Video chat, voice chat, and group chat have all been available for some time within Gmail, but they’ve been curiously tucked away. Getting them up and running required fidgeting with a little menu at the bottom of each chat window. Starting today, all of these features will be just a single click away.

One of the more subtle benefits to surfacing these chat options is that it’s easier for people to get started who don’t yet have the voice and video chat plugin.
If your chat buddy doesn’t have the plugin, clicking on this icon in the chat window will invite them to install it. As soon as they’re done, you can carry on with a face-to-face video chat. Since we launched a similar feature on iGoogle and orkut a little while ago, we’ve seen a dramatic uptick in people using video chat.

Finally, you’ll find oldie but goodie features such as “Go off the record,” “Block”, and “Send SMS” in a more aptly named “Actions” menu of each chat window.

• Quick contact badge: Press the contact status icon within Gmail, and a handy box shows all of the ways you can reply to a contact — including email, chat, SMS, and Facebook.
• Voice input: Swipe the keyboard, then just speak to select contacts or write an email, complete with punctuation. Period!

• Multiple Gmail accounts: Sync multiple accounts to the same device and switch between them without leaving the app.
• Undo: A handy 'undo' link makes it easier to retrieve messages when you hit archive or delete by mistake. (Note: you can't yet undo send as you can with the desktop version of Gmail).

January 8–9: WordCamp Atlanta
January 23: WordCamp Boston
January 30: WordCamp Greece in Thessaloniki
January 30: WordCamp Indonesia in Jakarta
February 27: WordCamp Fukuoka
March 6–7: WordCamp Ireland in Kilkenny
March 27–28: WordCamp Toronto

NORTH AMERICA

January 8–9: WordCamp Atlanta. First WordCamp of the year, and it’s already sold out — twice! They changed to a bigger venue based on demand, from Georgia Tech to the Atlanta campus of Savannah College of Art and Design (SCAD). They’re still letting people onto the waitlist, if you’re interested. A guaranteed way to get in would be to sponsor the event, and they’re taking last-minute sponsors right now. Atlanta will have sessions on Friday evening and all day Saturday. I’ll be opening the Saturday program with WordPress Resolutions: What to Expect in 2010. After a day of design, development and content track sessions, Lead Developer Mark Jaquith will take the closing slot for a Town Hall-style Q&A. The attendee list (follow link, scroll down) includes a number of WordPress core contributors, theme/plugin developers, and support providers as well as proof that Atlanta has a strong WordPress user base.

January 23: WordCamp Boston. I think WordCamp Boston is trying to one-up every WordCamp the organizers have been to, including the awesome NYC from November, and it looks like they might succeed. From Doc Searls and David Weinberger as keynote speakers to the multiple-track, unconference and Ignite sessions to the sweet-looking venue and the party plans, this one has got it going on. I credit it in part to the fact that they are one of the few WordCamps to follow the advice of having an organizing team of more than just 2 or 3 people, so the work is better distributed. I see a number of familiar names on the attendee list, but even more that I don’t know, so I’m looking forward to meeting the Boston WordPress community. They’re still selling tickets, so if you’re in the northeast, you should try to make it. I’ll be at this one also, talking about how the merge with MU will affect the WordPress admin (by then we should have started figuring it out!).

March 27–28: WordCamp Toronto. The last two Toronto WordCamps have been really good. I heard there would be one in March, but their site right now is just taking emails for notification. I’ve contacted the organizer to see what’s up, and he says the site will likely go live this week. They’re looking for volunteers to help organize this year’s event, so if you’re interested, it would be a great opportunity to get involved. Believe me, volunteering at a WordCamp is one of the best ways to make sure you meet a lot of other attendees.

ASIA

January 30: WordCamp Indonesia. WordCamp Indonesia will be in Jakarta again this year. I love how they worded the beginning of their sessions page. “Come in, we’ll get you breakfast and coffee, you’ll register, there’ll be networking. It’ll be great.” There will be a single track of sessions, but there are several time slots set aside for ad-hoc discussion and breakout sessions.

February 27: WordCamp Fukuoka. WordCamp Fukuoka is just getting its site up, too, so check back periodically a little later for more information. One of their visiting speakers will be Noel Jackson, developer of the Press This bookmarklet as well as themes like P2 and Monotone/Duotone.

