--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-da7b49a4b1
2020-01-03 20:35:14.417383
--------------------------------------------------------------------------------
Name : wordpress
Product : Fedora 30
Version : 5.3.2
Release : 1.fc30
URL :
http://www.wordpress.org
Summary : Blog tool and publishing platform
Description :
Wordpress is an online publishing / weblog package that makes it very easy,
almost trivial, to get information out to people on the web.
Important information in /usr/share/doc/wordpress/README.fedora
--------------------------------------------------------------------------------
Update Information:
**WordPress 5.3.2 Maintenance Release** Shortly after WordPress 5.3.1 was
released, a couple of high severity Trac tickets were opened. The Core team
scheduled this quick maintenance release to resolve these issues. Main issues
addressed in 5.3.2: * Date/Time: Ensure that get_feed_build_date() correctly
handles a modified post object with invalid date. * Uploads: Fix file name
collision in wp_unique_filename() when uploading a file with upper case
extension on non case-sensitive file systems. * Media: Fix PHP warnings in
wp_unique_filename() when the destination directory is unreadable. *
Administration: Fix the colors in all color schemes for buttons with the .active
class. * Posts, Post Types: In wp_insert_post(), when checking the post date
to set future or publish status, use a proper delta comparison. ---- See:
[WordPress 5.3.1 Security and Maintenance
Release](https://wordpress.org/news/2019/12/wordpress-5-3-1-security-and-
maintenance-release/) **Four security issues** affect WordPress versions 5.3
and earlier; version 5.3.1 fixes them, so you���ll want to upgrade. If you haven���t
yet updated to 5.3, there are also updated versions of 5.2 and earlier that fix
the security issues. * Props to Daniel Bachhuber for finding an issue where
an unprivileged user could make a post sticky via the REST API. * Props to
Simon Scannell of RIPS Technologies for finding and disclosing an issue where
cross-site scripting (XSS) could be stored in well-crafted links. * Props to
the
WordPress.org Security Team for hardening wp_kses_bad_protocol() to ensure
that it is aware of the named colon attribute. * Props to Nguyen The Duc for
discovering a stored XSS vulnerability using block editor content.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 19 2019 Remi Collet <remi(a)remirepo.net> - 5.3.2-1
- WordPress 5.3.2 Maintenance Release
* Fri Dec 13 2019 Remi Collet <remi(a)remirepo.net> - 5.3.1-1
- WordPress 5.3.1 Security and Maintenance Release
* Wed Nov 13 2019 Remi Collet <remi(a)remirepo.net> - 5.3-1
- WordPress 5.3 ���Kirk���
* Tue Oct 15 2019 Remi Collet <remi(a)remirepo.net> - 5.2.4-1
- WordPress 5.2.4 Security Release
* Thu Sep 5 2019 Remi Collet <remi(a)remirepo.net> - 5.2.3-1
- WordPress 5.2.3 Security and Maintenance Release
* Wed Jun 19 2019 Remi Collet <remi(a)remirepo.net> - 5.2.2-1
- WordPress 5.2.2 Maintenance Release
* Wed May 22 2019 Remi Collet <remi(a)remirepo.net> - 5.2.1-1
- WordPress 5.2.1 Maintenance Release
* Wed May 8 2019 Remi Collet <remi(a)remirepo.net> - 5.2.0-1
- WordPress 5.2 ���Jaco���
- raise dependency on PHP 7.2
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-da7b49a4b1' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------