Apparently, a security flaw has been found in the Snoopy library that WordPress uses. This has made the WordPress team put out a new release, WordPress 2.6.3. According to their blog post, you only have to change that class and the file holding the version number, but an astute developer on the WordPress developer mailing list noticed that they’d slipped one other minor fix in to. So to upgrade to 2.6.3, all you have to do is download these 3 files from wordpress.org:
And overwrite them in their appropriate directories. Make very sure that you’re not overwriting the wp-includes/media.php but the one in wp-admin/includes/media.php.
Probably one of the easiest WordPress upgrades you’ve ever had in your life. It should be noted that I use the Snoopy library in several of my plugins, so you’d better upgrade!
Joost, what if I am running 2.6.1, can i still replace those files?
Yes you could but you’d miss some of the 2.6.2 upgrades, probably safer to do a full upgrade then.
Two files serving on official WordPress blog post. But you are offering three file for upgrade to 2.6.3.
What’s different from old media.php to new one?
Thanks.
What kind of security flaw ?
Dunnow, check the WP post.
Just like Fatihturan said: there are officially only two upgraded files, not media.php. There’se nothing mentioned about it on the WP-site.
be stubborn if you wish, I bet you know better than the developers on wp-hackers :-)
Hé Joost, I’m just a blogger, not a developper or IT’er. ;-)
Well then stop thinking for yourself and start trusting that I won’t shit you :)
Here’s the changeset, to prove that I’m right: http://trac.wordpress.org/changeset?new=branches%409310&old=branches%408849
Hé, I updated media.php and now my blog is broken! No, just kidding. :-) Everything is just fine. Thanx for your info!
@Adrianus: Mypleasure!
After all the hassles I had with WPAU, I’ve now just realised that there was only 3 files to replace…
Live and learn I guess.
Bedankt, dat was super simpel!
If anyone uses localized versions of WordPress (for example, I use ru.wordpress.org distribution), make sure you download those files for your localized version. I’m not sure why, but when I upgraded my (localized) WordPress by replacing two files from the main distribution, my Dashboard was empty.
Glad I found this before doing a larger upgrade.
Easily done!