Wordpress: Version 2.8.6 is out. Wordpress: Version 2.8.6 er ude. Make sure to update your blog! Sørg for at opdatere din blog!

Posted on 13. Sendt den 13. Nov, 2009 by Dragos in Internet Life November, 2009 af Dragos i Internet Life

Hey, Wordpress 2.8.6 is out! Hey, Wordpress 2.8.6 er ude! Make sure to update your blog from the administrative panel. Wordpress urge you to make sure your website is up to date with the latest version, as it has some improvements and critical fixes: Sørg for at opdatere din blog fra det administrative panelet. Wordpress opfordre Dem til at sørge for din hjemmeside er opdateret med den nyeste version, da den har nogle forbedringer og kritiske rettelser:

2.8.6 fixes two security problems that can be exploited by registered, logged in users who have posting privileges. If you have untrusted authors on your blog, upgrading to 2.8.6 is recommended. 2.8.6 fixes to sikkerhedsmæssige problemer, der kan udnyttes ved anbefalet, logget på for brugere, der har udstationering privilegier. Hvis du har tillid til, forfattere på din blog, at opgradere til 2.8.6 anbefales.
The first problem is an XSS vulnerability in Press This discovered by Benjamin Flesch. The second problem, discovered by Dawid Golunski, is an issue with sanitizing uploaded file names that can be exploited in certain Apache configurations. Det første problem er en XSS svaghed i Tryk Dette opdaget af Benjamin Flesch. Det andet problem, opdaget af Dawid Golunski, er et problem med sanitizing uploadede filnavne, der kan udnyttes i bestemte Apache konfigurationer. Thanks to Benjamin and Dawid for finding and reporting these. Tak til Benjamin og Dawid til at finde og rapportering af disse.