WordPress.org

Ready to get started?Download WordPress

WordPress 2.6.5

Posted November 25, 2008 by Ryan Boren. Filed under Development.

WordPress 2.6.5 is immediately available and fixes one security problem and three bugs. We recommend everyone upgrade to this release.

The security issue is an XSS exploit discovered by Jeremias Reith that fortunately only affects IP-based virtual servers running on Apache 2.x. If you are interested only in the security fix, copy wp-includes/feed.php and wp-includes/version.php from the 2.6.5 release package.

2.6.5 contains three other small fixes in addition to the XSS fix. The first prevents accidentally saving post meta information to a revision. The second prevents XML-RPC from fetching incorrect post types. The third adds some user ID sanitization during bulk delete requests. For a list of changed files, consult the full changeset between 2.6.3 and 2.6.5.

Note that we are skipping version 2.6.4 and jumping from 2.6.3 to 2.6.5 to avoid confusion with a fake 2.6.4 release that made the rounds. There is not and never will be a version 2.6.4.

Get WordPress 2.6.5.

No Pings

RSS feed for comments on this post.

  1. [...] a comment » WordPress 2.6.5 has been released and includes a number of changes including one security fix, here is a list of the changes in [...]

    Pingback from WordPress 2.6.5 in detail « westi on wordpress on November 25, 2008

  2. [...] 2.6.5 has been released – get it while it’s hot! Comment on this [...]

    Pingback from follow the white rabbit » WordPress 2.6.5 on November 25, 2008

  3. [...] 2.7 sollte man nun erst einmal auf das eben erschienene WordPress 2.6.5 updaten. Drei Fehler werden behoben und eine Sicherheitslücke geschlossen. Wenn hier also gleich mal Fehler auftauchen sollten – [...]

    Pingback from WordPress 2.6.5 eben erschienen – Sicherheitslücke geschlossen - WordPress, Fehler, Werde, Kategorie, Version, Plugins, Sicherheitslücke, Update - Caschys Blog on November 25, 2008

  4. [...] Upgrading to WordPress 2.6.5. [...]

    Pingback from Things I’m Grateful For » Blog Archive » Things I’m Grateful For on Tuesday 25 November on November 25, 2008

  5. [...] auf 2.7 warten Diese Version behebt 3 kleine Fehler und schliesst eine Sicherheitslücke im XSS. Hier findest Du mehr dazu. Wenn Du Dich fragst wo die Version 2.6.4 ggeblieben ist, dann steht da [...]

    Pingback from WordPress 2.6.5 ist erscheinen | Rol!'s Blog on November 25, 2008

  6. [...] Du kan läsa mer i utvecklingsbloggen » [...]

    Pingback from WordPress | Sverige » WordPress 2.6.5 on November 25, 2008

  7. [...] Płoński 25 listopad 2008 Kategorie: Internet, Miniblog Z tego, co właśnie przeczytałem na blogu WordPress’a, wynika, że jest dostępna nowa wersja systemu [...]

    Pingback from Nowy WordPress! W wersji 2.6.5. | MakeWWW.blog on November 25, 2008

  8. [...] Du kan läsa mer i utvecklingsbloggen » [...]

    Pingback from WordPress 2.6.5 | Eyesx on November 25, 2008

  9. [...] WordPress 2.6.5 [...]

    Pingback from Preshit’s Blog » WordPress 2.6.5 on November 25, 2008

  10. [...] WordPress 2.6.5 has been released. This release fixes a security problem as well as 3 other minor fixes. he security issue is an XSS exploit discovered by Jeremias Reith that fortunately only affects IP-based virtual servers running on Apache 2.x. If you are interested only in the security fix, copy wp-includes/feed.php and wp-includes/version.php from the 2.6.5 release package. [...]

    Pingback from Blog » WordPress 2.6.5 | lesterchan.net/wordpress on November 25, 2008

  11. [...] WordPress 2.6.5 has been released and includes a number of changes including one security fix and three bug-fixes. [...]

    Pingback from wordpress 2.6.5 has been released | Shabd - making money online blogging tips on November 25, 2008

  12. [...] read this article over at WordPress. It says it’s an update from 2.6.3 to 2.6.5 fixing a major issue with an [...]

