Acne Zit Med | acnezitmed.com » Ryan Boren

WordPress 2.9.2

Ryan Boren — Mon, 15 Feb 2010 17:37:08 +0000

Thomas Mackenzie alerted us to a problem where logged in users can peek at trashed posts belonging to other authors. If you have untrusted users signed up on your blog and sensitive posts in the trash, you should upgrade to 2.9.2. As always, you can visit the Tools->Upgrade menu to upgrade.

WordPress 2.9.1

Ryan Boren — Mon, 04 Jan 2010 22:35:31 +0000

After over a million downloads of WordPress 2.9 and lots of feedback from all of you, we’re releasing WordPress 2.9.1. This release addresses a handful of minor issues as well as a rather annoying problem where scheduled posts and pingbacks are not processed correctly due to incompatibilities with some hosts. If any of these issues affect you, give 2.9.1 a try. Download 2.9.1 or upgrade automatically from the Tools->Upgrade menu in your blog’s admin area.

WordPress 2.9.1 Release Candidate 1

Ryan Boren — Tue, 29 Dec 2009 23:27:23 +0000

Thanks to everyone who tested 2.9.1 Beta 1. We’re following that up with Release Candidate 1. RC1 contains a few more fixes, bringing the number of fixed tickets up to 23. If you are already running Beta 1, visit Tools->Upgrade in your blog’s admin to get RC1. You can also download the RC1 package and install manually. If all goes well, 2.9.1 will be here soon.

WordPress 2.9.1 Beta 1

Ryan Boren — Wed, 23 Dec 2009 19:58:34 +0000

Unfortunately, the recent 2.9 release triggered a bug in certain versions of PHP’s curl extension. With these versions of curl, scheduled posts and pingbacks are not processed correctly. To fix this problem as well as a handful of other, lesser issues, we are quickly releasing 2.9.1, the first maintenance release of the 2.9 line. Help us get 2.9.1 ready to go by testing 2.9.1 Beta 1. The easiest way to test Beta 1 is to install the WordPress Beta Tester plugin, elect to get on the point release development track, and then perform an automatic upgrade via the Tools->Upgrade menu. You can also download the Beta 1 package and install manually. Fourteen tickets have been fixed in 2.9.1 Beta 1. Since the curl problem and a couple of other problems are dependent on specific hosting configurations, any and all testing help is greatly appreciated.

WordPress 2.8.6 Security Release

Ryan Boren — Thu, 12 Nov 2009 19:17:20 +0000

2.8.6 fixes two security problems that can be exploited by registered, logged in users who have posting privileges. If you have untrusted authors on your blog, upgrading to 2.8.6 is recommended.

The first problem is an XSS vulnerability in Press This discovered by Benjamin Flesch. The second problem, discovered by Dawid Golunski, is an issue with sanitizing uploaded file names that can be exploited in certain Apache configurations. Thanks to Benjamin and Dawid for finding and reporting these.

Get WordPress 2.8.6.

WordPress 2.8.3 Security Release

Ryan Boren — Mon, 03 Aug 2009 15:30:54 +0000

Unfortunately, I missed some places when fixing the privilege escalation issues for 2.8.1. Luckily, the entire WordPress community has our backs. Several folks in the community dug deeper and discovered areas that were overlooked. With their help, the remaining issues are fixed in 2.8.3. Since this is a security release, upgrading is highly recommended. Download 2.8.3, or upgrade automatically from your admin.

WordPress 2.8.2

Ryan Boren — Mon, 20 Jul 2009 05:35:45 +0000

WordPress 2.8.2 fixes an XSS vulnerability. Comment author URLs were not fully sanitized when displayed in the admin. This could be exploited to redirect you away from the admin to another site. Download 2.8.2 or automatically upgrade from the Tools->Upgrade page of your blog’s admin.

WordPress 2.8.1

Ryan Boren — Thu, 09 Jul 2009 20:20:54 +0000

WordPress 2.8.1 fixes many bugs and tightens security for plugin administration pages. Core Security Technologies notified us that admin pages added by certain plugins could be viewed by unprivileged users, resulting in information being leaked. Not all plugins are vulnerable to this problem, but we advise upgrading to 2.8.1 to be safe.

What else is new since 2.8? Read through the highlights below, or view all changes since 2.8

Certain themes were calling get_categories() in such a way that it would fail in 2.8. 2.8.1 works around this so these themes won’t have to change.
Dashboard memory usage is reduced. Some people were running out of memory when loading the dashboard, resulting in an incomplete page.
The automatic upgrade no longer accidentally deletes files when cleaning up from a failed upgrade.
A problem where the rich text editor wasn’t being loaded due to compression issues has been worked around.
Extra security has been put in place to better protect you from plugins that do not do explicit permission checks.
Translation of role names fixed.
wp_page_menu() defaults to sorting by the user specified menu order rather than the page title.
Upload error messages are now correctly reported.
Autosave error experienced by some IE users is fixed.
Styling glitch in the plugin editor fixed.
SSH2 filesystem requirements updated.
Switched back to curl as the default transport.
Updated the translation library to avoid a problem with mbstring.func_overload.
Stricter inline style sanitization.
Stricter menu security.
Disabled code highlighting due to browser incompatibilities.
RTL layout fixes.

WordPress 2.8.1 Release Candidate 1

Ryan Boren — Tue, 07 Jul 2009 17:04:45 +0000

2.8.1 is nigh. Release Candidate 1 is our last stop before the final release. Please download RC1, review the changes made since beta 2, and have a look at all of the tickets fixed in 2.8.1. Thanks for testing WordPress.

WordPress 2.8.1 Beta 2

Ryan Boren — Fri, 26 Jun 2009 20:06:31 +0000

2.8.1 Beta 2 is ready for testing. Download it, check out the changes since beta 1, and review all tickets fixed in 2.8.1. We especially suggest, recommend, and beg that plugin developers test their plugins against beta 2 and let us know of any issues. Notable fixes in beta 2:

Translation of role names fixed
wp_page_menu() defaults to sorting by the user specified menu order rather than the page title
Upload error messages are now correctly reported
Autosave error experienced by some IE users is fixed
Styling glitch in the plugin editor fixed
SSH2 filesystem requirements updated
Switched back to curl as the default transport
Updated the translation library to avoid a problem with mbstring.func_overload

Thanks again for testing WordPress.