WordPress rolled out another security update
While WordPress 2.0.6 security update is less than two weeks old they rolled out another new security update 2.0.7. Apparently this new update is released fixing two major bugs in 2.0.6–PHP security problem and the Feedburner issue. There are few more other small bugs also got patched in this new release. Just to make it clear-Feedburner bug was only in 2.0.6 not in other versions. WordPress recommended this 2.0.7 security upgrade to all user using lower versions of WordPress. The bugs fixes in 2.0.7-
-
Security fix for wp_unregister_GLOBALS() to work around the zend_hash_del_key_or_index bug in PHP 4 versions less than 4.4.3 and PHP 5 versions less than 5.1.4 with register_globals set to “On.�
-
Feeds now properly serve 304 Not Modified headers instead of mismatched 200/304 headers (a.k.a. the FeedBurner bug).
-
Backport of another 304 Not Modified fix from WordPress 2.1
-
Deleting WordPress Pages no longer gives an “Are You Sure?� prompt.
-
After deleting a WordPress Page, you are now properly redirected to the Edit Pages screen.
-
Sending an image at original size in Internet Explorer no longer adds an incorrect “height� attribute.
The upgrade from 2.0.6 to 2.0.7 is simple as just six files has been changed.
wp-admin/inline-uploading.php
wp-admin/post.php
wp-includes/classes.php
wp-includes/functions.php
wp-settings.php
wp-includes/version.php
Mark Jaquith also mentioned that WordPress 2.1 is due in end of this month (January), but the branches of 2.0 will be still be supported and maintained for quite a while. Can’t wait to see that WP2.1.
WordPress, WP, Security Update, WP 2.0.7
