-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 21 Jul 2026 16:46:23 +1000 Source: wordpress Architecture: source Version: 6.8.6+dfsg1-0+deb13u1 Distribution: trixie-security Urgency: medium Maintainer: Craig Small Changed-By: Craig Small Closes: 1142510 Changes: wordpress (6.8.6+dfsg1-0+deb13u1) trixie-security; urgency=medium . * New upstream security release 6.8.6 * CVE-2026-60137 fix facilitated SQL injection Closes: #1142510 * Includes release 6.8.4 and 6.8.5 updates - Check permissions on edit notes CVE-2026-3906 (not vulnerable) Checksums-Sha1: 86ad2320a06f96f2c0208ec1dd30fd9a1d230f40 2454 wordpress_6.8.6+dfsg1-0+deb13u1.dsc 801ef7748ced4da04f426f5dceef72371c07051b 22353380 wordpress_6.8.6+dfsg1.orig.tar.xz b8f881557349979d02732fd7d23a8466a01ec264 6913388 wordpress_6.8.6+dfsg1-0+deb13u1.debian.tar.xz 1f92ee113f746ef19ce01e297c44c5f2764e61aa 7762 wordpress_6.8.6+dfsg1-0+deb13u1_amd64.buildinfo Checksums-Sha256: 751c842edf129ba381c37e43b395ae1c7dbeff98fb0091316ee2943ad819ebeb 2454 wordpress_6.8.6+dfsg1-0+deb13u1.dsc c1673d6833400e9c7bd76f95de5046bc7e5cdc523eafff219ba100761542c624 22353380 wordpress_6.8.6+dfsg1.orig.tar.xz a82e4d7c0fe6b7b7687bf70125792b515947ce765f8c04bd7f430c31a0188a18 6913388 wordpress_6.8.6+dfsg1-0+deb13u1.debian.tar.xz 46a57b4288f3c1d435d4f359e0ea9175a2b5b41329244faf8e4215197d65964d 7762 wordpress_6.8.6+dfsg1-0+deb13u1_amd64.buildinfo Files: a2d21c07d60039cd8e78b91fec910c11 2454 web optional wordpress_6.8.6+dfsg1-0+deb13u1.dsc 69173a72348b2ed003958b78846cce3f 22353380 web optional wordpress_6.8.6+dfsg1.orig.tar.xz 9999da2d469430a32399b3ae707d0d63 6913388 web optional wordpress_6.8.6+dfsg1-0+deb13u1.debian.tar.xz 0c13b6a677fe0edae5a38f73c1cb0a44 7762 web optional wordpress_6.8.6+dfsg1-0+deb13u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXT3w9TizJ8CqeneiAiFmwP88hOMFAmpiDzEACgkQAiFmwP88 hONiJw/+PHxii5BRvgiZLAlWTtbTP0TtSuRQq6XAPoo50Xq2Th6mfs6QCRL58W2v AwKz1Ws5xe4wC7G+zeDFQ1DldW++yZyxi6FQpCtEa2p9teaWSBBGPbse7PtylxGV pxiew5ZbgiYarL0rqKvw9Kt+4+W9VR9VsmYF21LFn3TKDDgPfWp7fAji//ccMK9D 3fS3KMNC85Anl64hB6H41SezwVSYLY4QnSZ6Bh22O0L8ghjsvdSdjJFBPGULL2m7 VvQcamxvPkwaJeLZCnco4EOQrHTaA89TGLvA3jzXWoHT7vNavuRV1pP3flZTGXQI bgmHYNZYaQevlJqQQwZ3AHL+bzNpFBSC6c/oAochV06zRPYxW8vUYcJN8nyDDRrR zCEi58JNwuYeEhAsTtrnv7Io8hk1TRk1zXm/DRCt7jYf0iRAhsuRFofL12yiFBmI 6FLKIq8kJA3ZPXZQEDk/8ZA7mQdH56Z8NBKSz2j0l5bWqHliRIyEy6sRfHNOrnzJ KS6i8dF2TuqXDvkt/1YuFAsBOumaBR+p5PpZYdn4b6LX/aKhjuYbctTrOoAnD9Qy o7VVwfvMSVi8UOvtL6FgpOGOtYVDb1Ne0TgwbUogozQ3RJCxn2V0E6rcKLQTP7vA SMUSJjAjtwr5YdftuPVqeIiv/5k3egfL8HpEfBCzEzyZCSV69LU= =fJng -----END PGP SIGNATURE-----