While I missed the WordPress 5.0 release, it was only a few more days before there was a security release out.
So WordPress 5.0.1 will be available in Debian soon. This is both a security update from 5.0.1 and a huge feature update from the 4.9.x versions to the 5.0 versions.
The WordPress website, in their 5.0 announcement describe all the changes better, but one of the main things is the new editor (which I’m using as I write this). It’s certainly cleaner, or perhaps more sparse. I’m not sure if I like it yet.
The security fixes (there are 7) are the usual things you expect from a WordPress security update. The usual XSS and permission problems type stuff.
I have also in the 5.0.1 Debian package removed the build dependency to libphp-phpmailer. The issue with that package is there won’t be any more security updates for the version in Debian. WordPress has an embedded version of it which *I hope* they maintain. There is an issue about the phpmailer in WordPress, so hopefully it gets fixed soon.