Hannes Johnson dot Com

WordPress released a new upgrade – version 2.0.7. This is an important upgrade because it fixes a PHP security problem and a FeedBurner issue that was in 2.0.6. I had noticed the FeedBurner problem – often when I checked the RSS feed for this blog (and other WordPress blogs) I often got the error message “Live Bookmark feed failed to load.”. The security problem might be why John Chow got hacked a few days ago. At least he hints to that on his blog.

From the WordPress development blog:

Here are the changes that have been made since 2.0.6:

• Security fix for wp_unregister_GLOBALS() to work around the zend_hash_del_key_or_index bug in PHP 4 versions less than 4.4.3 and PHP 5 versions less than 5.1.4 with register_globals set to “On.”
• Feeds now properly serve 304 Not Modified headers instead of mismatched 200/304 headers (a.k.a. the FeedBurner bug).
• Backport of another 304 Not Modified fix from WordPress 2.1
• Deleting WordPress Pages no longer gives an “Are You Sure?” prompt.
• After deleting a WordPress Page, you are now properly redirected to the Edit Pages screen.
• Sending an image at original size in Internet Explorer no longer adds an incorrect “height” attribute.

I’m hosting this blog on DreamHost and they offer one-click installs for a lot of cool tools, including WordPress. They also offer one-click upgrades. But it usually takes them a couple of days to add new upgrades to their system so I’m going to wait a day or two before upgrading – Although, this is a small upgrade and I could just do it myself, I want to spend my time on something else ;) But if you’re on DreamHost and you want to install WordPress or upgrade it you just log into your web admin panel go to Goodies and then One-Click Installs.

Update: DreamHost has version 2.0.7 now – just go to Goodies > One-Click Installs, find your blog and click “Upgrade to 2.0.7″ – then it should automatically upgrade in a few minutes.

Keywords: wordpress, upgrade, security, hannes johnson, dreamhost, feedburner