• [SECURITY] [DSA 4896-1] wordpress security update

    From Sebastien Delafond@21:1/5 to All on Thu Apr 22 08:00:02 2021
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-4896-1 security@debian.org https://www.debian.org/security/ Sebastien Delafond
    April 22, 2021 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : wordpress
    CVE ID : CVE-2021-29447 CVE-2021-29450
    Debian Bug : 987065

    Several vulnerabilities were discovered in Wordpress, a web blogging
    tool. They allowed remote attackers to perform XML External Entity
    (XXE) attacks, and access private content.

    For the stable distribution (buster), these problems have been fixed in
    version 5.0.12+dfsg1-0+deb10u1.

    We recommend that you upgrade your wordpress packages.

    For the detailed security status of wordpress please refer to
    its security tracker page at: https://security-tracker.debian.org/tracker/wordpress

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org
    -----BEGIN PGP SIGNATURE-----

    iQEzBAEBCgAdFiEEAqSkbVtrXP4xJMh3EL6Jg/PVnWQFAmCBDxMACgkQEL6Jg/PV nWRHgAf+OMDCwkCIXn+tu7zdgvIDRQqGdXExm77wvoZRpJ2GFtNpQER9pFqdO1lZ +TXN61DzEwMHt4ABeKrJp8mMjsIALdlKwZY4qnIGooTOwMDM2RXxCGzgIMLaLcZf Qd3wyCCe51NiBNvA9UpUJQoakbhahxYhKAfn4HgAC9kEtC2DUPl3Br7YyCwyKK4r m3LBVwkSgNBhtkLw7iAggVmiNTNEpO0j9Z7jNsE1c2hwFqh8Q9/U5N4C1y4XFDsz U+tjzcA9VR51XDH/zIE7z8uWQRGMgNpN4/1n5F6uIRChdU0tbnRK3KmRoiHjIBWH rLCg3cd0aLfQ/57wlIyzxu7ILlh2/A==
    =odD4
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)