[DSA 6399-1] wordpress security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6399-1                   [email protected]
https://www.debian.org/security/                     Salvatore Bonaccorso
July 23, 2026                         https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : wordpress
CVE ID         : CVE-2026-60137
Debian Bug     : 1142510

It was discovered that wordpress, a web blogging tool, was prone to a
SQL injection vulnerability.

For the stable distribution (trixie), this problem has been fixed in
version 6.8.6+dfsg1-0+deb13u1.

We recommend that you upgrade your wordpress packages.

For the detailed security status of wordpress please refer to its
security tracker page at:
https://security-tracker.debian.org/tracker/wordpress

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]
-----BEGIN PGP SIGNATURE-----
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=JLLf
-----END PGP SIGNATURE-----