-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Package : wordpress Version : 3.6.1+dfsg-1~deb7u16 CVE ID : CVE-2017-9066 Debian Bug : 862816
In WordPress, there is insufficient redirect validation in the HTTP class, leading to SSRF. For Debian 7 "Wheezy", these problems have been fixed in version 3.6.1+dfsg-1~deb7u16. We recommend that you upgrade your wordpress packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEjtbD+LrJ23/BMKhw+COicpiDyXwFAlmln98ACgkQ+COicpiD yXwl3hAApeTbEs20UXPcRdDVwxLFR3g2OXBNHynRIs6juVIv4az1YlshqticJiDU drJ0LhXj14ymmaTwCMg/lUfK84+nv9T8rOEdYPLwcZQEv9xTzhOtLrfN1ufa6CXA am9eRa6U1a4PuZX+vVPX0NPVFVF3/PhZ2b6mjL03zZc0I6zl53HU0RFoIrQ99bDz o4Bh6migpKR4oz1ye3ecArKBIc0WNRy+F5J8cLya72ViDGAKiTWVplZmsqAui1jq xb/M1IYWg4azxqdtM3fCfUu5ajPYuV7vTnsppriViKB+ILe2vZJLaybDNkeQBvRI olw4nJxCpXek8mJNGvdCo6tsMFH6/ubEJggZkaxySAgmjhFKO99VyBQNIRRYzyXv 8AUh5tZGeIyF4qqGPn2ye+4IsnZXTRpP0xESJeCUfIzsJssE6jnzW0Ok8aA5DoiB PgC56B951/vdYniEm/1g7xEM42xdK76uLU0NTXy4ECNY6jJS7vqyi9U1vUGMrO9c TmVPlWr7xsFlM0kHRwpBlMN0UDmyi34s6jsaYCG7p+UWBMnZ1Q25mjTqRx0PQq0S htPB+wa0MvGEQoBjaNFsvrUaGt1z2dMqi/Avj24zusVWP2cnYygxoqZIcMty8dZu yIJwLDas764vLRYG3Rv+MOkU6ot75REj6JwVt6AYWVUex0SvG/M= =xizP -----END PGP SIGNATURE-----
