WordPress 2.6.3 Available for Download
WordPress has released a security update to their blogging software. A vulnerability was discovered in the Snoopy library. WordPress uses Snoopy to fetch the feeds shown in the Control Panel Dashboard.
Although this seems to be a low risk vulnerability for Wordpress users, the company wanted to get an update out immediately. 2.6.3 is available for download right now.
Because this is a security issue, all WordPress users must upgrade. Fortunately, this new release updates only two files. If you don’t want to download the entire WordPress program just to get the security fix, you can download the following two files and copy them over your 2.6.2 installation.
Replacing two files is a lot easier than upgrading an entire WordPress installation. This has been the easiest to install update yet.
Tweet This Post!
- Posted in Blogging, The Net, Wordpress
- 56 comments what's your take?
 |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | |||||||||||||
| By N2H | |||||||||||||||||||||||||||||||||||||||||||||||
Trackbacks
- JD Site Care » Minor Wordpress Upgrade - October 24, 2008 at 9:24 am
- We have updated our blog to Wordpress 2.6.3 | Diaper Cakes Mall - October 24, 2008 at 3:38 pm
- Link Love-Links Round Up No. 10 | Work From Home Business Blog - October 26, 2008 at 7:38 pm
Loading ...
I think it’s fantastic that even with wordpress being open source free software the developers are so security conscious and release updates so frequently. Three cheers for wordpress!
Opensource and free yes, but wordpress as a company makes a massive amount of income each month, and growing insanely!
Something like $31million last year and are now at 26 staff members (the parent company weblogs inc)
So its their job to ensure that there are no errors
Huh? How does wordpress earn money?
They don’t charge anything, is it the sponsors?
On the hosted sites they do charge for extra features. I’m sure they have other ways of making money though.
I wonder how ??
This is great! I was once a Joomla fanatic but they NEVER worked on security issues like that of the WP crew. Thanks!
Yea, the Joomla crew doesn’t work even CLOSE to as much as the WP crew. Well I better go get these updates. I wouldn’t want anyone getting at my blog.
It’s good to see some people actually supporting WP. I see alot of people trashing it for ‘too many updates’.
Joomla isn’t a blogging application, so you can’t really compare WordPress to it. If you use WordPress as a CMS in the same way as Joomla, WordPress falls short. I would never build a non-blog web site with WordPress.
I disagree with this. It’s possible to use Wordpress as a CMS like Joomla. You just have to know how to do it right.
Thanks John for the tips…. yea, it will be a lot easier to replace the file than waiting for the updates from Fantastico development team….
I love Wordpress, and the fact that any time there is an update, or one coming, between you and Shoemoney I know before I even write for the day…. thanks for the heads up!
Sadly can’t upgrade due to some plugins and my theme that I have customized a bit.
Those files shouldn’t affect any plugin or themes. You should be able to upload and replace.
Be careful when you install WordPress updates. You should have another copy of WordPress installed somewhere to test the updates before doing it on a live installation. When I upgraded WordPress 2.3 a while back, it destroyed my blog due to extensions it didn’t like and I wasn’t able to do an update from 2.2 until 2.3.x was released.
you may want to check with a wordpress programmer
Add my voice cheering for the WordPress community. I tried a number of other blog/CMS softwares and the other communities do not even come close.
I don’t mind the updates like this, I just hate thinking about how long it went “unsecure” before the update.
Think about the other security holes that haven’t been reported. WordPress is using an outdated version of PHP (4.3) which has numerous security issues. Its time to update the PHP to version 5.2.
Maybe they will with the 2.7 update.
Bah I was offended by the popup that hit me when followed the link on Twitter John! lol
When is 2.7 coming for WP?
Haha, I was hit with the same one.
I don’t like that Popup either you already have the form. why do you need another form?
Thanks for the update about wordpress. Greg Elliosn
I don’t like that Popup either you already have the form. why do you need another form?
Thanks for the update about wordpress. Greg Ellison
Thanks for the heads up john! I think i will just update the 2 files instead of doing the full update.
update the 2 files can save a lot of time than full update~
2.7 looks cooler. I think I’ll wait for 2.701 to wait for the bug fixes on a major upgrade.
Don’t go complaining wordpress if something bad happens to your blog then.
I find it amazing that people complain that there are ‘too frequent updates’. Would these people seriously rather wait until there blog gets hacked, and then the WP team release an update?
I agree with you. If anything, people should be grateful that they care enough about their software to release security updates. I’m baffled by the people that keep complaining about this. Makes you wonder how much they actually value the technical part of their blog.
Love Wordpress!
Things like this makes you wonder how many more bloggers are going to be hacked in the future…
-Mike
Judging by some bloggers resistance to updates and upgrades, a lot.
Thanks for the heads up, will download asap.
didn’t 2.7 come out?
2.7 Preview shots have been released, it looks amazing, but it is not released just yet.
Yeah, it looks great. I think they’ve had some regular bloggers testing it out.
I upgraded the second I saw the notice in my Dashboard.
do you know, when the 2.7 one will be released.
John, my blog templates was error after upgrading it. What happend?
I’m a recent Wordpress convert. I was on Blogger for months and had no idea what I was missing. I love Wordpress now… the flexibility is amazing!
Thank you for John, for highlighting the specific files to be updated. It made the process much easier. I’d like to see Wordpress build an auto-updater function!
How easy is it to Update your Wordpress? Do you loose anything or is it a simple Process?
you mean updated posts ?? its the most simpliest CMS I ve ever handled
Hi John,
Glad I ran across this. This makes it a whole lot easier to upgrade.
Cheers,
Jeremy
Huh is it a must to update?
Considering the fact that it’s a security flaw, I would say that it is.
I replaced the files as soon as I saw this.
It was really suprising and caught me off guard. When I saw the notification in my admin panel that a new version was out, I immediately thought 2.7, but was totally disappointed to find out that it wasn’t.
Just updated my WP….good thing … i don’t want to see that “update you version” anymore. I don’t even know what extra stuff I get.
Honestly I am quite happy to download the whole thing as it’s a good excuse to backup my files. Anyway, it’s a breeze with the auto upgrade plugin.
As started by the WordPress crew, the expected launch of 2.7 is mean’t to be on the 10th November. I’m looking forward to it, although I can already see what the support forums are going to look like.
With the new comments system that’s being implemented, which does look very good, and replaces quite a few plugins, maybe even the one John uses here, the comments.php will need to be coded slightly different. (There will be many people asking how on earth to do this I bet!)
I hate the fact that people go around talking negative about the blogging software, when they HAVEN’T even given it a shot themselves. Now yes, there are some things that could possibly be upgraded, but I’m sure in time they’ll come.
The day v2.7 comes out, and I hope it is Nov 10th, then I’ll be upgrading my blog as soon as I can. I’ve seen the screenshots, and also checked out a live demo, and it’s just hot! – There are just so many options, and you could now start designing some themes around the new features.
Anyway, enough rambling from me on the subject, and let’s just wait for the ‘big’ day to happen!
Thanks
Mark
Congratulations to wordpress users!! We blogspot users don’t have things like that.
Three cheers for Wordpress – whoopwhoop!
I don’t mind the updates like this, I just hate thinking about how long it went “unsecured” before the update.
what are the developments in this version?