[wp-hackers] Re: Exploit, or no?

[Martin Geisler]

Robert Deaton <false.hopes at gmail.com> writes:

> Its already been done long before you posted this, check
> http://trac.wordpress.org and the devblog, since 1.5.1.3 is official
> now

I'm sorry, but I think you're wrong --- I did check the repository
before posting, and at the time of my post (Jun 28 20:00:26 2005 UTC)
the update to the 1.5 branch had not yet taken place: changeset 2667
was made two hours later.

And to add something usefull to this post as well: I  updated my site
using 'svn merge':

  svn merge -r 2661:2672 \
  http://svn.automattic.com/wordpress/branches/1.5/

That applied the changes made to the 1.5 branch to my checked out copy
of the trunk. So I now have a fairly inconsistant copy (it thinks it's
tracking the trunk, but it contains 'local modifications' based on the
changes on the branch) but at least I have the security patch.

-- 
Martin Geisler                                     GnuPG Key: 0x7E45DD38

PHP EXIF Library      |  PHP Weather             |  PHP Shell
http://pel.sf.net/    |  http://phpweather.net/  |  http://mgeisler.net/
Read/write EXIF data  |  Show current weather    |  A shell in a browser
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 188 bytes
Desc: not available
Url : http://comox.textdrive.com/pipermail/wp-hackers/attachments/20050629/60d6941b/attachment.bin