Tales from the Techside

If you are running version 2.2 of the word-press platform you should probably make sure you have the latest upgrade to 2.2.3 there is a pretty large security hole which has been patched.

The two high priority fixes for this release are:

1. RSS2 comments feed was not working with the authors email address being transmitted improperly
2. There was an identified security hole in which someone could tamper with a post outside of their access rights. Reading the thread the possibility of it occurring seems pretty minimal but best to be safe in a case like that especially if you are running a multi-user blog.

The upgrade process is very simple you can manually push the changed files or just upload the entire trunk to your word-press directory. No database upgrade is required.

To read the list of fixes and files changed in the 2.2.3 release click here.

No comments yet.

Comments RSS TrackBack Identifier URI