Wordpress released their 2.0.7 update today, just 10 days after releasing the 2.0.6 updates. This is a small update but rather critical one. Full information after jump.

What 2.0.7 fixed?

PHP security problem that could cause vulnerability to blog

Existing Feedburner problem from 2.0.6

What are the affected files?

If you are upgrading from 2.0.6, the only affected files are as follows

wp-admin/inline-uploading.php

wp-admin/post.php

wp-includes/classes.php

wp-includes/functions.php

wp-settings.php

wp-includes/version.php

Changes from 2.0.6 to 2.0.7

Security fix for wp_unregister_GLOBALS() to work around the zend_hash_del_key_or_index bug in PHP 4 versions less than 4.4.3 and PHP 5 versions less than 5.1.4 with register_globals set to “On.”

Feeds now properly serve 304 Not Modified headers instead of mismatched 200/304 headers (a.k.a. the FeedBurner bug).

Backport of another 304 Not Modified fix from WordPress 2.1

Deleting WordPress Pages no longer gives an “Are You Sure?” prompt.

After deleting a WordPress Page, you are now properly redirected to the Edit Pages screen.

Sending an image at original size in Internet Explorer no longer adds an incorrect “height” attribute.

Get Wordpress 2.0.7 now