-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 07 Aug 2026 18:13:22 +1000
Source: wordpress
Architecture: source
Version: 6.8.7+dfsg1-0+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: Craig Small <csmall@debian.org>
Changed-By: Craig Small <csmall@debian.org>
Closes: 1143843
Changes:
 wordpress (6.8.7+dfsg1-0+deb13u1) trixie-security; urgency=medium
 .
   * New upstream security release
     CVE-2026-64638 fix XSS in login that leads to RCE Closes: #1143843
Checksums-Sha1:
 7d0b5305822dcbb2d70bada5670393df1f0f9df6 2454 wordpress_6.8.7+dfsg1-0+deb13u1.dsc
 9a9ff10b7bbeed51af3b08ca38579b16e42257d7 22354772 wordpress_6.8.7+dfsg1.orig.tar.xz
 3b9b7dea75e89fd7b5cc5be044e1fb9a2f858219 6913152 wordpress_6.8.7+dfsg1-0+deb13u1.debian.tar.xz
 5194860793dddeb0c1565eee212939e3a17b92d6 7762 wordpress_6.8.7+dfsg1-0+deb13u1_amd64.buildinfo
Checksums-Sha256:
 b3b3b541910585e898f58ffbde1da3a09dc3e4f4524e9639a1ce8f7200cddb54 2454 wordpress_6.8.7+dfsg1-0+deb13u1.dsc
 052ab5d006571e9998919ebaf956b80a3342e5184b5a44fee65588ca34e88c5f 22354772 wordpress_6.8.7+dfsg1.orig.tar.xz
 3722f356d0d1cce6d42c9024d59779b7b771136ddef5aa4c2ec404f69990848f 6913152 wordpress_6.8.7+dfsg1-0+deb13u1.debian.tar.xz
 52ae28c0c154acb0e74113d83d450db05a41a7e08e4237b87ff1ddb4cfc16e22 7762 wordpress_6.8.7+dfsg1-0+deb13u1_amd64.buildinfo
Files:
 d306ebfc5bc748c0fc880c41f12fdee4 2454 web optional wordpress_6.8.7+dfsg1-0+deb13u1.dsc
 678d8aacc14065c7f8de0b741a72aad5 22354772 web optional wordpress_6.8.7+dfsg1.orig.tar.xz
 e2c11d0330b7e5c8af6a74e77b7d6551 6913152 web optional wordpress_6.8.7+dfsg1-0+deb13u1.debian.tar.xz
 d29fed3905715cfa62d733464ffb312d 7762 web optional wordpress_6.8.7+dfsg1-0+deb13u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=6sVN
-----END PGP SIGNATURE-----