[SECURITY] Fedora EPEL 7 Update: wordpress-4.9.5-1.el7

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-13062a4d15 2018-04-19 16:17:52.473813 -------------------------------------------------------------------------------- Name : wordpress Product : Fedora EPEL 7 Version : 4.9.5 Release : 1.el7 URL : http://www.wordpress.org Summary : Blog tool and publishing platform Description : Wordpress is an online publishing / weblog package that makes it very easy, almost trivial, to get information out to people on the web. Important information in /usr/share/doc/wordpress-4.9.5/README.fedora -------------------------------------------------------------------------------- Update Information: **WordPress 4.9.5 Security and Maintenance Release** WordPress 4.9.5 is now available. This is a security and maintenance release for all versions since WordPress 3.7. We strongly encourage you to update your sites immediately. WordPress versions 4.9.4 and earlier are affected by three security issues. As part of the core team's ongoing commitment to security hardening, the following fixes have been implemented in 4.9.5: * Don't treat localhost as same host by default. * Use safe redirects when redirecting the login page if SSL is forced. * Make sure the version string is correctly escaped for use in generator tags. Thank you to the reporters of these issues for practicing ���[coordinated security disclosure](https://make.wordpress.org/core/handbook/testing/reporting-se... vulnerabilities/): [xknown](https://profiles.wordpress.org/xknown) of the WordPress Security Team, [Nitin Venkatesh (nitstorm)](https://hackerone.com/nitstorm), and [Garth Mortensen](https://twitter.com/voldemortensen) of the WordPress Security Team. Twenty-five other bugs were fixed in WordPress 4.9.5. Particularly of note were: * The previous styles on caption shortcodes have been restored. * Cropping on touch screen devices is now supported. * A variety of strings such as error messages have been updated for better clarity. * The position of an attachment placeholder during uploads has been fixed. * Custom nonce functionality in the REST API JavaScript client has been made consistent throughout the code base. * Improved compatibility with PHP 7.2. -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update wordpress' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/... All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------