If wp 2.8.2 has a security problem, I imagine the same would apply to wpmu 2.8.2 . Recently my wpmu instalation suffered from a backdoor. I would be great to have the wpmu 2.8.3 as soon as possible.
If wp 2.8.2 has a security problem, I imagine the same would apply to wpmu 2.8.2 . Recently my wpmu instalation suffered from a backdoor. I would be great to have the wpmu 2.8.3 as soon as possible.
I'm quite sure that Donncha is working on it.
This post has details about the recent security issue.
http://wordpress.org/development/2009/07/wordpress-2-8-2/
The 2.8.3 release had fixes to areas that were missed, just for this issue.
(recap: it had to do with comment fields and redirecting away from the site)
Grab the zip file from the end of http://trac.mu.wordpress.org/browser/branches/2.8 and please test. Lots of bugfixing going on plus of course the security fixes in WordPress 2.8.3
There are still plenty of bugs left, some in the bug tracker for a long time. Check the list of bugs for more.
I fixed this bug related to promote_if_site_admin() but would appreciate feedback.
Other major bugs: http://trac.mu.wordpress.org/ticket/1082
http://trac.mu.wordpress.org/ticket/1076
http://trac.mu.wordpress.org/ticket/913 (fixed but needs review)
WordPress MU 2.8.3 tomorrow hopefully.
I've just released WordPress MU 2.8.3. Details here: http://ocaoimh.ie/mu283
The auto upgrader is broken in 2.8.2 (fixed in 2.8.3) but it's a simple task to fix it. Instructions are in the post above and posted in various places on this forum.