    Pingback from Me Microblog! » Blog Archive » WordPress Update?? on November 25, 2008

  13. [...] Został wydany WordPress 2.6.5. Główna poprawka dotyczy luki XSS dotyczącej wirtualnych serwerów Apache 2.x. Oprócz niej naprawiono kilka innych problemów. Szczegóły można znaleźć na blogu twórców: “WordPress 2.6.5“. [...]

    Pingback from WordPress 2.6.5 | blog.luniewski.eu on November 25, 2008

  14. [...] equipe do WordPress acaba de disponibilizar a versão 2.6.5 do WordPress. A atualização corrige 3 bugs e 1 problema de segurança, e é [...]

    Pingback from WordPress 2.6.5 acaba de ser lançado | Inside Techno on November 25, 2008

  15. [...] El detalle más destacable es que se han saltado la versión 2.6.4 debido a un fake de WordPress que usaba ese número de versión; todo ello explicado en este artículo. [...]

    Pingback from WordPress actualizado a versión 2.6.5 | Cosas del curro on November 25, 2008

  16. [...] If you do, you need to go patch. Doesn’t look hugely critical but my WordPress install didn’t notify me of the update (like it usually does), and I only found it by accident, thought I’d mention it. [...]

    Pingback from Anyone use WordPress? » Perception is Truth on November 25, 2008

  17. [...] has just released a new version to their blogging software. This update included one security problem and three minor bugs fixed. [...]

    Pingback from WordPress 2.6.5 Is Released | ThemeLib on November 25, 2008

  18. [...] today announced the availability of 2.6.5.  It includes 1 security fix, and 3 bug fixes.  I’m not [...]

    Pingback from TechJolt » Blog Archive » WordPress 2.6.5 on November 25, 2008

  19. [...] offizielles Entwicklerstatement → WordPress in 5 Minuten installieren → Wie führe ich ein Upgrade durch? → [...]

    Pingback from WordPress 2.6.2 DE-Edition und Upgradepaket « WordPress Deutschland Blog on November 25, 2008

  20. [...] WordPress.org [...]

    Pingback from WordPress 2.6.5 | Diğer Sitelerden on November 25, 2008

  21. [...] 年 11 月 25 日に書かれた WordPress.org 公式ブログの記事、「WordPress 2.6.5 [...]

    Pingback from WordPress | 日本語 » WordPress 2.6.5 on November 25, 2008

  22. [...] Changelog Blogeintrag Download « Musik bei den [...]

    Pingback from z.K. WordPress 2.6.5 at heyko`s on November 25, 2008

  23. [...] including a cross site scripting vulnerability. You can read more about the release on the WordPress Blog, and you can download the new release here. It is also interesting to note that WordPress is [...]

    Pingback from WordPress 2.6.5 Released - LGR Internet Solutions - Web and Blog Consulting on November 25, 2008

  24. [...] Soeben wurde WordPress 2.6.5 veröffentlicht. Diese Version ist ein Sicherheitsrelease (Details) und behebt einen schwerwiegenden XSS-Exploit, desweiteren wurden einige kleinere Probleme behoben. [...]

    Pingback from WordPress 2.6.5 veröffentlicht « WordPress Deutschland Blog on November 25, 2008

  25. [...] WordPress 2.6.5 has been released and includes a number of changes including one security fix, here is a list of the changes in detail: [...]

    Pingback from WordPress 2.6.5 in detail | WordPress Blog NL on November 25, 2008

  26. [...] Links: WordPress 2.6.5 [...]

    Pingback from WordPress 2.6.5 : Press play on Tape! on November 25, 2008

  27. [...] tenemos listo WordPress 2.6.5, la nueva actualización que soluciona algunos problemas de [...]

    Pingback from WordPress 2.6.5: nueva actualización | La Brujula Verde on November 25, 2008

  28. [...] Para los aquellos que utilizan la versión 2.6.3 de WordPress, es necesario y urgente el actualizar su sistema con los archivos necesarios wp-includes/feed.php y wp-includes/version.php o por si no gustan actualizar todo su sistema completo, por cierto no existirá version 2.4, ya de que de la 2.6.3, salta a la 2.5. [Enlace] [...]

