(Info) WordPress Versi 3.0.4 Telah Tersedia

Wah…di bulan Desember ini WordPress lagi gencar-gencarnya mengupdate CMS nya. Tercatat sudah 2 kali WordPress meluncurkan versi terbarunya di awal bulan desember. Dan di penghujung tahun ini WordPress meluncurkan versi terbarunya kembali, yaitu WordPress Versi 3.0.4.

Di versi terbarunya ini WordPress mengatakan, bahwa:

Version 3.0.4 of WordPress, available immediately through the update page in your dashboard or for download here, is a very important update to apply to your sites as soon as possible because it fixes a core security bug in our HTML sanitation library, called KSES. I would rate this release as “Critical”.

I realize an update during the holidays is no fun, but this one is worth putting down the eggnog for. In the spirit of the holidays, consider helping your friends as well.

If you are a security researcher, we’d appreciate you taking a look over this changeset as well to review our update. We’ve given it a lot of thought and review but since this is so core we want as many brains on it as possible. Thanks to Mauro Gentile and Jon Cave (duck_) who discovered and alerted us to these XSS vulnerabilities first.

Ya, benar pada update WordPress kali ini, salah satu peneliti yang bernama Mauro Gentile dan John Cave menemukan security bug pada HTML sanitation library atau WordPress menyebutnya dengan KSES.

Oleh sebab itulah WordPress sangat menyarankan kita untuk sesegera mungkin mengupdate blog kita ke versi WordPress 3.0.4. Oke… daripada blog kita nanti bermasalah, mari kita update blog WordPress kita secepatnya. 😀