Wordpress powers this weblog product. Wordpress has many security advisories. I have little time, and would rather not spend it on fire and motion. So I was most pleased to find that Debian, my distro of choice, packages wordpress, so I can leave the worrying and work to them.
It took me a while to figure out how to upgrade my weblog to use those packages, so I write it here for anyone else that might want to know how to do it. The instructions assume that you are in your weblog directory.
Copy all themes and plugins to the system dir. This sucks, but it's how debian packages it.
sudo cp -a wp-content/plugins/your-plugin-here.php \ /usr/share/wordpress/wp-content/plugins sudo cp -a wp-content/themes/your-theme \ /usr/share/wordpress/wp-content/themes
Make a link to the system wordpress:
ln -s /usr/share/wordpress wordpress
Make sure you can follow a symlink
echo "Options FollowSymLinks" >> .htaccess
Copy your config to /etc/wordpress/config-DOMAIN.php. Remove the last two lines that load wp-settings.php, if you have them.
sudo cp -a wp-config.php /etc/wordpress/config-example.com.php # add symlinks if you want www.example.org to work also
Change your wordpress configuration so that the "wordpress address" is http://example.com/wordpress, but the "blog address" stays the same. This is in the main wordpress admin page. At the same time edit index.php to change the path of the require line:
require('./wordpress/wp-blog-header.php');
Verify that the main page works
Update your .htaccess if you have mod_rewrite rules; verify that permalinks work
Remove all wordpress files; careful not to remove wp-content!
rm -rf wp-admin wp-includes rm wp-*.php rm xmlrpc.php
I'm pretty sure that this is what I did. Backup your database first, of course. If anyone experiences problems with my weblog now, please let me know, and corrections to the procedure can go in the comments.