13 March 2015
Serendipity version 2.0.1 is now available (security release).Upgrading to Serendipity 2.0.1
Serendipity 2.0.1 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply Serendipity updates as new versions are released, or use Installatron's Clone feature to duplicate an existing Serendipity install to test the 2.0.1 upgrade prior to applying it live. Get started managing your Serendipity installations with InstallatronWhat's New in Serendipity 2.0.1
This is the first maintenance release which fixes a couple of minor issues, and one security-related issue where improper escaping of category names can lead to a possible XSS attack. This atnly be performed by authenticated editors, so we consider it medium-impact. If you run a multi-user blog with untrusted authors, you are urged to upgrade to the new release. Many thanks to Edric Teo for reporting this issue to us, which could then be fixed within the same day.
Some other notable bug fixes are: