News for package wordpress

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 3.0 (quilt)
Source: wordpress
Binary: wordpress, wordpress-l10n, wordpress-theme-twentyfifteen, wordpress-theme-twentyfourteen, wordpress-theme-twentythirteen
Architecture: all
Version: 4.1+dfsg-1+deb8u1
Maintainer: Craig Small <[email protected]>
Homepage: http://wordpress.org
Standards-Version: 3.9.6
Vcs-Browser: http://anonscm.debian.org/gitweb/?p=collab-maint/wordpress.git
Vcs-Git: git://anonscm.debian.org/collab-maint/wordpress.git
Build-Depends: debhelper (>= 9), dh-linktree
Build-Depends-Indep: gettext, libjs-backbone, libjs-cropper, libjs-jquery (>= 1.6.1), libjs-jquery-form, libjs-jquery-ui (>= 1.8.1), libjs-mediaelement, libjs-prototype, libjs-scriptaculous, libjs-swfobject, libjs-underscore, libphp-phpmailer (>= 5.1), php-getid3 (>= 1.9.8-2), perl, tinymce (>= 3.4.2)
Package-List:
 wordpress deb web optional arch=all
 wordpress-l10n deb localization optional arch=all
 wordpress-theme-twentyfifteen deb web optional arch=all
 wordpress-theme-twentyfourteen deb web optional arch=all
 wordpress-theme-twentythirteen deb web optional arch=all
Checksums-Sha1:
 0b105e79723c1f1c16764eb98122ed426f738940 4749996 wordpress_4.1+dfsg.orig.tar.xz
 b38521fe49f31729c6c1043db02321dd24acca2e 6099980 wordpress_4.1+dfsg-1+deb8u1.debian.tar.xz
Checksums-Sha256:
 11ca9ce2f5b05866df9521a50b8be22ac2315f652aa95ba49bdb202c5dda4954 4749996 wordpress_4.1+dfsg.orig.tar.xz
 121586a27de1bae14d9b49716b2f273b9f6f35cce92e8d206d4ae1fa225bd0d0 6099980 wordpress_4.1+dfsg-1+deb8u1.debian.tar.xz
Files:
 90db367f6588135c80a22a91e1c42fcd 4749996 wordpress_4.1+dfsg.orig.tar.xz
 47bdcf156fd8464b72721416c270e150 6099980 wordpress_4.1+dfsg-1+deb8u1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=9Fiq
-----END PGP SIGNATURE-----

Changes:
wordpress (4.1+dfsg-1+deb8u1) jessie-security; urgency=high

  * Backports of 4.1.2 security fixes Closes: #783347
    - Changeset 32163 sanity checks
    - Changeset 32165 sanitize order by
    - Changeset 32172 filename check
    - Changeset 32174 multisite change extra checks
    - Changeset 32176 Dashboard escapes titles
    - Changeset 32234 More WPDB query sanity
  * Backport of 4.2.1 for security fixes Closes: #783554
    - Changeset 32307: XSS for long 64k+ comments

 -- Craig Small <[email protected]>  Sat, 02 May 2015 12:59:53 +1000