EUROPE

January 30: WordCamp Greece. WordCamp Greece will be held in Thessaloniki, and they expect about 100-150 people to attend.The program includes regular sessions on the usual topics (how-to, programming, SEO, multi-language sites, etc) as well as “QuickRounds,” which will showcase Greek projects based on WordPress. I’m especially intrigued by the “WordPress vs. Expression Engine” session. Whenever people compare different publishing platforms, it’s interesting to see which features they highlight. I hope someone gets video from this one and posts it to the WordCamp section of WordPress.tv.

March 6–7: WordCamp Ireland. WordCamp Ireland will be in Kilkenny, and for such a geographically small country, it’s got an impressive list of speakers, including Donncha O Caoimh, lead developer of WordPress MU. The program includes three tracks: Intro, Blogger, and Developer, and I think this will be the first WordCamp I’ve heard of that is deliberately family-friendly, with on-site child care. They’re also going to have a charging station for mobile devices, which is clever. It’s not confirmed yet, but I think I’ll be at this one, too.

If you want to attend a WordCamp but don’t know of one near you, check out WordCamp.org for the official list (updated frequently). That’s also where you would start if you wanted to organize a WordCamp in your area.

*Developer chats are held Thursdays at 21:00 UTC in the #wordpress-dev channel at irc.freenode.com.

The as-long-as-we’re-not-in-freeze-yet model isn’t working. People wind up waiting months longer for new features they want, like Trash and Image Editing, because we’re still adding other things and then we need to test them all. If we kept the releases smaller feature-wise, we could push out the new stuff sooner (3 releases per year is the goal) and have more focused beta testing, making the releases themselves better. It’s hard, because everyone has their pet features and fixes, and if there’s a patch, why not get it in this release rather than waiting? Sometimes people complain that a patch has been waiting to be committed for weeks or months, but what no one ever seems to bring up is that sometimes patches introduce new bugs, and the more we add at once, the harder it is to keep it all well-tested on various platforms, in different hosting environments, etc. So. What’s our proposal?

We take a page from the world of project management and we make a project plan before we jump into the dev cycle. We let everyone propose features and enhancements, and we choose a limited number to include in 3.0 (in this case we need to be especially stringent, because the merge of WordPress and WordPress MU will automatically mean a lot of work) and set a realistic release date that we stick to. We create a tentative set of features for the next two releases, to be re-evaluated at the beginning of the next cycle, so that people know the community is committed to certain features, as opposed to the vague “future release” label we now use for everything not included in the current version. We fix bugs that are reproducible and affect a large number of users before focusing on edge case bugs or bugs that haven’t been well-described or reproduced. We stop diverting our attention from agreed-upon goals when a “squeaky wheel” decides we should all be focused on something else. There are always things that pop up unexpectedly, but we need to do a better job of restraining ourselves when it comes to trying to sneak things into the current release (I include myself in this, of course…as a UX person I always wish we could do everything all at once!).

As an open source project, we accomplish more when we work together than we do following individual agendas, and we need to keep our project focused on commonly-agreed-upon goals instead of following tangents whenever a community member starts to take us on one, regardless of whether it’s to follow a cool idea that everyone loves or a suggestion based on a personal agenda, and regardless of whether it’s a newbie who doesn’t know any better or a frequent contributor or committer who has a strong opinion and a loud voice (so to speak). The issue here is that it’s easy to get distracted, so we need to create a structure that will help us keep moving forward instead of getting sidetracked. We need to keep Trac clean for the current dev cycle so that it includes confirmed features and bug reports, and all new feature suggestions go into a different milestone.

We think it’s at least worth a try. When we re-start the weekly IRC dev chats in 2010, the first meeting will be to talk about the scope of 3.0. When we’ve got a general agreement about what will be included, we’ll create the appropriate Trac tickets, and punt tickets for non-3.0 feature requests/enhancements to a future release so we can stay focused. New bug reports will still come in to the current milestone. It’s going to be hard. There are at least a dozen new features that I feel like we’ve pushed back multiple times that I’d like to see in core, but for this experiment, I’m just going to keep reminding myself, “You can do that with a plugin!”

Sound off on the features you would like to see in version 3.0.

• Tasks, onto your phone and out of Labs
• An improved mobile experience, including push Gmail and a complete redesign
• Four new themes to make Gmail sparkle
• Offline Gmail and its graduation from Labs
• Drag and drop labels
• More fast previews, including PowerPoint and TIFF
• Multi-select attachments for faster, smoother file sharing
• A way to eliminate duplicate contacts with a single button
• More storage for less moolah
• Lots of new labs experiments, including undo send, automatic message translation, and "Got the wrong bob?"

