Internet Storm Center
Training
Certification
Cyber Security Graduate School
Security Awareness Training
Computer Forensics
Penetration Testing
IT Audit
Software Security
WordPress Release Security Update
Published: 2012-04-21,
Last Updated: 2012-04-21 13:55:38 UTC
by Guy Bruneau (Version: 1)
2 comment(s)
Last Updated: 2012-04-21 13:55:38 UTC
by Guy Bruneau (Version: 1)
WordPress released a security update (version 3.3.2) that fixes 3 external libraries (Plupload, SWFUpload and SWFObject) as well as privilege escalation and cross-site script (XSS) issues as well as 5 other bugs. Change log posted here. The advisory is posted here and you can download the update here.
[1] http://core.trac.wordpress.org/log/branches/3.3?rev=20552&stop_rev=20087
[2] http://wordpress.org/news/2012/04/wordpress-3-3-2/
[3] http://Pluploadwordpress.org/download/
-----------
Guy Bruneau IPSS Inc. gbruneau at isc dot sans dot edu
Comments
Any tie to the Apple Flashback outbreak (http://www.techweekeurope.co.uk/news/flashback-kaspersky-wordpress-74209) or just regular fixes?
posted by dsh, Mon Apr 23 2012, 15:50
Dsh,
Difficult to say if it is related the Apple Flashback. Not much information posted regarding the issue.
Difficult to say if it is related the Apple Flashback. Not much information posted regarding the issue.
New Comments closed for all Diaries older than two(2) weeks
Please send your comments to our Contact Form
Diary Archives
