10 replies to this topic

[primexx]

http://wordpress.org/development/2007/04/w...s-213-and-2010/

Quote

We have a security update release now available for both the 2.1 and 2.0 branches of WordPress now available for immediate download. This update is highly recommend for all users of both branches.

These releases include fixes for several publicly known minor XSS issues, one major XML-RPC issue, and a proactive full sweep of the WordPress codebase to protect against future problems. Many thanks to Sumit Siddharth and Alex Concha for their help with reporting issues in this release.

As an update to the systems issue we had last month, we have taken dozens of additional precautions with the servers and systems that run WordPress.org and they appear to be working well, despite hundreds of hack attempts after we publicly disclosed there had been a problem. We are also now aggressively monitoring all downloads for any changes or modifications, and we are confident the same type of problem won’t happen again.

Anyone know where to find the changed files list?

[DaveLegg]

Why do they always time their releases for just AFTER I update the neowin events blog, and just before we have an event on. I said when I did the upgrade last week there'd be a release soon, looks like I was right.

[DJLunacy]

Probably the same reason why people complain about updated software being available.

Thanks for the post... I'll try to make it a point to update my WP install later on today.

[Rappy]

Thanks for heads up i'll try to update later if not the weekend

[Techno_Funky]

Argh!!! seriously this is getting a bit annoying already

[DJLunacy]

Techno_Funky, on Apr 4 2007, 19:54, said:

Argh!!! seriously this is getting a bit annoying already

Then don't update or switch to something else.

[GamerZ]

WP 2.2 will be stated for release on 22nd April LOL

[The_Decryptor]

DaveLegg, on Apr 4 2007, 05:46, said:

Why do they always time their releases for just AFTER I update the neowin events blog, and just before we have an event on. I said when I did the upgrade last week there'd be a release soon, looks like I was right.

That's why you have a patch/diff setup, and manage it via SVN, all you have to do is find the changes and submit them

Well, that's what i want to do anyway, but i have no access to the command line on my host

[Techno_Funky]

DJLunacy, on Apr 5 2007, 01:52, said:

Then don't update or switch to something else.

Thanks for your suggestion

[Rappy]

Techno_Funky, on Apr 4 2007, 19:54, said:

Argh!!! seriously this is getting a bit annoying already

I agree but I have it there ready for when I have a few spare moments

[Echilon]

I saw this this morning, cheers