The coolest new stuff from a user point of view is:

1. Global undo/”trash” feature, which means that if you accidentally delete a post or comment you can bring it back from the grave (i.e., the Trash). This also eliminates those annoying “are you sure” messages we used to have on every delete.
2. Built-in image editor allows you to crop, edit, rotate, flip, and scale your images to show them who’s boss. This is the first wave of our many planned media-handling improvements.
3. Batch plugin update and compatibility checking, which means you can update 10 plugins at once, versus having to do multiple clicks for each one, and we’re using the new compatibility data from the plugins directory to give you a better idea of whether your plugins are compatible with new releases of WordPress. This should take the fear and hassle out of upgrading.
4. Easier video embeds that allow you to just paste a URL on its own line and have it magically turn it into the proper embed code, with Oembed support for YouTube, Daily Motion, Blip.tv, Flickr, Hulu, Viddler, Qik, Revision3, Scribd, Google Video, Photobucket, PollDaddy, and WordPress.tv (and more in the next release).

2.9 provides the smoothest ride yet because of a number of improvements under the hood and more subtle improvements you’ll begin to appreciate once you’ve been around the block a few times. Here’s just a sampling:

• We now have rel=canonical support for better SEO.
• There is automatic database optimization support, which you can enable in your wp-config.php file by adding define('WP_ALLOW_REPAIR', true);.
• Themes can register “post thumbnails” which allow them to attach an image to the post, especially useful for magazine-style themes.
• A new commentmeta table that allows arbitrary key/value pairs to be attached to comments, just like posts, so you can now expand greatly what you can do in the comment framework.
• Custom post types have been upgraded with better API support so you can juggle more types than just post, page, and attachment. (More of this planned for 3.0.)
• You can set custom theme directories, so a plugin can register a theme to be bundled with it or you can have multiple shared theme directories on your server.
• We’ve upgraded TinyMCE WYSIWYG editing and Simplepie.
• Sidebars can now have descriptions so it’s more obvious what and where they do what they do.
• Specify category templates not just by ID, like before, but by slug, which will make it easier for theme developers to do custom things with categories — like post types!
• Registration and profiles are now extensible to allow you to collect things more easily, like a user’s Twitter account or any other fields you can imagine.
• The XML-RPC API has been extended to allow changing the user registration option. We fixed some Atom API attachment issues.
• Create custom galleries with the new include and exclude attributes that allow you to pull attachments from any post, not just the current one.
• When you’re editing files in the theme and plugin editors it remembers your location and takes you back to that line after you save. (Thank goodness!!!)
• The Press This bookmarklet has been improved and is faster than ever; give it a try for on-the-fly blogging from wherever you are on the internet.
• Custom taxonomies are now included in the WXR export file and imported correctly.
• Better hooks and filters for excerpts, smilies, HTTP requests, user profiles, author links, taxonomies, SSL support, tag clouds, query_posts and WP_Query

All of this and more is reflected in the over 500 tickets, bugs, and enhancements that WP developers in this release cycle.

