WordPress (Developer) - Package Updates

[girish]

[2.9.0]

• Use base image v3
• use smtp-mailer instead of wp-mail-smtp

[girish]

[2.10.0]

• Update WP to 5.6.2
• Release announcement
• #52440: Prevent the “Leave site” browser alert in Classic Editor when post title, excerpt, or post content fields are missing.
• #52396: Image options are not visible in pop up when the clicking replace button from Image block.
• #52449: Can’t change font size the 5.6.1 paragraph block.
• Enable WP multisite

[girish]

[2.11.0]

• Update default WordPress to 5.7
• Release announcement
• WP Admin: A new color palette
• New Robots API
• Ongoing cleanup after update to jQuery 3.5.1
• Lazy-load your iframes

[girish]

[2.11.1]

• Update default WordPress to 5.7.1
• Network activate redis in multi-site mode

[girish]

[2.11.3]

• Update default WordPress to 5.7.2
• Update redis plugin
• Release announcement

[girish]

[2.12.0]

• Update default WordPress to 5.8
• Release announcement
• Manage Widgets with Blocks
• Display Posts with New Blocks and Patterns
• Edit the Templates Around Posts
• Overview of the Page Structure
• Suggested Patterns for Blocks
• Style and Colorize Images

[girish]

[2.13.0]

• Update default WordPress to 5.8.1
• Make sendmail optional
• Release announcement
• Props @mdawaffe, member of the WordPress Security Team for their work fixing a data exposure vulnerability within the REST API.
• Props to Bentkowski of Securitum for reporting a XSS vulnerability in the block editor.
• The Lodash library has been updated to version 4.17.21 in each branch to incorporate upstream security fixes.

[girish]

[2.13.1]

• Update default WordPress to 5.8.2

[girish]

[2.13.2]

• Update default WordPress to 5.8.3
• Release announcement

[girish]

[2.14.0]

• Update default WordPress to 5.9
• Release announcement

[girish]

[2.14.1]

• Update LDAP plugin to 2.5.1
• Update redis and smtp-mailer plugins

[girish]

[2.14.2]

• Update default WordPress to 5.9.1
• Release announcement

[girish]

[2.14.3]

• Update default WordPress to 5.9.2
• Release announcement

[girish]

[2.14.4]

• Update authLdap to 2.5.2. This fixes the login integration with WooCommerce

[girish]

[2.14.5]

• Update default WordPress to 5.9.3

[girish]

[2.15.0]

• Update default WordPress to 6.0
• WordPress 6.0 "Arturo"
• Enhanced Writing Experience
• Style Switching
• More Template Choices
• Integrated Patterns
• Additional Design Tools
• Better List View

[girish]

[2.16.0]

• Update WordPress to 6.0.1
• Release announcement
• Email Display Name support . Please note that you have to set any custom mail from display name in the Email section.

[girish]

[2.16.1]

• Update WordPress to 6.0.2
• Release announcement

[girish]

[2.16.2]

• Update redis-cache to 2.2.0
• Enable mod_ext_filter

[girish]

[2.16.3]

• Update WordPress to 6.0.3
• Release announcement
• Stored XSS via wp-mail.php (post by email) – Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. via JPCERT
• Open redirect in wp_nonce_ays – devrayn
• Sender’s email address is exposed in wp-mail.php – Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. via JPCERT
• Media Library – Reflected XSS via SQLi – Ben Bidner from the WordPress security team and Marc Montpas from Automattic independently discovered this issue