“WordPress 3.9.2 this is a security update.”

WordPress 3.9.2 is a state-of-the-art publishing platform with a focus on aesthetics, web standards, and usability.

WordPress 3.9.2 is both free and priceless at the same time.

More simply, WordPress 3.9.2 is what you use when you want to work with your blogging software, not fight it.

WordPress 3.9.2 started in 2003 with a single bit of code to enhance the typography of everyday writing and with fewer users than you can count on your fingers and toes.

Since then it has grown to be the largest self-hosted blogging tool in the world, used on hundreds of thousands of sites and seen by tens of millions of people every day.

Changes Details

• Fixes a possible denial of service issue in PHP’s XML processing, reported by Nir Goldshlager of the Salesforce.com Product Security Team. Fixed by Michael Adams and Andrew Nacin of the WordPress security team and David Rothstein of the Drupal security team.
• Fixes a possible but unlikely code execution when processing widgets (WordPress is not affected by default), discovered by Alex Concha of the WordPress security team.
• Prevents information disclosure via XML entity attacks in the external GetID3 library, reported by Ivan Novikov of ONSec.
• Adds protections against brute attacks against CSRF tokens, reported by David Tomaschik of the Google Security Team.
• Contains some additional security hardening, like preventing cross-site scripting that could be triggered only by administrators.

[otw_is sidebar=otw-sidebar-8]

The post WordPress 3.9.2 Update Released appeared first on Orange Internet Solutions.

WordPress Update: This maintenance release fixes 13 bugs in version 3.6, which was a very smooth release.

WordPress 3.6.1 is also a security release for all previous WordPress versions and we strongly encourage you to update your sites immediately.

Fixes Detail

• Deprecate/remove custom-fields.js and categories.js
• Upgrade Network page continues to say Database Upgrade Required
• Once the admin menu is collapsed, the user setting gets stuck on collapsed
• HTML5 support for specific features doesn’t work.
• jquery-1.10.2.min.map 404 error
• Feature notification after update should display only onceis_email_address_unsafe should be case insensitve
• Wrong time displayed for restored posts
• Plugin/Theme/Core Updates Fail When Curl Used and String Function Overloading Configured
• Nav Menu: Bug while assigning a new menu to an existing menu location
• In iOS Safari it’s impossible to type in TinyMCE after zooming in or out while the onscreen keyboard is open comment_form() function treats $args as array before passing $args through wp_parse_args()
• New users are automatically subscribed to the main blog

It addresses three issues fixed by the WordPress security team

• Block unsafe PHP unserialization that could occur in limited situations and setups, which can lead to remote code execution. Reported by Tom Van Goethem.
• Prevent a user with an Author role, using a specially crafted request, from being able to create a post “written by” another user. Reported by Anakorn Kyavatanakij.
• Fix insufficient input validation that could result in redirecting or leading a user to another website. Reported by Dave Cummo, a Northrup Grumman subcontractor for the U.S. Centers for Disease Control and Prevention.

The WordPress team adjusted security restrictions around file uploads to mitigate the potential for cross-site scripting.

Download WordPress 3.6.1 or update now from the Dashboard ? Updates menu in your site’s admin area.

More Information

• Try Online Demo:
  WordPress (Softaculous external link)

• Source Wordpress (Official Website)
  http://wordpress.org/news/

• Start Open WordPress:
  In order to use Wordpress you need a domain name (ex. yoursite.com) and web hosting service.
  If you don’t have a domain name Register a Domain Name.
  To install Wordpress choose one of our hosting plans. (all our packages includes Softaculous).

• Hosted Wordpress
  Contact us if you don’t need a domain or hosting service, and want to use Wordpress anyway.

[otw_is sidebar=otw-sidebar-8]

The post WordPress Update 3.6.1 Security and Bugs Fixes appeared first on Orange Internet Solutions.

This version of Softaculous adds few features and fixes some bugs.

Update Details

• 1) Changelog : Users can now view the Changelog of scripts from the Overview page.
• The CageFS PHP version detection is now handled by default if CageFS is installed on the server.
• Added an option in Softaculous Admin panel to define endusers’ PHP binary for H-Sphere panel.
• Bug Fix : Removing multiple JavaScript installations failed. This is now fixed.
• Bug Fix : Backup of installation with more than 1GB data failed. This is now fixed.
• Bug Fix : Notice section in cPanel was not enabled if Top Scripts section was disabled. This is now fixed and both these options are now independent.
• Bug Fix : In case of failure during restore of a backup, softsql.sql file was not deleted. This is now fixed and the softsql.sql file is deleted on success as well as on failure of restore.
• Bug Fix : The backup function did not work if there was a trailing slash in the path of an installation on the root of domain. This is now handled properly.

More Information

• Try Online Demo:
  Softaculous (Softaculous external link)

• Start Softaculous:
  In order to use Softaculous you need a domain name (ex. yoursite.com) and web hosting service.
  If you don’t have a domain name Register a Domain Name.
  To install Softaculous choose one of our hosting plans. (all our packages includes Softaculous).

• Hosted Softaculous
  Contact us if you don’t need a domain or hosting service, and want to use Softaculous anyway.

[otw_is sidebar=otw-sidebar-8]

[otw_is sidebar=otw-sidebar-9]

The post Softaculous New Update – 4.3.0 Released appeared first on Orange Internet Solutions.

“A new WordPress update released concerning Maintenance and Security issues”

WordPress Update: maintenance and security updates. Login into your webiste and run the updates to keep your website on date and secure with the last update

Highlights

• New Default Theme – Twenty Thirteen
  • Focus on blogging
  • Single column layout with Sidebar / Widgets in the footer
  • Latest Theme Features support, particularly Post Formats and Semantic Markup
  • Font-based icons (Genericons)

• Admin Enhancements
  • UI improvements on Navigation Menus Screen
  • Revisions revised to be more dynamic and scalable
  • Autosave and Post Locking
  • Preview Audio and Video on Media Edit Screen
  • In-line login following expired sessions

source:  http://codex.wordpress.org/Version_3.6

Share it

Follow us

[widgets_on_pages id=”blog-bottom3″]

The post WordPress Update: Maintenance and Security Released appeared first on Orange Internet Solutions.

This is the second maintenance release of 3.5, fixing 12 bugs.

This is a security release for all previous versions and it is strongly recommend you update your sites immediately.

WordPress has been updated to 3.5.2 in Softaculous. You can update your installation with just one click. Here is the guide :

Update WordPress

The WordPress security team resolved seven security issues, and this release also contains some additional security hardening.

The security fixes included:

• Blocking server-side request forgery attacks, which could potentially enable an attacker to gain access to a site.
• Disallow contributors from improperly publishing posts or reassigning the post’s authorship.
• An update to the SWFUpload external library to fix cross-site scripting vulnerabilities.
• Prevention of a denial of service attack, affecting sites using password-protected posts.
• An update to an external TinyMCE library to fix a cross-site scripting vulnerability.
• Multiple fixes for cross-site scripting.
• Avoid disclosing a full file path when a upload fails.

Source : http://wordpress.org

The post WordPress 3.5.2 Maintenance and Security Released appeared first on Orange Internet Solutions.