<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">I don't use tim-thumb but two themes I just reviewed were using it. I'll have to go back and look into them regarding this. The tickets were: <a href="http://themes.trac.wordpress.org/ticket/1333">Sriwijaya</a> and <a href="http://themes.trac.wordpress.org/ticket/1428">Syailendra</a>. Also could someone look at my final comment on <a href="http://themes.trac.wordpress.org/query?keywords=~theme-syailendra">Syailendra</a> as I am unsure if Chris is cc'd on this ticket by simply commenting. <div><br></div><div>You are welcome to assign me another theme if you like. When is training complete or is there a milestone to reach?<div><div><div><div><div><br></div><div>-Gene(emhr)</div><div><br><div><div>On Oct 12, 2010, at 2:25 PM, Edward Caissie wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">@Gene -<br><br>Around the end of August several themes were noted to be using an older version of timthumb that had a potentiall security issue associated with the code as it was written. The timbthumb script itself was corrected before then but there were still older versions in use on some repository themes.<br><br>If you are using timthumb you can get the current version here if need be:<span class="Apple-converted-space"> </span><a href="http://code.google.com/p/timthumb/" target="_blank">http://code.google.com/p/<span class="il">timthumb</span>/</a></blockquote></div><br></div></div></div></div></div></div></body></html>