22Jun Wordpress 2.2.1 - A required upgrade
Urggh..it is upgrading time once again for [tag[Wordpress[/tag] users. This time, it comes with a warning that it is a required upgrade.
Unfortunately, 2.2.1 is not just a bug fix release. Some security issues came to light during 2.2.1 development, making 2.2.1 a required upgrade. 2.2.1 addresses the following vulnerabilities:
* Remote shell injection in PHPMailer
* Remote SQL injection in XML-RPC Discovered by Alexander Concha.
* Unescaped attribute in default theme
I am not sure what are those stuffs but to me, it means another round of downloading, uploading and keeping fingers crossed that the upgrade is smooth. Luckily, there is the ‘Deactivate all” button for the plugins and also the widgets.
Looks like it is going to be a busy weekend ahead with all the dozen blogs I have. I will report when I have upgraded a few blogs.
Get your Wordpress 2.2.1 here.


June 22nd, 2007 at 4:09 am
I’m glad my host has one click installation! I just click, and the blog is backed up and upgraded. If anything goes wrong, I reinstall the backup.
June 22nd, 2007 at 10:28 am
If I have one pet peeve about WordPress, it’s all these upgrades every month or so!
Hopefully, one day soon, we’ll get a version that is secure and works like it’s suppose to and we won’t have to upgrade for a year or more.
A guy can dream can’t he? LOL
Don
June 22nd, 2007 at 10:50 am
I’ll wait for your update *taps foot & WAIT*
June 22nd, 2007 at 5:20 pm
I for one was afraid everytime to upgrade my 2 year old blog. Now, with some experience, I look forward to it :)
As long as I have my error log file to check with, I can almost always pin point what’s the problem. Ha ha.. not showing off but doing PHP and installing stuff like this is part of my job.
I have at least 5 blogs to upgrade..
June 23rd, 2007 at 12:36 am
I’ve upgraded my blogs, and everything seems to be fine… for now :S :D
June 23rd, 2007 at 2:00 am
At least these upgrades are easy to install.
June 23rd, 2007 at 7:21 am
Ohhhh noes!
Hey, does anyone know how I’m supposed to do an upgrade…is it manual via ftp?
Or is there a button somewhere that magically does it via admin panel?