- About Cathy
- About Heather
- Behind the Name
- Contact Us…
- Happy WordPress-ers…
- Packages & Pricing
- Why the long wait?
- WordPress FAQ
Pages
Current Wait Time For Installs
Current Queue...
Mandatory Upgrade
September 10th, 2008
Ok - don’t shoot the messenger! THEY said “Mandatory Upgrade”.
I would never, knowing you, ever, remotely come close, to being that bossy with y’all. Okay, maybe I would. And this is probably one of those rare (ahem) times.
Wordpress 2.6.2 is considered a “Mandatory Upgrade” for a lot of geekaleze reasons. But at the end of a lot of confusing schtuff, this is what they say:
“The attack is difficult to accomplish, but its mere possibility means we recommend upgrading to 2.6.2.”
And by attack - they do mean security attack.
I read through the geekaleze, translating to english when needed, and this is the Cathy-version: On the RARE chance that someone figures out how to enter a username in this particularly mean way, they can reset the password of another user. And if they understand the current weakness in SQL they may be able to predict the automatically generated password that they just reset. And this will only happen if you allow open registration.
Open registration is automatic unless you change the options under “Settings” - “General” - “Membership”. And people do not need to register to comment if you have unchecked the next box in that same screen. So there you have it: upgrade!
Good luck!
Cathy
To back up, see this post.
To upgrade, see this post.
Filed under announcements |2 Responses to “Mandatory Upgrade”
Leave a Reply
Hi, I found your blog on this new directory of WordPress Blogs at blackhatbootcamp.com/listofwordpressblogs. I dont know how your blog came up, must have been a typo, i duno. Anyways, I just clicked it and here I am. Your blog looks good. Have a nice day. James.
[...] week, Chris has a cool new trailer or two over at Oddity. I’ve started reading work over at Cathy’s blog this week, there’s a lot of great stuff [...]