[wordpress] [DSA-1564-1] several vulnerabilities

[disabled.user]

Binary package hint: wordpress

References:
DSA-1564-1 (http://www.debian.org/security/2008/dsa-1564)

Quoting:
"Several remote vulnerabilities have been discovered in wordpress,
a weblog manager. The Common Vulnerabilities and Exposures project
identifies the following problems:

CVE-2007-3639

    Insufficient input sanitising allowed for remote attackers to
    redirect visitors to external websites.

CVE-2007-4153

    Multiple cross-site scripting vulnerabilities allowed remote
    authenticated administrators to inject arbitrary web script or HTML.

CVE-2007-4154

    SQL injection vulnerability allowed allowed remote authenticated
    administrators to execute arbitrary SQL commands.

CVE-2007-0540

    WordPress allows remote attackers to cause a denial of service
    (bandwidth or thread consumption) via pingback service calls with
    a source URI that corresponds to a file with a binary content type,
    which is downloaded even though it cannot contain usable pingback data.

[no CVE name yet]

    Insufficient input sanitising caused an attacker with a normal user
    account to access the administrative interface."

[William Grant (wgrant)]

All of these are already fixed.

[Hew (hew)]

Ubuntu Feisty Fawn is no longer supported, so a SRU will not be issued for this release. Marking Feisty as Won't Fix.

[Jamie Strandboge (jdstrand)]

Thank you for reporting this bug to Ubuntu. dapper has reached EOL
(End of Life) and is no longer supported. As a result, this bug
against dapper is being marked "Won't Fix". Please see
https://wiki.ubuntu.com/Releases for currently supported Ubuntu
releases.

Please feel free to report any other bugs you may find.