    Pingback from WordPress 2.6.5 | Power on November 25, 2008

  29. [...] More documentation can be found here and on the WordPress blog. [...]

    Pingback from WordPress 2.6.5 Released [Recommended] | Blog Tipz on November 25, 2008

  30. [...] a jednak prawdziwe – WordPress w wersji 2.6.5 wyjechał właśnie ze stajni. Tym razem poprawiono błędy związane z XSS i XML (o ile [...]

    Pingback from WordPress 2.6.5 | WPNinja on November 25, 2008

  31. [...] quelques jours de la sortie de la version 2.7, l’équipe de développement nous sort une version 2.6.5 de derrière les fagots… mais aussi de dernière minute ! La [...]

    Pingback from Sortie de WordPress 2.6.5 | WordPress Francophone on November 25, 2008

  32. [...] If you’re new here, you may want to subscribe to my RSS feed. Thanks for visiting!This from Ryan Boren over at the official WordPress Developer’s blog: [...]

    Pingback from WordPress 2.6.5 released, fixes one security problem and three bugs) - The WordPress Community on November 25, 2008

  33. [...] Wenn ihr euch genaueres zu den Änderungen durch lesen möchtet könnt ihr das auf der Offiziellen WordPress Homepage [...]

    Pingback from WordPress 2.6.5 erschienen | Servervoice Blog on November 25, 2008

  34. [...] Descargar WordPress 2.6.5. Vía [...]

    Pingback from WordPress 2.6.5 soluciona fallos de seguridad | Blog ZonaKaoz on November 25, 2008

  35. [...] este caso se trata de la versión 2.6.5, y no la 2.6.4 como correspondería, se ha hecho así para evitar la versión fraudulenta que se ha [...]

    Pingback from Nueva versión de WordPress, y no es la 2.7 on November 25, 2008

  36. [...] versão 2.6.5 vem resolver uma série de bugs e um problema de segurança relacionado com XSS recomendando a [...]

    Pingback from WordPress 2.6.5 download actualização de segurança | MUIOMUIO.NET on November 25, 2008

  37. [...] Quelle: offizielles Weblog. [...]

    Pingback from Sicherheitsupdate: WordPress 2.6.5 ist da » Peruns Weblog on November 25, 2008

  38. [...] WordPress 2.6.5 [...]

    Pingback from WordPress 2.6.5: nuova release per la serie 2.6 on November 25, 2008

  39. [...] WordPress team released WordPress 2.6.5 earlier today. This release addresses a potential XSS (cross-site scripting) attack under some [...]

    Pingback from WordPress 2.6.5 Released | geek ramblings on November 25, 2008

  40. [...] those of you who have an IP-based virtual server running on Apache 2.x, the WordPress team has recommended that you immediately upgrade to WordPress 2.6.5, or at least upgrade the wp-includes/feed.php and [...]

    Pingback from WordPress 2.6.5 Now Available for Download on November 25, 2008

  41. [...] Nun ist das Update auch auf dem deutschen WordPressblog veröffentlicht: Soeben wurde WordPress 2.6.5 veröffentlicht. Diese Version ist ein Sicherheitsrelease (Details) und behebt einen schwerwiegenden XSS-Exploit, [...]

    Pingback from Neues WordPress verfügbar - Sicherheitspatch!! | Reizzentrum on November 25, 2008

  42. [...] WordPress 2.6.5 has been released and is immediately available. WordPress recommends everyone upgrade to this release. It fixes one security problem and 3 bugs. [...]

    Pingback from WordPress 2.6.5 has been released | Nierva Dot Com on November 25, 2008

  43. [...] http://wordpress.org/development/2008/11/wordpress-265/ [...]

    Pingback from WordPress 2.6.5 | WP Themes Gallery on November 25, 2008

  44. [...] Infos gibt es bei Perun und im offiziellen WP-Blog. Beliebte [...]

