-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 07 Aug 2026 18:13:22 +1000
Source: wordpress
Binary: wordpress wordpress-l10n wordpress-theme-twentytwentyfive wordpress-theme-twentytwentyfour wordpress-theme-twentytwentythree
Architecture: all
Version: 6.8.7+dfsg1-0+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Craig Small <csmall@debian.org>
Description:
 wordpress  - weblog manager
 wordpress-l10n - weblog manager - language files
 wordpress-theme-twentytwentyfive - weblog manager - twentytwentyfive theme files
 wordpress-theme-twentytwentyfour - weblog manager - twentytwentyfour theme files
 wordpress-theme-twentytwentythree - weblog manager - twentytwentythree theme files
Closes: 1143843
Changes:
 wordpress (6.8.7+dfsg1-0+deb13u1) trixie-security; urgency=medium
 .
   * New upstream security release
     CVE-2026-64638 fix XSS in login that leads to RCE Closes: #1143843
Checksums-Sha1:
 6a428bb5037d1cce2ec7de250619a0342f4ef89d 4371984 wordpress-l10n_6.8.7+dfsg1-0+deb13u1_all.deb
 1c92efad7b08569c255c464dbd0d77d407e0482f 7905208 wordpress-theme-twentytwentyfive_6.8.7+dfsg1-0+deb13u1_all.deb
 4aadae7df20bc497ee26926a4036e6964fcfa858 2917052 wordpress-theme-twentytwentyfour_6.8.7+dfsg1-0+deb13u1_all.deb
 101bfce3c2ba8be5888868d3128c5d60302d04da 2113056 wordpress-theme-twentytwentythree_6.8.7+dfsg1-0+deb13u1_all.deb
 625fd52a8dfb45f4dd7b2f5160fd2f87063ef0ee 7623 wordpress_6.8.7+dfsg1-0+deb13u1_all-buildd.buildinfo
 e36aa4cf6d63195807943b67b818f8e3daa555a6 8922732 wordpress_6.8.7+dfsg1-0+deb13u1_all.deb
Checksums-Sha256:
 64306a78f410db8a43e539a264ec641116352df1bf2468d32e48112661b20b64 4371984 wordpress-l10n_6.8.7+dfsg1-0+deb13u1_all.deb
 7af11e32a8499e27ac38c35b0d2b5319e499eebe63cf80b4f7610fb375dfb708 7905208 wordpress-theme-twentytwentyfive_6.8.7+dfsg1-0+deb13u1_all.deb
 328c6bc7577453dbe87bf414cef96e092ac4a0e6147801dd3cafb068e9a16bcf 2917052 wordpress-theme-twentytwentyfour_6.8.7+dfsg1-0+deb13u1_all.deb
 3958f22592ff20ef7eb434150cd213c355a34c1083e23819fb98d0e12a82c3ea 2113056 wordpress-theme-twentytwentythree_6.8.7+dfsg1-0+deb13u1_all.deb
 5e241b807fd4e42166a05c972cb13b16f7116c22d36189106ae24726713c6be9 7623 wordpress_6.8.7+dfsg1-0+deb13u1_all-buildd.buildinfo
 b6716bf40142516c0120cebb63c4cb323354277dbf90aa0e9a5d9bae3fca2d38 8922732 wordpress_6.8.7+dfsg1-0+deb13u1_all.deb
Files:
 880ff7afcdef0424863566c10912a59f 4371984 localization optional wordpress-l10n_6.8.7+dfsg1-0+deb13u1_all.deb
 6203f96a94998f0b49ea1979a42861f2 7905208 web optional wordpress-theme-twentytwentyfive_6.8.7+dfsg1-0+deb13u1_all.deb
 c58245c642d2cf6c9d9e768e0f06294d 2917052 web optional wordpress-theme-twentytwentyfour_6.8.7+dfsg1-0+deb13u1_all.deb
 2571304fbe21e4d1f919e7c50c29db5c 2113056 web optional wordpress-theme-twentytwentythree_6.8.7+dfsg1-0+deb13u1_all.deb
 f5fb6dd72da70371926d5c04779805c7 7623 web optional wordpress_6.8.7+dfsg1-0+deb13u1_all-buildd.buildinfo
 c36856ca42a8f958f7fa0569009c76e2 8922732 web optional wordpress_6.8.7+dfsg1-0+deb13u1_all.deb

-----BEGIN PGP SIGNATURE-----
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=Ad4K
-----END PGP SIGNATURE-----