WordPress 2.6.3 Released
Just noticed that the new version of wordpress, i.e. WordPress 2.6.3 before the release of wordpress 2.7 has come out, for a fix of some feed fetching vulnerability. This does not require your full wordpress download and upgrade, but adding a couple files would do everything. Here is what the wordpress blog says about it -
A vulnerability in the Snoopy library was announced today. WordPress uses Snoopy to fetch the feeds shown in the Dashboard. Although this seems to be a low risk vulnerability for WordPress users, we wanted to get an update out immediately. 2.6.3 is available for download right now. If you don’t want to download the whole release to get the security fix, you can download the following two files and copy them over your 2.6.2 installation.
wp-includes/class-snoopy.php
wp-includes/version.php
Go to this post to download the latest version of wordpress, or just the couple files which you can add to the directory to perform the upgrade.
WordPress 2.7 is yet to come on November 10th, and you can see a few sneak-peak pictures and also the video of Matt Mullenweg on the new version demo.
October 25th, 2008 at 6:29 pm
i think people will prefer to wait some more days for the 2.7 rather than going for this!!!!
October 25th, 2008 at 6:58 pm
Thanx Chetan. Adding a few files while upgrading helps as compare to upgrading the entire wp.
October 25th, 2008 at 7:34 pm
I upgraded by editing these two files
October 26th, 2008 at 2:38 am
since I have new domain for the first time using wp I don’t really know how to upgrade wp.
October 26th, 2008 at 5:47 am
Yeah Adding a few files while upgrading comes in handy rather than going in for the whole thing.