WordPress 2.3.3 Security Update

[Shazam]

The next major upgrade for WordPress will be 2.5, due out in March.

But this week, a significant security update is available to all WordPress 2.3 users, 2.3.3.

This link has the information on the changes:

WordPress › Blog » WordPress 2.3.3

Our blog is already updated, flawlessly, and we recommend all of you consider upgrading as well. If you use Fantastico, I expect the release will be incorporated in their installer shortly.

[Scott]

WordPress 2.3.3 is an urgent security release. If you have registration enabled a flaw was found in the XML-RPC implementation such that a specially crafted request would allow a user to edit posts of other users on that blog. In addition to fixing this security flaw, 2.3.3 fixes a few minor bugs.

Umm, wow. People that don't update are screwed. This is a spammer's dream come true.

Thankfully I don't have registration enabled.

[james]

Okay, this time I am lazy this is third update in last few weeks

[Scott]

I think there's something like 6 files modified... I just uploaded the changed files based on modified date. Took 10 minutes to update 20 blogs.

[james]

Oh Scott.. that was great idea.. now, how do I indentify the files which I am supposed to upload ?

[Scott]

Open the rar or tarball file and look at the modified dates on files or extract the files on your HDD and use detail view in Windows explorer.