Qualys discovered that the OpenSMTPD SMTP server performed insufficient validation of SMTP commands, which could result in local privilege escalation or the execution of arbitrary code.
Comment
Fix privilege escalation (https://bugzilla.redhat.com/show_bug.cgi?id=1803499)
An update for kernel-rt is now available for Red Hat Enterprise MRG 2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
WordPress 5.4 Beta 3
Feb25
WordPress 5.4 Beta 3 is now available!
This software is still in development, so we don’t recommend you run it on a production site. Consider setting up a test site to play with the new version.
You can test the WordPress 5.4 beta in two ways:
- Try the WordPress Beta Tester plugin (choose “bleeding edge nightlies” or “Beta/RC – Bleeding edge” option in version 2.2.0 or later of the plugin) * you must already have updated to your site to “bleeding edge nightlies” for the “Beta/RC – Bleeding edge” option to be available
- Or download the beta here (zip).
WordPress 5.4 is slated for release on March 31st, 2020, and we need your help to get there.
Thanks to the testing and feedback from everyone who tested beta 2 (and beta 1) over 24 tickets have been closed in the past week.
Some highlights
Developer notes
WordPress 5.4 has lots of refinements to polish the developer experience. To keep up, subscribe to the Make WordPress Core blog and pay special attention to the developer notes tag for updates on those and other changes that could affect your products.
How to Help
Do you speak a language other than English? Help us translate WordPress into more than 100 languages!
If you think you’ve found a bug, you can post to the Alpha/Beta area in the support forums. We’d love to hear from you! If you’re comfortable writing a reproducible bug report, file one on WordPress Trac where you can also find a list of known bugs.
An update is now available for Red Hat JBoss Enterprise Application Platform 7.2 for Red Hat Enterprise Linux 6, 7, and 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,