Package: wordpress
Version: 7.1+dfsg1-1
Severity: grave
Tags: security upstream
Justification: user security hole
X-Debbugs-Cc: Debian Security Team <[email protected]>
See :
https://wordpress.org/news/2026/09/wordpress-7-1-1-maintenance-and-security-release/
https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1200/
-- System Information:
Debian Release: forky/sid
APT prefers unstable-debug
APT policy: (500, 'unstable-debug'), (500, 'stable-updates'), (500,
'stable-security'), (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1,
'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 6.18.52 (SMP w/16 CPU threads; PREEMPT)
Locale: LANG=fr_FR.UTF8, LC_CTYPE=fr_FR.UTF8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages wordpress depends on:
ii apache2 [httpd] 2.4.68-2
ii ca-certificates 20260816
ii default-mysql-client 1.1.1
ii libapache2-mod-php 2:8.4+99
ii libapache2-mod-php8.4 [libapache2-mod-php] 8.4.24-1
ii libjs-cropper 1.2.2-2
ii libjs-jquery-ui 1.14.2+dfsg-1
ii libjs-lodash 4.18.1+dfsg1-2
ii libjs-underscore 1.13.8~dfsg+~1.13.0-1
ii libphp-phpmailer 7.1.1-1
ii mariadb-client [virtual-mysql-client] 1:11.8.9+ds-2
ii php-gd 2:8.4+99
ii php-getid3 2.0.0~beta6+dfsg-1
ii php-mysql 2:8.4+99
ii php8.4-gd [php-gd] 8.4.24-1
ii php8.4-mysql [php-mysqlnd] 8.4.24-1
Versions of packages wordpress recommends:
ii wordpress-theme-twentytwentyfive 7.1+dfsg1-1
Versions of packages wordpress suggests:
ii mariadb-server [virtual-mysql-server] 1:11.8.9+ds-2
ii php-curl 2:8.4+99
pn php-imagick <none>
ii php-mbstring 2:8.4+99
pn php-ssh2 <none>
ii php-xml 2:8.4+99
ii php-zip 2:8.4+99
ii php8.4-curl [php-curl] 8.4.24-1
ii php8.4-mbstring [php-mbstring] 8.4.24-1
ii php8.4-xml [php-xml] 8.4.24-1
ii php8.4-zip [php-zip] 8.4.24-1
-- no debconf information
