Package: wordpress Version: 4.2.1+dfsg-1 Severity: important I read on
http://www.heise.de/open/meldung/Angreifer-kapern-WordPress-Seiten-ueber-Standard-Theme-2636583.html that attackers take over wordpress installations with that have Twenty Fifteen theme installed, so I tried to purge it, as I do not use it anyway, but: mondschein:~> apt-cache show wordpress | grep wordpress-theme-twentyfifteen Depends: apache2 | httpd, libapache2-mod-php5 | php5, ca-certificates, mysql-client | mariadb-client, php5-gd, php5-mysql | php5-mysqlnd, wordpress-theme-twentyfifteen, libjs-cropper (>= 1.2.2), libjs-mediaelement (>= 2.15.1+dfsg), libphp-phpmailer (>= 5.2.9+dfsg), php-getid3 (>= 1.9.8) Why? Can you degrade this to a recommends? I moved the theme out of the way with a mv command for now to make it inaccessible. Thanks, Martin -- System Information: Debian Release: 8.0 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable'), (100, 'unstable'), (1, 'experimental') Architecture: i386 (i686) Kernel: Linux 3.16.0-4-686-pae (SMP w/1 CPU core) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: sysvinit (via /sbin/init) Versions of packages wordpress depends on: ii apache2 [httpd] 2.4.10-10 ii apache2-mpm-prefork [httpd] 2.4.10-10 ii ca-certificates 20141019 ii libapache2-mod-php5 5.6.7+dfsg-1 ii libjs-cropper 1.2.2-1 ii libjs-mediaelement 2.15.1+dfsg-1 ii libphp-phpmailer 5.2.9+dfsg-2 ii mysql-client 5.5.43-0+deb8u1 ii mysql-client-5.5 [mysql-client] 5.5.43-0+deb8u1 ii php-getid3 1.9.8-3 ii php5 5.6.7+dfsg-1 ii php5-gd 5.6.7+dfsg-1 ii php5-mysql 5.6.7+dfsg-1 ii wordpress-theme-twentyfifteen 4.2.1+dfsg-1 Versions of packages wordpress recommends: ii wordpress-l10n 4.2.1+dfsg-1 Versions of packages wordpress suggests: ii mysql-server 5.5.43-0+deb8u1 pn php5-ssh2 <none> -- Configuration Files: /etc/wordpress/htaccess changed [not included] -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
