It fixes a vulnerability in the Snoopy library, used to fetch the feeds shown in the Dashboard. It is considered to be a low risk vulnerability though. Nevertheless you can download the latest version of WordPress from http://wordpress.org/download/.

a

This is a security release especially for those who have open registration on their blogs. The attack is complex and is dependent on open registration being turned on in your blog but can be executed in theory and turns out to be more of an annoyance than an actual exploit.

a

Ok the scenario is that you have a movie file let’s say with a mov extension (.mov) and you’re using a Mac computer and you have a wordpress blog. You don’t want to upload the file to YouTube and you would rather host it yourself.

First is you need a file converter to convert the mov file to flv. Download ffmpegX from http://homepage.mac.com/major4/

Install ffmpegX. Now that you have the converter, convert the mov file and the output should be flv.

Upload the flv file to your server and take note of its URL.

Now on to WordPress, when you go on writing a post, choose the html tab, and place this code to where you want your video to appear

<object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" width="480" height="360" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,40,0"><param name="flashvars" value="file=http://walkernewsdownload.googlepages.com/Lion-hug-Rescuer.flv" /><param name="src" value="http://walkernewsdownload.googlepages.com/mediaplayer.swf" /><embed type="application/x-shockwave-flash" width="480" height="360" src="http://walkernewsdownload.googlepages.com/mediaplayer.swf" flashvars="file=http://walkernewsdownload.googlepages.com/Lion-hug-Rescuer.flv"></embed></object>


Now replace the URL with the flv (http://walkernewsdownload.googlepages.com/Lion-hug-Rescuer.flv) in that code with the URL of your uploaded flv. There will be two instances of that and make sure that it’s correct. Publish and see your video in action.

a

An update to this version is not mandatory so you can continue using WordPress 2.6 if you are happy with it, although you may want to upgrade to this release if you have been facing any of the bugs that were fixed in this version.

a

It contains a number of new features, which include the ability to track changes to every post and page and easily post from wherever you are on the web with Press This. It also incorporates Google Gears to speed up the loading of your blog as it caches the contents into your computer. You just need to click on Turbo located at the upper left of your WordPress dashboard.

a

If you do, your blog will display strange symbols and characters instead of the usual texts. So do not enable compression for it to work as it should.

a

It includes a number of bug fixes, performance enhancements, and one very important security fix. It is therefore important to update immediately, particularly if your blog has open registration. The vulnerability is not yet public but it will be shortly.

a