Posts Tagged ‘security release’

WordPress 2.5.1

April 25, 2008 by Emily  

News

2.5.1 was released today, so if you been waiting to upgrade, now’s the time to do it.  This new release contains one important security fix for 2.5, so it’s important you upgrade soon.

If you are just concerned with fixing the security issue you may download and replace these files:

• wp-includes/pluggable.php
• wp-admin/includes/media.php
• wp-admin/media.php

But you should really upgrade everything as 2.5.1 contains many bug fixes and improvements, including:

• Performance improvements for the Dashboard, Write Post, and Edit Comments pages.
• Better performance for those who have many categories
• Media Uploader fixes
• An upgrade to TinyMCE 3.0.7
• Widget Administration fixes
• Various usability improvements
• Layout fixes for IE

Also, as of 2.5 they’ve added an extra security measure to WordPress.  This involves adding a “secret key” to your wp-config.php file.  This measure will improve cookie security.  All you need to do is go to this website and copy and line it shows you into your wp-config.php file underneath the database info.  Every install of WP you have should have a different random “secret key” (you can just keep refreshing the website to get new ones).  And don’t worry, you’ll never need to remember this key so the more random the better.

WordPress 2.3.3

February 5, 2008 by Emily  

Around the Web

A pretty urgent new security release of WP is out. It fixes an issue where any user of you blog can edit any other user’s posts. If you just want to patch that issue you can download the new version of the file. 2.3.3 also fixes a few bugs, though, so otherwise you should download the whole release.