    Pingback from WordPress 2.6.5 ist da! - GreenSmilies on November 25, 2008

  45. [...] Вышел WordPress 2.6.5, содержащий одно обновление безопасности и три исправления багов. Рекомендую скачать WordPress с официального сайта и обновить ваши блоги. [...]

    Pingback from Вышел WordPress 2.6.5 | Блог Parasite Eliminator on November 25, 2008

  46. [...] WordPress have released version 2.6.5 today. This release fixes a security issue and three other small problems. You can download the newest version from WordPress: my blogsprogs need not worry, they will be upgraded tonight. [...]

    Pingback from WordPress 2.6.5 released | Blog Mum on November 25, 2008

  47. [...] è stata rilasciata una nuova versione di WordPress che risolve la falla ed anche altri tre bug, la 2.6.5. Non preoccupatevi se vi state domandando perchè avete saltato la versione 2.6.4: non esiste, la [...]

    Pingback from BlogMaster - Aggiornamento di sicurezza WordPress 2.6.5 on November 25, 2008

  48. [...] version 2.6.5. En voyant ce numéro de version, j’ai d’abord cru à une erreur, mais le site de WordPress explique qu’il n’y aura pas de 2.6.4 pour éviter les confusions avec un fake portant [...]

    Pingback from Avant WordPress 2.7, WordPress 2.6.5 - Emmanuel GEORJON on November 25, 2008

  49. [...] actualización de WordPress que resuelve un problema de seguridad y 3 bugs. WordPress | Vía: WordPress [...]

    Pingback from WordPress [2.6.5]: Actualización de seguridad | MeVoy.net on November 25, 2008

  50. [...] was wrong, this was the final upgrade I had to do before [...]

    Pingback from WordPress 2.6.5 at woddfellow2’s Blog on November 25, 2008

  51. [...] http://wordpress.org/development/2008/11/wordpress-265/ [...]

    Pingback from WordPress 2.6.5 | Web Templates, Flash Templates, Website Templates Design on November 25, 2008

  52. [...] frisch und aktuell ist heute WordPress 2.6.5 erschienen. Es handelt sich hier um ein Sicherheitsupdate. Damit wird ein wichtiges Sicherheitsproblem behoben [...]

    Pingback from WordPress 2.6.5 veröffentlicht | DimidoBlog on November 25, 2008

  53. [...] WordPress 2.6.5 e yükseltme duyurusu şurada verilmiş.. [...]

    Pingback from adtech ile reklam 2.0 dönemi başlıyor ve Trkycmhrytllbtpydrklcktr r10.net seo yarışması » WordPress 2.6.5 Güncellemesi on November 25, 2008

  54. [...] has just announced the release of version 2.6.5, which fixes one security problem and three [...]

    Pingback from WordPress 2.6.5 released to fix security problem on November 25, 2008

  55. [...] rzecz, która znów się rzuciła się w dashboardz’ie to kolejny update WP. Jak WÓŁ widnieje odnośnik do kolejnego rilejsu. Tym razem zawiera szereg zmian w tym jedną [...]

    Pingback from WordPress 2.6.5 - ile można? • n!3 firmowy blog on November 25, 2008

  56. [...] wordpress 2.7′yi beklerken wordpress 2.6.5 çıktı. Önemli güvenlik porblemleri giderilen wordpress 2.6.5′e, mevcut sürümünüzü hemen [...]

    Pingback from WordPress 2.6.5 - OCEANGRAY.NET on November 25, 2008

  57. [...] 2.7′ yi beklerken bir güvenlik açığını ve üç hatayı düzelten WordPress 2.6.5 sürümü [...]

    Pingback from WordPress 2.6.5 | offlog on November 25, 2008

  58. [...] mais aqui e o download pode ser feito aqui. Compare preços : celular, TV LCD, iPhone, Apple.Ou [...]

    Pingback from WordPress 2.6.5 | bernabauer.com on November 25, 2008

  59. [...] WordPress › Blog » WordPress 2.6.5 [...]

    Pingback from This site is now running WordPress 2.6.5 on November 25, 2008

  60. [...] WordPress 2.6.5 By Ryan Boren [...]

