsg-1+deb8u1_all.deb a2b1149c2d986356d318a76b09ae0887130ede0328a1de23c0eb8ff80e1c229a 4250232 wordpress-l10n_4.1.26+dfsg-1+deb8u1_all.deb e42cb65ca1445d7266560de9965f16c77cd6530f8c83bb4adef9ff5782b6bfb3 505242 wordpress-theme-twentyfifteen_4.1.26+dfsg-1+deb8u1_all.deb 1ce1d7901db4e90804cfa00ea26327cd4102d49a53107f4212d64faa471abb95 804122 wordpress-theme-twentyfourteen_4.1.26+dfsg-1+deb8u1_all.deb 4c0746038b9f0747da49ef655c9faedb76f7d35c8c0cab1a327fe9325b97b09c 323862 wordpress-theme-twentythirteen_4.1.26+dfsg-1+deb8u1_all.deb Files: cf3cdc0f4abdb50e960001db6d5f2d51 2597 web optional wordpress_4.1.26+dfsg-1+deb8u1.dsc 22532042ba80abf01008f2f71eabaa1d 5994822 web optional wordpress_4.1.26+dfsg.orig.tar.gz a6592483bde6f2b970f2d0317e52ec26 5982204 web optional wordpress_4.1.26+dfsg-1+deb8u1.debian.tar.xz a7793cef0e43b139e5562505c971ec50 3090556 web optional wordpress_4.1.26+dfsg-1+deb8u1_all.deb a5f070a4054c4c07656d2647172c4880 4250232 localization optional wordpress-l10n_4.1.26+dfsg-1+deb8u1_all.deb 5881883bb8d66d5df705b9ffa156870a 505242 web optional wordpress-theme-twentyfifteen_4.1.26+dfsg-1+deb8u1_all.deb 5bb3838e47ae3150b6da8f4fe930755d 804122 web optional wordpress-theme-twentyfourteen_4.1.26+dfsg-1+deb8u1_all.deb 8a4954d27d2e0b126cd1db470b703906 323862 web optional wordpress-theme-twentythirteen_4.1.26+dfsg-1+deb8u1_all.deb
-----BEGIN PGP SIGNATURE----- iQJIBAEBCgAyFiEE7xPqJqaY/zX9fJAuhj1N8u2cKO8FAlyg0GcUHGFiaGlqaXRo QGRlYmlhbi5vcmcACgkQhj1N8u2cKO8apg//SYZoXe3m1BG6Aa/3ImUWW2mJS4hM /I6QOeYQtGp86ka3sRc53JQFkz/SJhTrBJHj2f2/enHk2zBLc/xAYjA1cmc3HnHV CwF/gttwGeGc2zk5SxNOFtWV+dCwqyBtN0YkIXX+wnyDhQlnDmMmuii8OpkXNWj4 CiIFgKOBBh9KpRYD2ffa0zfmbw5/7bL+58syLypEbfP8/8RM/ou2k2xLUc/nbQun 08U7Iq3wENU3KZt5tPytn4jwLLjf8/fLFkpaydx6cwhHFj0P+yOBf32lya9cdJCv IJF80o08mMbYy32DbiqdXSH+uhhAK6Hj5m3QMijYHxzkb8xDdf5l+FluqK62wbKD /oy8Bu0lWyT3YobkygK7bZQvjP46bkJXPkHc8mRY+dQhkUgFxq7PucxBh76VzKoc PQQbHuQFLjzQT+6Xb3c7VBAHr2e3vQqDbtkyH9BQXhZwzKxMl6VT2MO670zw9zgM SL6eg2/8uNOec5r3Ezo1+mBcedSwsxwkOGPVGTIA2NpdAuB5cS7d66TvFsggb/3Z bGtjMZ+OOtHmIoHf+01E5eaidFLSjuEcxdzLFlSuOT1Fbe0FtR1jltEygiE9pPUk yqs6qq+P1mPWeU8npDA+TCXjZ0ghq9uJuzzeXAiJ4APGJeS/q+D5Nnuspf6BNzrl FvkAKlekp6Mkf1o= =m93Q -----END PGP SIGNATURE-----