WordPress 2.8.5 is out. It’s a security release to futher secure the default WordPress installs.
The major fixes bundled with this release are;
- A fix for the Trackback Denial-of-Service attack that is currently being seen.
- Removal of areas within the code where php code in variables was evaluated.
- Switched the file upload functionality to be whitelisted for all users including Admins.
- Retiring of the two importers of Tag data from old plugins.
This is a recommended update so make sure to update your WordPress install ASAP. [Download WordPress 2.8.5][2] or let the automatic upgrade feature kick in and do this for you.
Source: [WordPress][3]
[1]: /wp-content/uploads/2008/08/wordpresslogo.jpg) [2]: http://wordpress.org/download/ [3]: http://wordpress.org/development/2009/10/wordpress-2-8-5-hardening-release/