-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 06 Sep 2019 18:39:10 +1000 Source: wordpress Binary: wordpress wordpress-l10n wordpress-theme-twentynineteen wordpress-theme-twentyseventeen wordpress-theme-twentysixteen Architecture: source all Version: 5.2.3+dfsg1-1 Distribution: unstable Urgency: medium Maintainer: Craig Small <csmall@debian.org> Changed-By: Craig Small <csmall@debian.org> Description: wordpress - weblog manager wordpress-l10n - weblog manager - language files wordpress-theme-twentynineteen - weblog manager - twentynineteen theme files wordpress-theme-twentyseventeen - weblog manager - twentyseventeen theme files wordpress-theme-twentysixteen - weblog manager - twentysixteen theme files Closes: 939543 Changes: wordpress (5.2.3+dfsg1-1) unstable; urgency=medium . * Security release, fixes several issues Closes: #939543 - XSS in post previews - XSS in stored comments - Open redirect due to validation and sanitization - XSS in media uploads - XSS in shortcode previews - XSS in dashboard - XSS in URL sanitization * Use replace for dh-linktrees for underscore-js Checksums-Sha1: 8d506f243469ab253cf7febe53d062233e6c22ac 2442 wordpress_5.2.3+dfsg1-1.dsc 1bc82c2c893c1c8a8946e256a0d9aecee4ddef8d 7917852 wordpress_5.2.3+dfsg1.orig.tar.xz 8c811cf265f76c5c2ec9ba1049332002f58e6ba4 6818996 wordpress_5.2.3+dfsg1-1.debian.tar.xz 456a566d2bc2c00621f79d69c7517f56df118c52 4382520 wordpress-l10n_5.2.3+dfsg1-1_all.deb ada1be882091cc9b7c86920b6a0be278a699dbb2 315732 wordpress-theme-twentynineteen_5.2.3+dfsg1-1_all.deb 6e7493b18161871cc3253246907137c44313ff87 946024 wordpress-theme-twentyseventeen_5.2.3+dfsg1-1_all.deb 0f38b10df0c0f9076e91aeed985c18f95f859cc9 593808 wordpress-theme-twentysixteen_5.2.3+dfsg1-1_all.deb 958e97b9e41c225593cbf409432c1fad20155168 6084052 wordpress_5.2.3+dfsg1-1_all.deb 4b70656406b38514302896ddf6243d4ea1a08cd2 7402 wordpress_5.2.3+dfsg1-1_amd64.buildinfo Checksums-Sha256: 42f0870a37b98e053d96b53d33134e4312885b89204d5cd0503234af7574b8ae 2442 wordpress_5.2.3+dfsg1-1.dsc 1cce8a6b53f9acb727ec00e5d20ebf3d8d9423987b2255b2091de237089064c9 7917852 wordpress_5.2.3+dfsg1.orig.tar.xz 9fc4e7eef4b456358fe28b8866ec1831b057a6ff780a53d271e38e5f6d39f42f 6818996 wordpress_5.2.3+dfsg1-1.debian.tar.xz 3c54045bf93d0e17e17003202606206e44ad6acf145b837fd334ee82584b9797 4382520 wordpress-l10n_5.2.3+dfsg1-1_all.deb 949b71ce37a9201ab868138ca4a5a3bedf58cf8d752058f26ff0664fa5d56803 315732 wordpress-theme-twentynineteen_5.2.3+dfsg1-1_all.deb 30f6a8c8538c6f2d61785190ef12fcf07c76fa35964c4accb69df7a105245011 946024 wordpress-theme-twentyseventeen_5.2.3+dfsg1-1_all.deb 44b27f25d1bf0904053c318d7cb78ec89f5e81e0cb9e7d3dbe02f04d49dcbed4 593808 wordpress-theme-twentysixteen_5.2.3+dfsg1-1_all.deb 64d203ffcde82799c40eaad974d7d598997130173649b9aaf18cbfc6e65f70c7 6084052 wordpress_5.2.3+dfsg1-1_all.deb 52cc04976da8487f3f03945785580a1d33e4f1224871a6c4caf2eb7903df19f6 7402 wordpress_5.2.3+dfsg1-1_amd64.buildinfo Files: aeaaf3d05c8ed55b4b164900ebddb3e8 2442 web optional wordpress_5.2.3+dfsg1-1.dsc 72bdb1b905ab5945568b98eaa1dfaf3a 7917852 web optional wordpress_5.2.3+dfsg1.orig.tar.xz 88c8abbac963fe4844e8f53c7fef5961 6818996 web optional wordpress_5.2.3+dfsg1-1.debian.tar.xz 8af29f7316f193a32cf7672a41abf38d 4382520 localization optional wordpress-l10n_5.2.3+dfsg1-1_all.deb 0212617d358b85d3915d9be51b3198b9 315732 web optional wordpress-theme-twentynineteen_5.2.3+dfsg1-1_all.deb c80197f993c8c56a9f011659d600807e 946024 web optional wordpress-theme-twentyseventeen_5.2.3+dfsg1-1_all.deb 953a2bdc4490f7d8ab1159182a98d1db 593808 web optional wordpress-theme-twentysixteen_5.2.3+dfsg1-1_all.deb 975e49f2e4f0dbbb09e3fe510a4056b0 6084052 web optional wordpress_5.2.3+dfsg1-1_all.deb 5b455e86296e6f87088cf29934f74fd1 7402 web optional wordpress_5.2.3+dfsg1-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXT3w9TizJ8CqeneiAiFmwP88hOMFAl1yHgIACgkQAiFmwP88 hON5jw//YLyDPz4g5bIgrkmnKCA/k1F83xCm0O77OuHDB+ZujrA1IiXPspiqf69K 8QsdeYWdt+K2OAjhElpn8dLD9J0zY06JWsccwc2ycmgWX5XHaSdIqiWmWHmonvlR 7aXH4TYaGWmjBVb34fPLgT66qqzRVz7DZSRKrY++DHqv2MF9XXigyBTH6p0DIe+d bfPYmlrw+pUTl781dxourGqwbnn7Uzq0p1BW6iDG4R/kVzfrO2oFQkEgq+7DAqr5 LaqfXpQeZ2bZqtTT7F0tj2Rw27fzbSdOTAJATt+WoCOEQMTZpMvO/7P7M+gFxPdo SJM58iK7Os6wO62WKAXtEBHrpoY7ENcMmnRxpcX5pthK3dBpCkslUz1GD8e5Hg0K E6uC3dKMGA8evGNoNLsjQXqYUsFEM7NTyrxKX6ZvKcRPgstV+1B5myU8aTZier59 bHkJG3yuBdy2inI6spdvgSju4nMU9n3idg2LtCs9ZlgDjBkxtsI9ifyndFP1a0PR 9QH4CCl0HCTkIRlR1HIFoBu3P3RFONWvHyyBgSi2f+7nU8vMfahh6VxOxjenyGQ0 B8ZtuR5FeGjiMQSf5rmxILmUWknnR8jj2pTz6Kn8X85WPu/Hq4mC5VZknHv/NgLd OJShgzD0VmVYsqBmWWSaHRAnPGSnswql/cX4yTBjySxfu7oc/Dc= =Znh5 -----END PGP SIGNATURE-----