-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 09 Oct 2025 20:03:14 +1100 Source: wordpress Architecture: source Version: 6.8.3+dfsg1-1 Distribution: unstable Urgency: medium Maintainer: Craig Small <csmall@debian.org> Changed-By: Craig Small <csmall@debian.org> Closes: 1117047 Changes: wordpress (6.8.3+dfsg1-1) unstable; urgency=medium . * New upstream security release Closes: #1117047 Fixes the following CVEs: - Stored XSS in nav menus CVE-2025-58674 - Data exposure CVE-2025-58246 * Update copyright files to use download links Checksums-Sha1: 4756579a9ab7a95d138ae855a1ca169d6e851943 2422 wordpress_6.8.3+dfsg1-1.dsc 5c2771f2140ba44f1b7e7f324ccecdf4d6eb2a5c 22351292 wordpress_6.8.3+dfsg1.orig.tar.xz f06be9dac354ce312969f0f68d0bc49fddaf082d 6912896 wordpress_6.8.3+dfsg1-1.debian.tar.xz 29558c3d0a4599845a74ee2934e668c231c5883b 7588 wordpress_6.8.3+dfsg1-1_amd64.buildinfo Checksums-Sha256: 491ff8d3406e4036db98bfcd1a377315f5b0b3f26481f00a09ddfde15af3f7b6 2422 wordpress_6.8.3+dfsg1-1.dsc 97c8d75a3e18c848434ff250f4461184730a9c8094402fa61a57714cfce724db 22351292 wordpress_6.8.3+dfsg1.orig.tar.xz 0cce628f62a1aff2356629a238cc47f45d1136f60edf910fe9a3bd4fa67109fb 6912896 wordpress_6.8.3+dfsg1-1.debian.tar.xz e07a5b8621ecb6006c2f8bb95799d3078ba574766d294186d952636e37de32fd 7588 wordpress_6.8.3+dfsg1-1_amd64.buildinfo Files: 85c98c17cd68664d5327ec086301b335 2422 web optional wordpress_6.8.3+dfsg1-1.dsc e67aaba6b7a84cd70df0cc847f4ca812 22351292 web optional wordpress_6.8.3+dfsg1.orig.tar.xz a2431e748f52256f413b06a5a3304b47 6912896 web optional wordpress_6.8.3+dfsg1-1.debian.tar.xz 8fedba9e42b2ed4716412f2d1b93a8db 7588 web optional wordpress_6.8.3+dfsg1-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXT3w9TizJ8CqeneiAiFmwP88hOMFAmjne9UACgkQAiFmwP88 hOOSbQ//UMAUgLtVtlZMyWHupBGLMZZEG9paJj6yr5X23zI7ONj9m8PfVgEoi3VL 0VykEKR0MRPi7clZReTFbk4RlQsBjZxqW35tXA+9kfHbXaeAxvowmMddjYlDu2Ey N4ywG1s6jdG0BQUOetaDkxqVs2cg4ZpLkjDeUUACe2Js4PotGX8m55ELdDs++RMc TmW4hrsMfU/VF9FSPD2LYEpgsXB/c+Q3DelLe8HYl0ldju2IP8nG3EkezfwWjPqW FU13iT38UkcU9y0QGgSbI9D13HZXftCoTn/qfWk+I+v26lTWWnl9/Z/z15Yd9v/H 03RQ87B0bVvwFyV232YFMop5fyMg5+2Liu9rfUofCwNhyPH1sr4XLNBnZzcM5v6d BHcea6klNdREGSSVEklaTY2RVJjdbW4W7GN4ckIhJPRLZFfKMQ6DppCBKYcO9rLh CqXpedh1jM/bgFarhrymulZakhfttTU5tKd3MtEFgS5AjpSKb95V2IXzF7iW5MfM 4lwwqbUFWyykXvGdL2vGPn+1W90zMvpocUqDlnlEJdzZ04EoIwLz9HimBvT/XvU+ ScfPrs+5sbDYgFiWjbNZ4JHr2/O9H33Nb8GTHoUjkcAA6Dq6BgSwNZoawJe5Jhgw j7IrG3WVLizDxh7kuT9gk+hb9JXQjMb+11x1bLJwto2OAbnBfMU= =QsCA -----END PGP SIGNATURE-----