BlogsWeek.com

Serendipity 1.0.4 has been released. “This new Serendipity release addresses a local file inclusion security issue discovered yesterday. It was possible to give a special parameter to a Serendipity file to include a file on your own web-tree (or other files the webserver has read access to). If used on clear-text files, this could be used to disclose information like the Apache logfiles on your website.”

For additional information, please read the release announcement.