wordpress 4.7.5+dfsg-2+deb9u5 source package in Debian

Changelog

wordpress (4.7.5+dfsg-2+deb9u5) stretch-security; urgency=medium

  *  Backport security patches from wordpress 5.0.1 Closes: #916403
     - CVE-2018-20147
       Delete files through altered meta data
     - CVE-2018-20152
       Create posts of unauthorized post types
     - CVE-2018-20148
       PHP object injection through crafted meta data
     - CVE-2018-20153
       Edit other users comments, leading to XSS
     - CVE-2018-20150
       XSS in plugins through crafted URL inputs
     - CVE-2018-20151
       User activation screen visible to search engines
     - CVE-2018-20149
       Bypass MIME verification causing XSS
     - CVE-2019-8942
       Remote Code Execution (RCE) in uploaded image files

 -- Craig Small <email address hidden>  Thu, 28 Feb 2019 20:25:00 +1100