Hi, On Wed, Sep 16, 2015 at 10:54:27AM +0200, Salvatore Bonaccorso wrote: > See https://wordpress.org/news/2015/09/wordpress-4-3-1/ for details. I > have not checked older versions in jessie and wheezy. Are they > affected? If so can you update the BTS version information as needed?
Btw, there is as well one issue which does not have a CVE (Cross-site scripting vulnerability in the user list table). All commits are references as well in https://bugzilla.redhat.com/show_bug.cgi?id=1263657 . Regards, Salvatore

