WordPress 2.6.3 Security Update
A low level security hole prompted a new version release of WordPress today, version 2.6.3
Here’s the official blog post from WordPress.
And here’s the meat of this update:
A vulnerability in the Snoopy library was announced today. WordPress uses Snoopy to fetch the feeds shown in the Dashboard. Although this seems to be a low risk vulnerability for WordPress users, we wanted to get an update out immediately. 2.6.3 is available for download right now.
In reality, only two files have been changed, so updating from version 2.6.2 to 2.6.3 is a snap. You can go to the blog post above and download the files directly from WordPress. Do be sure to upload the files into the correct folder on your server. In this case, you want to upload the two files to the “wp-includes” folder and overwrite the two older file versions.
This will ONLY work if you are updating from 2.6.2 to 2.6.3 so if you need to update from an older version, you’ll need to download the complete set of files and do a full update.
As always, back up your blog files, blog database, everything, before you do this, OR ANY update.
October 24th, 2008 at 7:27 am
One note about updates. Always be sure you download them directly from WordPress. A smart hacker could alter the files and then offer them for you to download, opening a whole new security hole right from your server….