We were recently notified of a SQL injection bug in the WordPress code. Matt patched the code and updated the archive on the downloads page last night. All users are encouraged to upgrade to WordPress 1.5.1.2.
The patch is very simple (it just requires one new line of code in the get_category_by_ID() function), so if you don’t want to upgrade your whole installation, you can follow the instructions in the announcement. As a side note, the same fix applies to version 1.2, but at around line number 125 in the file.
Related posts:
- WordPress 1.5.2 Security FUD
" There is some misleading FUD going around about a vulnerability in WordPress 1.5.2. Let’s get this out of the way plainly: There is not..." - WordPress 2.2.2 Released
" There is a new security & bugfix release: WordPress 2.2.2. There are no new features in this version. Since it is a security release,..." - Important: Upgrade to WordPress 2.1.2
" In the interest of getting the word out as quickly and as widely as possible, a brief word about a new WordPress release: If..." - WordPress 1.5.1.3
" An important security issue was brought to our attention which required an update for our users. You should update your blog as soon as..." - WordPress Security
" Last week, some reports came out about security bugs in WordPress. The development team has been working to clean these up, and a WordPress..."
2 Comments
did up a ‘blond version’ of the update.
http://paulaoffutt.com/blog/wp-update/
I often find the most simple to be the most complicated. ie Idiot pictures piss me the blank off.
One of the easiest updates ever… Was there more changed than just the one file, if not, why not just put the file that needs the change on the site?
One Trackback
Time Sink images by major.com » JILLIN’ OFF nudes, NSFW Tech Gadgets Blog – LiewCF.com » Hello Kitty Mobile Phones Gadgets r0×0rz » Free Winks from BlueMountain again! Resources geek ramblings » WordPress Security Update Tech, Blogs, WordPress, Security geek ramblings » SpamValve Download Web, Spam, Servers, Services, Email, SpamValve geek ramblings » OpenDocumentation Tech, XML, Standards Bad Astronomy Blog