WordPress 2.5.1 security update

Filed under: Security, Blogging, web 2.0

WordPress 2.5.1 security update

by Christina Warren Apr 26th 2008

The WordPress team has released version 2.5.1 of the blogging software. The new version, which comes nearly a month after the initial release fixes a slew of performance and interface bugs, but also includes a very important security update. It is highly reccommended that all WordPress 2.5 users update their installations as soon as possible, especially if you allow open-registration (for user comments or for multi-author blogs).

In addition to the aforementioned security patch, 2.5.1 contains a number of fixes to issues that have plagued some WordPress users for the last couple of weeks.

The highlights include

Improvements to the Media Uploader
Performance tweaks for the Dashboard and the Write and Comments pages
TinyMCE has been updated
Layout fixes for IE users

Download the latest version of WordPress from their site and update your installations accordingly.

Tags: security update, SecurityUpdate, wordpress, wordpress 2.5, Wordpress2.5

Reader Comments (Page 1 of 1)

Anthony said 12:41PM on 4-26-2008

You misspelled "recommended".

Tom said 1:28PM on 4-26-2008

Using that wordpress updater script ;)

Leszek Pawlowicz said 5:13PM on 4-26-2008

Don't do it - ran the upgrade, and it required me to log in again. When I entered the correct ID and password, they were rejected. When I specify a lost password problem, it emails me a validation email where the validation code is truncated and invalid. So now I'm locked out of my site, and will have to rebuild it completely. How fracking stupid is that?

Christina Warren said 5:24PM on 4-26-2008

Leszek - do you have access to your phpMyadmin account? Just back-up your wordpress database and then re-import your settings to a new wordpress database, minus wp_users table.

Leszek Pawlowicz said 5:22PM on 4-26-2008

Found a solution to my problem, an emergency simple last resort way to reset the WP admin password:

http://www.village-idiot.org/archives/2007/05/22/wp-emergency-password-recovery/

Use only in case of emergency.

Christina Warren said 5:27PM on 4-26-2008

Oh good! Glad that fixed your problem

nj said 5:29AM on 4-27-2008

I probably speak for a lot of people, but I'm sick of wordpress and their constant "updates" ... it seems like I'm just getting things up and running & there's a security update. I'm seriously thinking of going to another platform.

Kerim Satirli said 7:47AM on 4-27-2008

I'd rather have a system that keeps updating and fixing things than one that stays stagnant for a year.

I never had any problems with WP incremental upgrades, they usually take me 2 mins or less, but if even that is too long, you can set-up SVN autoupdating and be done with it :-)

nj said 3:08PM on 4-27-2008

How about a system that just f'ing works so you don't have to update it every few weeks. This wordpress nonsense is starting to remind me of phpbb. this reminds me of the hackjob that is phpbb. for the record, I've been on wp since early 2005.

- my recent annoyance has been a completely blank white page on my blog.

- before that, it was an endless loop of "Your database is out-of-date. Please upgrade."

wtf!

lostasylum said 1:40PM on 4-27-2008

all i want to know is... does the latest wordpress release fix the issue of permalinks for those running IIS? there are numerous of us out there for which all the documented "fixes" do NOT work...

Huadian Zhang said 10:44PM on 5-11-2008

I just backed up my DB into a .sql file, deleted my site, copied 2.5 in and installed it, then re-instated my database.

BradfordOnline said 6:48PM on 6-16-2008

I did a fresh install of 2.5.1 on a LAMP system. (Linux, Apache, mySQL, PHP). I've installed previous versions of WP several times on the same server.

When I go to the install page it's blank. I've seen the same problem mentioned elsewhere on the net, but no solutions. Has anyone else experienced the same?

Featured Time Waster

Civiballs is a beautiful, soothing physics puzzle Time Waster

I have an absolute weakness for physics games, and while Civiballs isn't the strongest physics-based game, what it lacks in the physics department it makes up for a few times over in style and fun.

In Civiballs, you are presented with a few colored balls, and your goal is to get those balls into the same-colored urn on the level. The "civi" part of Civiballs is that there are 3 sets of levels to play, each representing a different civilization. While the civilization doesn't affect gameplay, the artwork for each level is beautifully themed to it's appropriate era.

To play the game, you are given only one tool - a sword with which to cut the chains that are holding the balls. The puzzle part of the game is in figuring out what order, and with what timing to cut each chain. Do it right, and all the right balls end up in the right urns, with no stray balls entering an urn (a no-no). Do it wrong, and you get to start over again.

Civiballs is not terribly deep on gameplay; the entire game can be completed in about 15 minutes. But if you enjoy this type of game, it will be a very enjoyable 15 minutes.

View more Time Wasters