This release included code from over 140 contributors, here’s everyone we were able to identify: aaroncampbell (Aaron Campbell), abackstrom (Adam Backstrom), aldenta (John Ford), alexkingorg (Alex King), [amilanov], antonylesuisse (Antony Lesuisse), apeatling (Andy Peatling), apokalyptik (Demitrious Kelly), arena (André Renaut), batmoo (Mohammad Jangda), Ben Dunkle, BenBE1987, Benjamin Flesch, bookchiq (Sarah Lewis), brianwhite, c0nstruct, caesarsgrunt (Caesar Schinas), CalebKniffen (Caleb Kniffen), chrisbliss18, chrisscott (Chris Scott), christoph179, coffee2code (Scott Reilly), [cross country flight], Curioso, davecpage (Dave Page), dcole07 (Dan Cole), dd32 (Dion Hulse), demetris (Δημήτρης Κίκιζας), Denis-de-Bernardy, dj-wp, dwright, eddieringle (Eddie Ringle), error (Michael Hampton), ewestp, fabifott, filosofo (Austin Matzko), greenshady (Justin Tadlock), gsnedders/link92 (Geoffrey Sneddon), hailin (Hailin Wu), hakre, hanilovesme, Harald Nesland, harrym, holizz (Tom Adams), ikonst, jacobsantos (Jacob Santos), janeforshort (Jane Wells), jamescollins (James Collins), jdub (Jeff Waugh), jeff_ (Jean-François “Jeff” VIAL), jeremyclarke (Jeremy Clarke), JeremyVisser (Jeremy Visser), jikamens, jmulley, Joern_W, johanee (Johan Eenfeldt), johnbillion (John Blackbourn), johnjamesjacoby (John James Jacoby), johnjosephbachir (John Joseph Bachir), JonathanRogers, joostdevalk (Joost de Valk), Jose Carlos Norte, josephscott (Joseph Scott), junsuijin, kevinB (Kevin Behrens), kometbomb, lilyfan (IKEDA Yuriko), [lostinlafayette], madhyde, MattyRob, mdawaffe (Michael Adams), Mittineague, miqrogroove, morfiusx, mrmist (David McFarlane), mtdewvirus (Nick Momrik), mysz, nacin (Andrew Nacin), nanochrome, nao (Naoko McCracken), nathanrice (Nathan Rice), nbachiyski (Николай Бачийски), niallkennedy (Niall Kennedy), nickohrn (Nick Ohrn), ninjaWR (Ryan Murphy), noel (Noël Jackson), Otto42 (Samuel Wood), pairg, peaceablewhale (Franklin Tse), prettyboymp (Michael Pretty), ProDevStudio, ramiy, redsweater (Daniel Jalkut), ruslany, sambauers (Sam Bauers), scribu, Sewar, Simek, simonwheatley (Simon Wheatley), sirzooro (Daniel Frużyński), sivel (Matt Martz), skeltoac (Andy Skelton), snakefoot, stephanreiter (Stephan Reiter), strider72 (Stephen Rider), taco1991, takayukister (Takayuki Miyoshi), tellyworth, tenpura, usermrpapa, utkarsh, Viper007Bond, vladimir_kolesnikov (Vladimir Kolesnikov), VoxPelli (Pelle Wessman), [voyou1], wahgnube, waltervos, westonruter (Weston Ruter), wnorris (Will Norris), xenlab (Eric Marden), yoavf (Yoav Farhi). Wowza!

2.9 has been an exciting development cycle, and I must say it has whetted our appetite for 3.0, which is coming next (probably this spring) and will include at the very least the merge of MU with the WordPress core, and a new default theme. We can’t wait to start working on it. But first, some Carmen McRae tunes and a beer. Join us!

(After you upgrade, of course!)

Last week, I posted about the fact that Trac would be quiet for a few days while the core commit team met in person for the first time to talk about some goals for WordPress in the coming year. That prediction wound up being a little inaccurate, as having everyone together inspired a Trac sprint to get us closer to shipping 2.9. As of this morning there are only 11 tickets left against the 2.9 milestone. Yay! I’m sensing a Release Candidate in the near future.

I’d planned to write a summary post to encapsulate the discussions we had over our 3 day meetup, but to be honest, all-day (and night) every-day meetings creates a ton of things to summarize, and the post would be a novella. So instead of one long post, I’m going to split it up into a series and post a summary of the discussion on one or two topics per day until I’ve posted them all. Think of it like a WordPress advent calendar. For today’s post, enjoy the video above and I’ll list the topics we covered to give you an idea of what will be included in the upcoming summary posts.

Topics: Direction for the coming year(s), canonical plugins, social i18n for plugins, plugin salvage (like UDRP for abandoned plugins), WordPress/MU merge, default themes, CMS functionality (custom taxonomies, types, statuses, queries), cross-content taxonomy, media functions and UI, community “levels” based on activity, defining scope of releases, site menu management, communications within the community, lessons learned from past releases, mentorship programs, Trac issues, wordpress.org redesign, documentation, community code of conduct.

You can see why I didn’t want to try to cram it all into one post, right?

Just to make sure it’s clear in everyone’s minds, I want to reiterate that these discussions were just that: discussions. They were not secret meetings ending in hard and fast decisions. The idea was to 1) get the core commit team on the same page in order to improve workflow efficiency and communication, and 2) come out of the meetup with a long list of things we know we want to work on in the coming year, and from there to work with the broader community to determine priorities/strategies before starting the work of getting it all done. As I finish off 2009 by posting summaries of the meetup conversations, I hope you’ll all plan to start 2010 with enthusiastic participation in one or more of the projects that will take these conservations from concept to reality.

