Wordpress: Version 2.8.6 is out. Wordpress: Version 2.8.6 je zunaj. Make sure to update your blog! Poskrbite, da posodobite svoj blog!

Posted on 13. Objavljeno dne 13. Nov, 2009 by Dragos in Internet Life November 2009, ki ga Dragos v Internet Life

Hey, Wordpress 2.8.6 is out! Hej, Wordpress 2.8.6 je zunaj! Make sure to update your blog from the administrative panel. Wordpress urge you to make sure your website is up to date with the latest version, as it has some improvements and critical fixes: Poskrbite, da posodobite svoj blog iz upravnega odbora. Wordpress Pozivamo vas, da poskrbite vašo spletno stran, je na tekočem z najnovejšo različico, saj ima nekaj izboljšav in kritičnih popravkov:

2.8.6 fixes two security problems that can be exploited by registered, logged in users who have posting privileges. If you have untrusted authors on your blog, upgrading to 2.8.6 is recommended. 2.8.6 določa dve varnostni problemi, ki jih je mogoče izkoristiti s registrirana, prijavljeni uporabniki, ki so napotitve privilegije. Če imate odpeti avtorji na svoj blog, nadgradnjo na 2.8.6, je priporočljiva.
The first problem is an XSS vulnerability in Press This discovered by Benjamin Flesch. The second problem, discovered by Dawid Golunski, is an issue with sanitizing uploaded file names that can be exploited in certain Apache configurations. Prvi problem je XSS ranljivosti v sporočilu za to odkril Benjamin Flesch. Druga težava, ki jih je odkril Dawid Golunski, je vprašanje s sanirajo dodal imena datotek, ki se lahko izkoriščajo v nekaterih konfiguracijah Apache. Thanks to Benjamin and Dawid for finding and reporting these. Hvala Benjamin in Dawid za iskanje in poročanje o teh.