Late-breaking news on the 5.2.4 short-cycle security release that landed October 14. When we released the news post, I inadvertently missed giving props to Simon Scannell of RIPS Technologies for finding and disclosing an issue where path traversal can lead to remote code execution. Simon has done a great deal of work on the WordPress project, and failing to mention his contributions is a huge oversight on our end. Thank you to all of the reporters for privately disclosing vulnerabilities, which gave us time to fix them before WordPress sites could be attacked.
https://wordpress.org/news/2019/11/wordpress-5-2-4-update/

WordPress 5.3 “Kirk” is available for download! With over 150 new enhancements, Kirk is more intuitive than previous releases, focuses on accessibility, and includes a fresh new default theme.
https://wordpress.org/news/2019/11/kirk/