Debian
wordpress package

wordpress 4.1+dfsg-1+deb8u17 source package in Debian

Changelog

wordpress (4.1+dfsg-1+deb8u17) jessie-security; urgency=high

  * Non-maintainer upload.
  * Fix CVE-2018-10100: the redirection URL for the login page was not
    validated or sanitized if forced to use HTTPS.
  * Fix CVE-2018-10102: the version string was not escaped in the
    get_the_generator function, and could lead to XSS in a generator tag.
    (Closes: #895034)

 -- Markus Koschany <email address hidden>  Sat, 28 Apr 2018 22:49:06 +0200

Upload details

Uploaded by:
Craig Small
Uploaded to:
Jessie
Original maintainer:
Craig Small
Architectures:
all
Section:
web
Urgency:
Very Urgent

See full publishing history Publishing

Series Pocket Published Component Section
Jessie release main web

Builds

Downloads

File Size SHA-256 Checksum
wordpress_4.1+dfsg-1+deb8u17.dsc 2.6 KiB 523e4e8a5b0f035f99735d0354bd5092e2a378e9ed0cb8e9380dec9a9b2b26d3
wordpress_4.1+dfsg.orig.tar.xz 4.5 MiB 11ca9ce2f5b05866df9521a50b8be22ac2315f652aa95ba49bdb202c5dda4954
wordpress_4.1+dfsg-1+deb8u17.debian.tar.xz 5.6 MiB e882087217f24a04133a847adbc66ea14b92ca92a6f1d1b01d0643046edb5618

No changes file available.

Binary packages built by this source