This past week saw updates for both Wordpress and Wordpress MU. While both open source packages are blogging applications they are not quite the same software. Wordpress MU is intended to run up to hundreds of thousands of blogs with a single install of WordPress. Hence the MU in Wordpress MU stands for Multi-User.
A security update is available in both branches of Wordpress as 2.1.3 and 2.0.10.
We have a security update release now available for both the 2.1 and 2.0 branches of WordPress now available for immediate download. This update is highly recommend for all users of both branches.
These releases include fixes for several publicly known minor XSS issues, one major XML-RPC issue, and a proactive full sweep of the WordPress codebase to protect against future problems.
The update for Wordpress MU not only includes a security fix but also some additional bug fixes.
Go grab the new WordPress MU 1.2 from the download page now. This is primarily a bugfix update but it also has a security fix and all WPMU site owners are encouraged to upgrade.
I’ll post to the MU forums in a few days time with details of the security fix. It’s a short one-liner that can be applied within minutes if you can’t upgrade.