Comments on: WordPress 2.2 “Getz” Security Upgrade

By: zoel

zoel — Wed, 23 May 2007 09:03:56 +0000

WP 2.2 have bug,……”i can’t add new categories” ..Forbidden
You don’t have permission to access……help!

By: Keith

Keith — Wed, 23 May 2007 04:23:11 +0000

I have upgraded my site to WP version 2.2. However, after the upgrade, I realised I could not upload files from the Admin Panel itself. I wonder what could have gone wrong?

By: Nick

Nick — Sun, 20 May 2007 12:14:12 +0000

Some of the holes in 2.1.3 were also in 2.0.10

Thanks for the update

By: Jared Ritchey

Jared Ritchey — Sun, 20 May 2007 03:31:50 +0000

I’m a little surprised that so few files had any major changes. Using WinMerge I like to look and see what each update entails and there were a lot less than I had guessed.

Interesting post none the less about security upgrades

~ Jared Ritchey

By: Mark Jaquith

Mark Jaquith — Sat, 19 May 2007 20:52:38 +0000

Thanks for letting us know, do you know if there are any security holes in 2.0.10? or were the fixes specific to the 2.1 series ?

Some of the holes in 2.1.3 were also in 2.0.10 These fixes have been applied to /branches/2.0/ and we should be releasing 2.0.11 soon. If you can’t wait, you can use Subversion to check out in-progress version of 2.0.11 from that 2.0 branch. The only way it’ll be updated is if there is an issue with our current changes or if an additional security issue comes to light in the next few days.

By: Carthik

Carthik — Sat, 19 May 2007 19:40:10 +0000

Truden,

I upgraded to 2.1.something when I had the issue.

By: Truden

Truden — Sat, 19 May 2007 18:10:45 +0000

The reason I upgraded WordLog and resumed posting is because someone used a hole in the old, un-upgraded version to upload copies of movies, including Hannibal Returns to my VPS.

Did you alarm about that before WP 2.2 was released?

By: Pufone

Pufone — Sat, 19 May 2007 12:28:51 +0000

Yes, upgrade now but you see there are some minor glitches that may keep webmasters back from upgrading. If you want to upgrade though, i have written a guide for upgrading to WordPress 2.2. It's pretty straightforward and contains images along with the instructions.

By: Carthik

Carthik — Sat, 19 May 2007 06:39:57 +0000

Upgrading from the command line, using ssh or rsync is probably best for those who have an ssh login at their host.

By: Derek Burress

Derek Burress — Sat, 19 May 2007 03:32:43 +0000

To the guy having problems…. I installed both upgrades – 2.2 RC1 and this one and both times I had issues with there being an error page or something coming up. I think at times some files stop uploading briefly and instead of finishing, moves on to the next file so there may be a file or two you have to upload again.

By: Walt

Walt — Fri, 18 May 2007 14:24:23 +0000

Okay, updating didn’t help, so I know it’s not wordpress, nor a hack.

I think the issue was something to do with the server. Well, since **I’m** the server guy, too, it’s not like I can complain. Apparently, there was a kernel upgrade on Apache? I updated that, rebooted the server and all looks right with the world. CentOS

But why on earth would only some installs of WP be affected? That’s so weird!

Figured I’d post this here. I’ll continue to test and may post again.

By: Walt

Walt — Fri, 18 May 2007 12:43:45 +0000

First step, turn off all plugins. Site comes up fine. Turn on Akismet again, the front page of the site won’t load. I’m trying to repeat this.

Apologies to vent here.

I’ll be updating the WP to the latest version, but I’m trying to figure out what is wrong before I do that.

By: Geren

Geren — Fri, 18 May 2007 12:35:46 +0000

Walt,

Sounds like there might be a broken plug-in that’s called only on the front-page of the blogs, or maybe some broken main page template code that doesn’t affect the individual post pages.

By: Walt

Walt — Fri, 18 May 2007 12:28:01 +0000

I run a server with a about a dozen Wordpress blogs, and the ones that are running 2.1.3 won’t come up. The front page won’t come up, but individual posts (if you know their URL) and the admin pages will.

I’m not sure if this is related to something wacky on the server or not. OTHER versions of WP, (2.2 and not recently updated 2.05) DO come up just fine.

By: NDDB

NDDB — Fri, 18 May 2007 09:44:49 +0000

Upgrading is pretty easy Belajar. You should be able to download the newest wordpress and upload over your old wordpress. (I’d make a copy just in case.)

I keep waiting for wordpress to have an automatic update feature… =)

By: Nick

Nick — Fri, 18 May 2007 08:59:48 +0000

Thanks for letting us know, do you know if there are any security holes in 2.0.10? or were the fixes specific to the 2.1 series ?

By: Carthik

Carthik — Fri, 18 May 2007 03:57:25 +0000

Belajar, maybe you should think of moving to a host, or requesting ssh access on your current host. It is a lot easier and takes a lot less time to upgrade/manage your site with ssh access.

By: Carthik

Carthik — Fri, 18 May 2007 03:56:20 +0000

Upgrading/moving sites – NOT fun.

By: Chris Wondra

Chris Wondra — Fri, 18 May 2007 03:35:25 +0000

“He said ‘impotent file’ heh, heh.”

“Shut up Beavis.”

By: La domo de karotoj » WordPress 2.2

La domo de karotoj » WordPress 2.2 — Fri, 18 May 2007 02:14:21 +0000

[...] Äisdatigita eldono havas iuj sekurecaj riparoj. AnkaÅ ekzistas tri utilaj plibonigoj por alÄustigantoj. La plej escita el tiuj estas la [...]