[DSA 6427-1] wordpress security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6427-1                   [email protected]
https://www.debian.org/security/                     Salvatore Bonaccorso
August 10, 2026                       https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : wordpress
CVE ID         : CVE-2026-64638
Debian Bug     : 1143843

Several vulnerabilities were discovered in wordpress, a web blogging
tool, which could result in cross-site scripting, server-side request
forgery, privilege escalation or remote code execution.

For the stable distribution (trixie), these problems have been fixed in
version 6.8.7+dfsg1-0+deb13u1.

We recommend that you upgrade your wordpress packages.

For the detailed security status of wordpress please refer to its
security tracker page at:
https://security-tracker.debian.org/tracker/wordpress

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]
-----BEGIN PGP SIGNATURE-----

iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmp6DCtfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND
z0Tlig//deupOuQCW1xmI3Nen1ie6l7ubTS3lO+qBYmouYekKtaH+MZhkImoWsQH
lpp/YldPO1Hyov3zKf4qAEbGLrHE8dqOhHqpA/NXEUYwmnCaVf49HBUib5zv5z2l
hlVAJETIr6L/zOHVE4BRITeDJgxgtGUAOiBxy0+1ZWU6P7m/u4S2GHl1GZa8/ge/
jVyM8tNY540Zjcne5Tq/OwnU1lKAJVZ/8zGAc36IWG6HoBskfFWCiWTVqhBktdZ+
+UHtd/dZR291xZzWMHHuSTpQuPXgzetSqo1EklrKWBwS44dz0dN9lNWfejR9nagb
/wpVlLOhdrS5bdhaBbNqBOvX/cVB4hsSfe2ZU/vwpCY5bInNP7Kile3rTa8QXfuY
tuYT9XvFpadlaFZia6Wd/GN75FVqVTbk8TJzXvb31aSSoZ7r1cSzgN4wxauUtgLr
/idIRoC2OrqdJnfPR42EySHWpOeSPq7+A+fxEidl6BQDkoGtf2jfCVmOrbxtXUmf
UBKyJcTEFmcEQfvTp6QNLzlOcYha3XQAlvSMrKRXn3flKpscQ20aMxenQJTuL+O4
nynoB/1N5luCSx+cAREG+DPGXoJCJVz4QEgAkM98LXSoIkJgb6dvMnfULn8j1hxt
m+LXPAw18aq+QS/yO8Vtdh3jXa+8kNnqeJVVEBGPspQ8PDiPiYM=
=UzFU
-----END PGP SIGNATURE-----