    Pingback from WordPress XSS RSS Feed Generator Vulnerability Revealed. Mitigated. on November 25, 2008

  61. [...] çıkartmadılar. Hatta hiç olmayacakmış bu sürüm (: Gerekli açıklamanın ingilizcesi burada [...]

    Pingback from renkli teneke » WordPress 2.6.5 Yayınlandı! on November 25, 2008

  62. [...] Soeben wurde WordPress 2.6.5 veröffentlicht. Diese Version ist ein Sicherheitsrelease (Details) und behebt einen schwerwiegenden XSS-Exploit, desweiteren wurden einige kleinere Probleme behoben. [...]

    Pingback from Update: WordPress 2.5.6 veröffentlicht. - Backup, Blog, Datei, DE-Edition, Detail, Deutschland, Problem, Sicherheitsrelease, Update, Upgrade, Upgradepaket, Version, Vorgängerversion, XSS-Exploit - christian.kler-online.de/blog on November 26, 2008

  63. [...] 2.6.5 is released today and it security issue and three other bugs. Users are advised to upgrade immediately to 2.6.5 [...]

    Pingback from WordPress 2.6.5 is released, Upgrade now on November 26, 2008

  64. [...] WordPress 2.6.5 [...]

    Pingback from WordPress 2.6.5 | vogelmann on November 26, 2008

  65. [...] has been updated to version 2.6.5, which fixes one security vulnerability and three bugs. They’ve skipped the version 2.6.4 [...]

    Pingback from Zit Seng’s Superwall » Blog Archive » WordPress 2.6.5 Security Update on November 26, 2008

  66. [...] WordPress geliştiricilerinin güvenlik nedeniyle tüm WordPress blogu sahiplerine acil olarak güncelleştirmelerini önerdikleri WordPress 2.6.5 sunuculardaki yerini aldı. [...]

    Pingback from Bir güvenlik açığını, üç yazılım hatasını kapatan WordPress 2.6.5 yayınlandı | Blog Kazanı on November 26, 2008

  67. [...] If you are reading this, than Jeremy-Gilby-dot-com has been successfully upgraded to WordPress 2.6.5. [...]

    Pingback from Jeremy-Gilby-dot-com » WordPress 2.6.5 on November 26, 2008

  68. [...] pesar de que todos estamos esperando la versión 2.7 de WordPress, acaba de lanzar WordPress 2.6.5 que incluye una buena cantidad de cambios pero especialmente un ajuste de seguridad. Aquí tienes [...]

    Pingback from Actualiza a WordPress 2.6.5 | Me Borre.com on November 26, 2008

  69. [...] Para aqueles que têm um IP baseado em servidor virtual funcionando em Apache 2.x, a equipe do WordPress recomenda que você atualize imediatamente para WordPress [...]

    Pingback from WordPress 2.6.5 Disponível para download on November 26, 2008

  70. [...] 或者看官方说明http://wordpress.org/development/2008/11/wordpress-265/ [...]

    Pingback from WordPress 2.6.5 中文版发布及WP升级办法 | 放飞 自由 on November 26, 2008

  71. [...] Update WordPress 2.6.5 usai sudah dan kini saatnya melanjutkan kehidupan yang sebenarnya..Sumber dari sini. [...]

    Pingback from Update WordPress 2.6.5 Is Done | hatetepe titik dua garing dua kali celoteh dot info on November 26, 2008

  72. [...] WordPress 2.6.5 [...]

    Pingback from Update WordPress !! | bibeh.com on November 26, 2008

  73. [...] are highly recommended upgrade their blog(s) to the latest version which is WordPress 2.6.5. As stated on the wordpress blog by Ryan [...]

    Pingback from WordPress 2.6.3 Security Compromised, Upgrade Now! | TopiMiring.com on November 26, 2008

  74. [...] update:2008-11-26 WordPress 2.6.5が本家でリリースされた。 WordPress 2.6.5とtracを見る限りFlashアップローダの修正は行われていないみたい。 [...]

    Pingback from SWFUpload v2.2.0 Beta 3 | イナヅマtvログ on November 26, 2008

  75. [...] version 2.6.5 has just been released, and addresses a fairly major (but rare) vulnerability, along with a few other minor bug [...]

