Thread: Wordpress 2.8.5 Out

Well WP 2.8.5 is out and they have a few fixes. Acc to me its a must download as the exploit suggested by 'nux' is fixed/patched in this version.

The headline changes in this release are:

* A fix for the Trackback Denial-of-Service attack that is currently being seen.
* Removal of areas within the code where php code in variables was evaluated.
* Switched the file upload functionality to be whitelisted for all users including Admins.
* Retiring of the two importers of Tag data from old plugins.

We would recommend that all sites are upgraded to this new version of WordPress to ensure that you have the best available protection.

Fantastic, time to get to work I suppose...

I got 3 of my blogs updated last night. Now I just have to update the others.

This looks like its an important update, and should not be ignored. I remember the last time a security update was released for wordpress. A lot of people did not update, and their site was compromised. It had something to do people being able to change the admin password. So people were getting locked out of their blogs.

So lets not ignore this update.

I upgraded all of my Wordpress-based sites this morning.

Hi!

I upgraded my wordpress blog to 2.8.5 and all my plugins stopped working. Most of the popular plugins which I have are still not suitable to work on this version of wordpress. They are compatible till 2.8.4. I ultimately had to downgrade my wordpress version.

Originally Posted by abinowbhat

Hi!

I upgraded my wordpress blog to 2.8.5 and all my plugins stopped working. Most of the popular plugins which I have are still not suitable to work on this version of wordpress. They are compatible till 2.8.4. I ultimately had to downgrade my wordpress version.

This is actually very weird, which plugins are you using?

The amount of update is getting a little crazy. Seems must of the upgrades are security driven.

Originally Posted by bogart

The amount of update is getting a little crazy. Seems must of the upgrades are security driven.

I prefer that they plug the holes, rather than leaving them open. But continual updates can be a pain, especially when the auto-update tool does not work.

A few years ago they used to publish a list of the scripts that changed and all we had to do was copy a few new scripts. Updates were quicker back then.

Originally Posted by TopDogger

I prefer that they plug the holes, rather than leaving them open. But continual updates can be a pain, especially when the auto-update tool does not work.

A few years ago they used to publish a list of the scripts that changed and all we had to do was copy a few new scripts. Updates were quicker back then.

The auto updates are quick. I've had some issues upgrading sites that were using version eairlier than wordpress 2.7

Originally Posted by TopDogger

A few years ago they used to publish a list of the scripts that changed and all we had to do was copy a few new scripts. Updates were quicker back then.

If all your Wordpress sites are on the same server, you can do something like this:

• Uncompress Wordpress into a directory called "wordpress"
• Delete the wordpress/wp-content directory
• Use the script below to copy the new Wordpress version to all of your existing Wordpress sites

Code:

# Use the find command to get all first-level subdirectories containing Wordpress
BLOGS=$(ls  */wp-config.php | cut -f1 -d'/')
 
for b in $BLOGS
do
	cp -R wordpress/* $b/
done

I used this to update over five hundred Wordpress blogs to 2.8.5.