Debian alert DLA-1075-1 (wordpress)

From:
    	     
 
Lucas Kanashiro <kanashiro@debian.org> 
To:
    	     
 
debian-lts-announce@lists.debian.org 
Subject:
    	     
 
[SECURITY] [DLA 1075-1] wordpress security update 
Date:
    	     
 
Tue, 29 Aug 2017 15:08:41 -0300
Message-ID:
    	     
 
<20170829171243.cho3svtoddvdmowd@riseup.net>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Package        : wordpress
Version        : 3.6.1+dfsg-1~deb7u16
CVE ID         : CVE-2017-9066
Debian Bug     : 862816

In WordPress, there is insufficient redirect validation in the
HTTP class, leading to SSRF.

For Debian 7 "Wheezy", these problems have been fixed in version
3.6.1+dfsg-1~deb7u16.

We recommend that you upgrade your wordpress packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=xizP
-----END PGP SIGNATURE-----