Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 580
Alerts This Week
Warning Icon 1 580

Debian: DSA-5279-2 Critical: Wordpress Threats and Fixes

debian
Calendar Grey November 17, 2022
Debian Logo
Security Alert DSA-5279-2 outlines vulnerabilities in WordPress addressed in the Debian stable release. It is advised to upgrade for enhanced security.
The wordpress package released in DSA-5279-1 had incorrect dependencies that could not be satisfied in Debian stable: this update corrects the problem
Topics%20covered

Topics Covered

security advisory update XSS Debian SQL injection CSRF wordpress

Summary

Several vulnerabilities were discovered in Wordpress, a web blogging
tool. They allowed remote attackers to perform SQL injection, create
open redirects, bypass authorization access, or perform Cross-Site
Request Forgery (CSRF) or Cross-Site Scripting (XSS) attacks.

For the stable distribution (bullseye), this problem has been fixed in
version 5.7.8+dfsg1-0+deb11u2.

We recommend that you upgrade your wordpress packages.

For the detailed security status of wordpress please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/wordpress

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory update XSS Debian SQL injection CSRF wordpress

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.