--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-d48955723f
2018-04-14 19:53:06.556994
--------------------------------------------------------------------------------
Name : wordpress
Product : Fedora 27
Version : 4.9.5
Release : 1.fc27
URL :
http://www.wordpress.org
Summary : Blog tool and publishing platform
Description :
Wordpress is an online publishing / weblog package that makes it very easy,
almost trivial, to get information out to people on the web.
Important information in /usr/share/doc/wordpress/README.fedora
--------------------------------------------------------------------------------
Update Information:
**WordPress 4.9.5 Security and Maintenance Release** WordPress 4.9.5 is now
available. This is a security and maintenance release for all versions since
WordPress 3.7. We strongly encourage you to update your sites immediately.
WordPress versions 4.9.4 and earlier are affected by three security issues. As
part of the core team's ongoing commitment to security hardening, the following
fixes have been implemented in 4.9.5: * Don't treat localhost as same host
by default. * Use safe redirects when redirecting the login page if SSL is
forced. * Make sure the version string is correctly escaped for use in
generator tags. Thank you to the reporters of these issues for practicing
���[coordinated security
disclosure](https://make.wordpress.org/core/handbook/testing/reporting-se...
vulnerabilities/): [
xknown](https://profiles.wordpress.org/xknown) of the
WordPress Security Team, [Nitin Venkatesh
(
nitstorm)](https://hackerone.com/nitstorm), and [Garth
Mortensen](https://twitter.com/voldemortensen) of the WordPress Security Team.
Twenty-five other bugs were fixed in WordPress 4.9.5. Particularly of note were:
* The previous styles on caption shortcodes have been restored. * Cropping
on touch screen devices is now supported. * A variety of strings such as
error messages have been updated for better clarity. * The position of an
attachment placeholder during uploads has been fixed. * Custom nonce
functionality in the REST API JavaScript client has been made consistent
throughout the code base. * Improved compatibility with PHP 7.2.
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade wordpress' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------