ThemeLab's Blog

Stay up to date with our newest WordPress themes, WordPress plugins, WordPress tutorials, and other announcements.

WordPress 2.8.5 Released

Last Updated on by

It was just announced yesterday that WordPress 2.8.5 has been released, which is considered a “security hardening” release. Here are some of the updates and fixes:

  • A fix for the Trackback Denial-of-Service attack that is currently being seen.
  • Removal of areas within the code where PHP code in variables was evaluated.
  • Switched the file upload functionality to be whitelisted for all users including admins.
  • Retiring of the two importers of tag data from old plugins.

If you’re wondering what the difference between a “hardening release” and a “security release” is, I don’t think there is any. The only difference to me seems that people don’t seem to complain as much about hardening releases as they do security releases.

Anyway, I’m sure you know the drill by now. Make sure you take a backup beforehand (which you should be doing regularly anyway, and use the automatic upgrader or upgrade manually if necessary.

I just upgraded to 2.8.5 yesterday with the automatic upgrader and everything seems to be running smoothly.

  • http://www.themepremium.com Harsh Agrawal

    Saw this update Yesterday and the first thing which I did
    was Backyp my Db and updated the wordpress. Though wordpress are releasing very quick update.. :|

  • http://www.themedigital.com Cosmin

    I’ve ran into trouble when I updated my WordPress yesterday – today it kept returning an API related error almost everytime I tried to access a section of my admin.

    Therefore, I wrote a post as well on how to manually update WordPress. Indeed, it’s easier than most people think :)

  • http://www.helloicy.com Himanshu

    This is a nice release from WordPress. DDOS attack via trackback relief is nice.I am eagerly waiting for the new version WordPress 2.9. It will be interesting to see
    what will come out from the WordPress box to its users.

  • http://keithydee.com Keith

    Shouldn’t WordPress get it perfect first-time?