<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<br>
<br>
WordPress 4.4.2 is now available. This is a security release for all
previous versions and we strongly encourage you to update your sites
<b>immediately</b>.<br>
<br>
WordPress versions 4.4.1 and earlier are affected by two security
issues: a possible SSRF for certain local URIs, reported by Ronni
Skansing; and an open redirection attack, reported by Shailesh
Suthar.<br>
<br>
Thank you to both reporters for practicing responsible disclosure.<br>
<br>
In addition to the security issues above, WordPress 4.4.2 fixes 17
bugs from 4.4 and 4.4.1. For more information, see the release notes
or consult the list of changes:<br>
<br>
<a class="moz-txt-link-freetext" href="https://codex.wordpress.org/Version_4.4.2">https://codex.wordpress.org/Version_4.4.2</a><br>
<a class="moz-txt-link-freetext" href="https://core.trac.wordpress.org/query?milestone=4.4.2">https://core.trac.wordpress.org/query?milestone=4.4.2</a><br>
<br>
Download WordPress 4.4.2 or venture over to Dashboard → Updates and
simply click “Update Now.” Sites that support automatic background
updates are already beginning to update to WordPress 4.4.2.<br>
<br>
Refer:
<a class="moz-txt-link-freetext" href="https://wordpress.org/news/2016/02/wordpress-4-4-2-security-and-maintenance-release/">https://wordpress.org/news/2016/02/wordpress-4-4-2-security-and-maintenance-release/</a><br>
<br>
<br>
===<br>
Computer Security Incident Response Team - CSIRT<br>
Universidade Estadual de Campinas - Unicamp<br>
Centro de Computacao - CCUEC<br>
Contato: +55 19 3521-2289 ou INOC-DBA: 1251*830 <br>
<br>
<br>
</body>
</html>