WordPress has released a security update to their blogging software. A vulnerability was discovered in the Snoopy library. WordPress uses Snoopy to fetch the feeds shown in the Control Panel Dashboard.

Although this seems to be a low risk vulnerability for WordPress users, the company wanted to get an update out immediately. 2.6.3 is available for download right now.

Because this is a security issue, all WordPress users must upgrade. Fortunately, this new release updates only two files. If you don’t want to download the entire WordPress program just to get the security fix, you can download the following two files and copy them over your 2.6.2 installation.

• wp-includes/class-snoopy.php
• wp-includes/version.php

Replacing two files is a lot easier than upgrading an entire WordPress installation. This has been the easiest to install update yet.

Source : John Chow