Upgrading to WordPress 2.8.5
In an effort to keep your WordPress installations as secure as possible, WordPress 2.8.5 is released which closes up some security gaps and helps your installation become more secure.
The primary fixes for version 2.8.5 of WordPress include:
* A fix for the Trackback Denial-of-Service attack that is currently being seen.
* Removal of areas within the code where php code in variables was evaluated.
* Switched the file upload functionality to be whitelisted for all users including Admins.
* Retiring of the two importers of Tag data from old plugins.
The company recommends all WordPress users to upgrade to 2.8.5 as soon as possible to minimize your security risks, they also have listed a link to the WordPress Exploit Scanner to use and scan your website to see if your site may have been compromised and there are any possible “risky” files or intrusions.
One note the WP-Exploit Scanner tries to allocate 256MB by default and this can cause a crash on some web hosting providers where you are on a shared hosting plan with a Memory limit. You can edit the plug-in php and turn down or up the amount of memory you want the scanner to use by adjusting this line:
define( ‘WP_MEMORY_LIMIT’, ’256M’ );
I have upgraded all 7 of my managed blogs to WordPress 2.8.5 this morning and have not seen any issues, I didn’t do the automatic upgrade though and did the manual install (is faster when you run so many blogs).
-Dragon Blogger
Related posts:
- Upgrading To WordPress 2.8 I found some noticeable new features right away with WordPress 2.8, including the editor which contains numbered lines now in...
- WordPress 2.9.1 Released: Fixes Pings and Scheduled Posts Wordpress 2.9.1 was released and fixes the issues with pingbacks and scheduled posting that showed up with Wordpress 2.9, upgrade...
- WordPress 2.8.6 Released: Upgrade Now The latest fix Wordpress 2.8.6 addresses vulnerabilities with sites who have multiple authors and uploads that can be exploited to...
- WordPress 3.0.2 Mandatory Security Fix Wordpress 3.0.2 is released and has a mandatory security fix that is essential for multi author blogs who have writers...
- Upgrade to WordPress 2.9.2 Upgrading to Wordpress 2.9.2 will close the security hole where contributors can see posts in your trashcan even if they...
This fix is to plug a possible security issue and i dont care how often they release such updates. The patch is simple and quick to install and i cannot believe Wordpress is still free. Its awesome.
.-= festivalplanet´s last blog ..Auckland gets new music festival =-.
- spam
- offensive
- disagree
- off topic
Like