Zum Inhalt springen.
Sympa Menü

it-securitynotifies - [IT-SecNots] [SECURITY] [DSA 3328-2] wordpress regression update

it-securitynotifies AT lists.piratenpartei.de

Betreff: Sicherheitsankündigungen

Listenarchiv

[IT-SecNots] [SECURITY] [DSA 3328-2] wordpress regression update


Chronologisch Thread 
  • From: Thijs Kinkhorst <thijs AT debian.org>
  • To: debian-security-announce AT lists.debian.org
  • Subject: [IT-SecNots] [SECURITY] [DSA 3328-2] wordpress regression update
  • Date: Tue, 4 Aug 2015 17:36:24 +0200 (CEST)
  • List-archive: <https://service.piratenpartei.de/pipermail/it-securitynotifies>
  • List-id: Sicherheitsankündigungen <it-securitynotifies.lists.piratenpartei.de>
  • Old-return-path: <thijs AT kinkhorst.com>
  • Priority: urgent
  • Resent-date: Tue, 4 Aug 2015 15:36:59 +0000 (UTC)
  • Resent-from: debian-security-announce AT lists.debian.org
  • Resent-message-id: <bfwDTSeHHHN.A.rjE.bwNwVB@bendel>
  • Resent-sender: debian-security-announce-request AT lists.debian.org

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3328-2 security AT debian.org
https://www.debian.org/security/ Thijs Kinkhorst
August 04, 2015 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : wordpress
CVE ID : CVE-2015-3429 CVE-2015-5622 CVE-2015-5623
Debian Bug : 784603

The security update for wordpress in DSA 3328 contained a regression.
The patch for issue CVE-2015-5622 was faulty. A new package version
has been released that backs this patch out pending resolution of
the problem.

For the stable distribution (jessie), these problems have been fixed in
version 4.1+dfsg-1+deb8u3.

We recommend that you upgrade your wordpress packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBCAAGBQJVwNuMAAoJEFb2GnlAHawE0S8H/jLJaFxSgvfDKbCKALAEHBCu
oG7gJfmoDhkrI1jvoxR+W32A2iGEProZKKIsYJB/axnTr7xKMTgDOeYAEAcdvKVY
SYFUB2JdPxciJDlmSByhQp7+oZ3feAHmjm6M7Zd8YDjEJD1Eqc9kJQGU53fbd4mM
1GS+cUEJNh8x7B65l9THCbJUzja09Ue2uD3EZtLVwIoohOQYmTmqfuT6gbqEJADU
lKaD+6olTqNW3kfh0YsumTdRsTUph6vNb1SPf+RxX84nQN77zp7cxwFy7mh8gp/F
yATEdtR6T6GNoHTW5YIw+E+smUnn3UGOIgoEj74Wr3GUL5a6OHNF1a6K+qVlG6A=
=MQxl
-----END PGP SIGNATURE-----


--
To UNSUBSCRIBE, email to debian-security-announce-REQUEST AT lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster AT lists.debian.org
Archive: 20150804153624.5313559A2D AT kinkhorst.com">https://lists.debian.org/20150804153624.5313559A2D AT kinkhorst.com




  • [IT-SecNots] [SECURITY] [DSA 3328-2] wordpress regression update, Thijs Kinkhorst, 04.08.2015

Archiv bereitgestellt durch MHonArc 2.6.19.

Seitenanfang