Multiple vulnerabilities in WordPress before 3.9.2, including denial of service and information disclosure issues related to XML entity expansion.
The wordpress package has been updated to version 3.9.2 to fix these issues. See the release announcement for more details.