WordPress 2.6.3 now available

WordPress 2.6.3 has just been released which fixes a low risk vulnerability in the Snoopy library. Snoopy is currently used to fetch the feeds shown in the Dashboard.

The new version is available at the WordPress download page. If you don’t want to download the whole release to get the security fix, you can download the following two files and copy them over your 2.6.2 installation.

1. wp-includes/class-snoopy.php
2. wp-includes/version.php

If you have ssh access to your blog, here are the commands to update by just replacing the two files:

cd ~/public_html/wp-includes/
wget http://trac.wordpress.org/export/9310/tags/2.6.3/wp-includes/class-snoopy.php
wget http://trac.wordpress.org/export/9310/tags/2.6.3/wp-includes/version.php
mv class-snoopy.php.1 class-snoopy.php;mv version.php.1 version.php