1. Click the "Settings" link in the top-right corner of Gmail.
2. Click the "Offline" tab.
3. Select "Enable Offline Mail for this computer."
4. Click "Save Changes" and follow the directions from there.

Canonical plugins would be plugins that are community developed (multiple developers, not just one person) and address the most popular functionality requests with superlative execution. These plugins would be GPL and live in the WordPress.org repo, and would be developed in close connection with WordPress core. There would be a very strong relationship between core and these plugins that ensured that a) the plugin code would be secure and the best possible example of coding standards, and b) that new versions of WordPress would be tested against these plugins prior to release to ensure compatibility. There would be a screen within the Plugins section of the WordPress admin to feature these canonical plugins as a kind of Editor’s Choice or Verified guarantee. These plugins would be a true extension of core WordPress in terms of compatibility, security and support.

In order to have a system like this, each canonical plugin’s development community would probably need similar infrastructure to WordPress itself, including things like Trac, mailing lists, support forums, etc. These things will be worked out within the development community over the coming months, but in the meantime, we really need a better name for this. Many people have no idea what canon/canonical means (clearly, they are not Dr. Who fans!), and having to define the word distracts from discussing the core ideas behind the concept. So, we thought we’d do a community poll to see what people think we should call canonical plugins. We brainstormed a few dozen ideas yesterday and whittled it down to our top handful. Based on the definition of canonical plugins given above, which of these terms do you think best describes them? I’m including a short description of our thoughts on each.

Standard - Implies that these are the standard by which all other plugins should be judged, as well as the idea of them being the default plugins.
Core - Makes the close relationship to core WordPress development very clear, and has the implication of bundled plugins (even though we don’t need to actually bundle them now that the installer is right in the admin tool).
Premium – Identifies these officially-supported plugins as best-in-class and of the highest value, and could potentially disambiguate the word Premium as it is currently being used in the community (to refer to anything from commercial support to licensing terms to actual code quality).
Validated - Focuses on the fact that the code is reviewed for compatibility with core and for security.
Official – Makes it plain that these are the plugins officially endorsed by the core team as being the best at their functions.
Canonical – Maybe once people get used to it, canonical wouldn’t confuse so many people?

Cast your vote in the poll below to have your opinion considered during the decision-making process. And if you can think of a word that we haven’t listed here that you think is better, please submit it in the poll! The poll will remain open until 11:59pm UTC Thursday, December 10, 2009.

Every year around this time I start thinking about the annual holiday email I send to friends and family members. I usually email my mom, dad, sister, friends and co-workers. But the one person who appreciates my season’s greetings the most — my grandma — is stuck in the pre-digital age of snail mail. Of course, I could go to a store, aimlessly wander through the aisles, choose a card, wait in line to pay for it, go to the post office, pick up some stamps, etc., etc. — but wouldn’t it be so much easier just to fill out a form and have Gmail handle the rest?

This holiday season, as a token of our appreciation to our most enthusiastic fans, we’ll snail-mail a free holiday postcard on your behalf. Yes, through the mail and everything.

To send a card, visit gmail.com/holidaycard. We’ll only be able to send cards to US addresses and to a limited number of people (due to limited Gmail elf availability), so be sure to request one soon.

And if you’re headed home for the holidays, consider spending some “computer time” with loved ones who aren’t as up-to-date with technology. With some luck, maybe this time next year you’ll be able to email them a holiday card instead!

Wishing a happy holiday to you and yours!

Forum volunteers don’t get a lot of flashy attention. There aren’t flame wars about whether or not the support forums should be commercial instead of free and community-run. There generally aren’t big arguments and debates over whose point of view is the right one. What the forums do have is amazing volunteers who give their time to help other WordPress users and developers learn. People who only know a little answer easy questions that maybe they’ve only recently learned the answers to themselves. People with more expert skills help troubleshoot larger issues. If someone offers advice that could be better, others will add their solutions to the mix. Of all the WordPress users I’ve met in person, not one person got started without visiting the forums. In many cases, people turn to the forums even before the Codex. In the support forums, I see a lot of what is best about our community, and almost none of that which is not.*

Without further ado, here’s my thank you to the volunteers who make the support forums work. Without them, we would be less than what we are today. I’m listing people by their Wordpress.org usernames, since that’s how you see them in the forums.

