Alerts This Week
Warning Icon 1 637
Alerts This Week
Warning Icon 1 637

Fedora 21: 2015-6808 Moderate: Threats from WordPress XSS Issues

fedora
Calendar Grey May 20, 2015
Dist Fedora Esm H88
Crucial security enhancement for WordPress 4.2.2 tackling several vulnerabilities; advised for Fedora 21 users.
**WordPress 4.2 “Powell” ** * Upstream announcement https://wordpress.org/news/2015/04/powell/ **WordPress 4.2.1 Security Release** * Upstream announcement https://word...

Summary

Wordpress is an online publishing / weblog package that makes it very easy,

almost trivial, to get information out to people on the web.

Important information in /usr/share/doc/wordpress/README.fedora

Update Information:

**WordPress 4.2 “Powell” ** * Upstream announcement https://wordpress.org/news/2015/04/powell/

**WordPress 4.2.1 Security Release** * Upstream announcement https://wordpress.org/news/2015/04/wordpress-4-2-1/

**WordPress 4.2.2 Security and Maintenance Release** * Upstream announcement https://wordpress.org/news/2015/05/wordpress-4-2-2/

Topics%20covered

Topics Covered

security advisory update Fedora XSS moderate severity wordpress

Change Log

* Thu May 7 2015 Remi Collet - 4.2.2-1 - WordPress 4.2.2 Security and Maintenance Release * Tue Apr 28 2015 Remi Collet - 4.2.1-1 - WordPress 4.2.1 Security Release - WordPress 4.2 “Powell” * Fri Apr 24 2015 Remi Collet - 4.1.3-1 - WordPress 4.1.3 Maintenance Release * Thu Apr 23 2015 Remi Collet - 4.1.2-1 - WordPress 4.1.2 Security Release * Thu Feb 19 2015 Remi Collet - 4.1.1-1 - WordPress 4.1.1 Maintenance Release * Mon Dec 22 2014 Remi Collet - 4.1-1 - WordPress 4.1 “Dinah” * Fri Nov 21 2014 Remi Collet - 4.0.1-1 - WordPress 4.0.1 Security Release * Tue Sep 30 2014 Remi Collet - 4.0-3 - use system php-getid3 when available #1145574

References


[ 1 ] Bug #1216069 - CVE-2015-3440 wordpress: stored XSS via long comments https://bugzilla.redhat.com/show_bug.cgi?id=1216069 [ 2 ] Bug #1214650 - CVE-2015-3438 CVE-2015-3439 wordpress: several vulnerabilities fixed in Wordpress 4.1.2 https://bugzilla.redhat.com/show_bug.cgi?id=1214650 [ 3 ] Bug #1219368 - wordpress: two cross-site scripting flaws fixed in 4.2.2 https://bugzilla.redhat.com/show_bug.cgi?id=1219368

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update wordpress' at the command line. For more information, refer to "Managing Software with yum", available at .

Name: wordpress
Product: Fedora 21
Version: 4.2.2
Release: 1.fc21
URL: https://wordpress.org/
Summary: Blog tool and publishing platform

Topics%20covered

Topics Covered

security advisory update Fedora XSS moderate severity wordpress

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here