The security problem exists in all previous versions of Dotclear 2; it is a simple XSS and it's nothing critical but you should still update. Thanks to Rémi Marek for pointing out the problem.

We also take advantage of this update to implement enhancements and fixes into the WordPress import tool. Thanks to Chris Pepper who made it possible.

Finally, Dotclear's XML-RPC server has been enhanced to better manage the sometimes strange behavior of some blog clients.

All Dotclear 2.1.3 users should be prompted to update their installation automatically. The update process from 2.1.3 to 2.1.4 was tested on several hosts and works smoothly.

If the automatic update is not working for some reason, we invite you to let us know on the forum and to proceed with a manual update.

For those who know how to use this, a patch is also available to update from 2.1.3 to 2.1.4.

We won't wish you great holidays now as you will soon hear from the project again we'll tell you what to expect in 2009 :)