Official WordPress.org Support Forum Moderators

These are the people who’ve officially got your back and have been active in the past few months. See them at a WordCamp? Buy them a beer! Otto42,  jeremyclark13, MichaelH, samboll, Chris_K. MichaelH suggested we also recognize Moshu, Podz, Kafkaesqui for past meritorious service.

The Honor Roll
These people are not official moderators, but their knowledge and activity levels have caught the attention of those who are. A big round of thanks to these folks for selflessly sharing their knowledge with other WordPress users.

Most active volunteers, nominated by more than one official moderator for recognition (for the reasons given):
alchymyth – “Overall knowledge”
apljdi – “Overall knowledge and programming skills”
t31os_ – “Programming skills”
whooami – “For her security responses” “Knows her stuff”

Generally active volunteers, nominated by official moderators for recognition:
esmi, ClaytonJames, numeeja, stvwlf, buddhatrance, songdogtech, alism, alchymyth, Ipstenu, RVoodoo, jdingman, kmessinger, ArnoldGoodway, Shane G., figaro, jonimueller, blepoxp, cais, mfields, designdolphin, doc4, greenshady, mercime, mrmist, bh_WP_fan , henkholland, krembo99, jdembowski, pboosten, adiant, andrea_r, GDHosting, Gangleri.

Some newcomers who’ve been getting active:
a_johnson, equalmark, WebTechGlobal, kymac.

And an additional shoutout to plugin authors who take an active role in moderating threads regarding their plugins, again nominated by official moderators for recognition:
scribu, GDragoN, sivel, MikeChallis, GamerZ, alexrabe, arnee, sociable, takayukister, hallsofmontezuma, joostdevalk, filosofo, roytanck, donncha, Hiroaki Miyashita, manojtd, froman118, error, Viper007Bond, alexkingorg, cavemonkey50, azaozz, aaroncampbell, isa.goksu, flipper, joedolson, redwallhp, eight7teen, orenshmu, WebGeek, Otto42, toddiceton, the_dead_one, mywpplugin, MattyRob, markjaquith, TobiasBg, Txanny, elfin, jolley_small, stastoc, anmari, micropat, frekel.

One more time, a huge THANK YOU to everyone who contributes to the support forums at WordPress.org.

As we close out 2009 and get closer to 2010, it would be great for us to start thinking about some ways we could make it easier/more rewarding for people to be involved in the forums and other aspects of the open source project. I’ve started a forum thread to discuss some ideas with the thought that we can try a couple after the holidays and see what takes.

* I say almost because let’s face it, we all get caught in the traps of trolls sometimes, and patience can be hard to keep when someone is a jerk. So a reminder to all who use the forums: be nice to the people who are trying to help you!

P.S. While I’m at it, here’s another tip/request. Search the forums for your problem before posting; if it’s already been answered before (often more than once), you’re kind of wasting people’s time by posting it again without trying the previous solutions first. Please respect the time of the volunteers by searching first (and mention in your post what you’ve already tried).

1. Select Enable next to Offline Gmail.
2. Click Save Changes.
3. After your browser reloads, you'll see a new "Offline" link in the upper righthand corner of the Gmail page, next to your username. Click this link to start the offline set up process and download Gears if you don't already have it.

As Hiro Nakamura said when he first bent time and space to land in Times Square: “Yatta!”

In addition to winning in the Overall Best Open Source CMS category, WordPress was named first runner-up in the Best Open Source PHP CMS category. This is significant because we weren’t even in the top 5 last year, and now we’re #2, ahead of Joomla! As is stated on the Award site, “WordPress made its way into the top five for the first time. The fact that it was outranked by Drupal by a very slight margin indicates how popular it has become with users as well as developers over the past year.”

Every day thousands of new people are embracing WordPress to power not just their blogs but entire sites and communities without compromising on usability or scalability (as would be the case with a legacy CMS). Every member of the WordPress community, from core developer to beginning user, should be proud to be part of this momentum: congratulations to us all!

From left: Matt Martz (sivel), Jeremy Clarke, Shane Froebel (^BuGs^), Jane Wells, Matt Mullenweg, Mark Jaquith, Beau Lebens, Andy Peatling, John James Jacoby (jjj).
Photo by Chris Cochran.

The first problem is an XSS vulnerability in Press This discovered by Benjamin Flesch.  The second problem, discovered by Dawid Golunski, is an issue with sanitizing uploaded file names that can be exploited in certain Apache configurations. Thanks to Benjamin and Dawid for finding and reporting these.

Get WordPress 2.8.6.