    Pingback from WordPress 2.6.5 released; simple upgrade, but do it now | MickMel SEO on November 26, 2008

  76. [...] 本文翻譯自《WordPress 2.6.5》。 « 圖示設計結果 [...]

    Pingback from WordPress Taiwan 正體中文 › WordPress 2.6.5 on November 26, 2008

  77. [...] Attention bloggers if you have manually installed WordPress then you should immediately upgrade to 2.6.5. There are security issues in 2.6.3 which are now fixed in 2.6.5. [...]

    Pingback from Update WordPress 2.6.5 Immediately | BlueFur.com on November 26, 2008

  78. [...] WP 2.6.5出了 更新了安全問題 似乎有假檔 所以跳過2.6.4 [...]

    Pingback from 太空猴子::SpaceMonkey » WordPress 2.6.5 更新 on November 26, 2008

  79. [...] is what the dev team over at WordPress.org says regarding fixes and a security update: The security issue is an XSS exploit discovered by [...]

    Pingback from Painless Upgrade to WordPress 2.6.5 | Mission: Communicate on November 26, 2008

  80. [...] 2.6.5 官方消息:http://wordpress.org/development/2008/11/wordpress-265/ [...]

    Pingback from [站務]WordPress 釋出 2.6.5 安全性更新… on November 26, 2008

  81. [...] dan telah memperbaiki satu masalah keamanan dan tiga bug…” begitu kira-kira isi dari posting terbaru yang dikutip oleh DHINATACOM dari blog resmi WordPress yang selalu memberitahukan tentang berita [...]

    Pingback from WordPress 2.6.5 Telah Dirilis | DHINATACOM on November 26, 2008

  82. [...] This friendly reminder is for those who host their own blogs. Find out more about version 2.6.5 here. [...]

    Pingback from tonyocruz.com » Upgrade your WordPress to 2.6.5 on November 26, 2008

  83. [...] WordPress 2.6.5 [...]

    Pingback from Gårdagens delade - November 26, 2008 - En sur karamell on November 26, 2008

  84. [...] More details will be forthcoming but for the time being, there’s also the WordPress.org announcement post. [...]

    Pingback from WordPress MU 2.6.5 | WordPress Blog NL on November 26, 2008

  85. [...] : [WordPress.org, [...]

    Pingback from WordPress 2.6.5 fixar ett säkerhetsproblem och buggar - Uppdatera! | on November 26, 2008

  86. [...] WordPress Development Blog empfiehlt allen Nutzern ein zeitnahes Update auf die soeben freigegebene Version [...]

    Pingback from WordPress 2.6.5 mit Sicherheitsupdate | marcO's_br4inh4ck on November 26, 2008

  87. [...] versión 2.6.5 de WordPress corrige fallos de seguridad. Con respecto a la traducción solo se ha incorporado una nueva línea [...]

    Pingback from WordPress 2.6.3 y 2.6.5 en español at Tengo Tiempo on November 26, 2008

  88. [...] Note that we are skipping version 2.6.4 and jumping from 2.6.3 to 2.6.5 to avoid confusion with a fake 2.6.4 release that made the rounds. There is not and never will be a version 2.6.4. (Source: WordPress) [...]

    Pingback from i.justrealized: WordPress 2.6.5 is released on November 26, 2008

  89. [...] 又釋出了安全性更新了喔,馬上就去Wordpress的官方部落格看一下,這次的版本是WordPress [...]

    Pingback from WordPress 2.6.5 安全性更新釋出 | 愛耍酷的Style on November 26, 2008

  90. [...] 官方部落格 [↩] [...]

    Pingback from 更新WP2.6.5 - 藍色心情 on November 26, 2008

  91. [...] a comment » If you use WordPress on your own ie not on WordPress.com, then you need to download the new WordPress 2.6.5 [WordPress 2.6.5 is immediately available and fixes one security problem and three bugs. We [...]

    Pingback from WordPress 2.6.5 is not fake atleast … « Hobby Press on November 26, 2008

  92. [...] version 2.6.3 to 2.6.5. Version 2.6.4 does not exist because there was a fake version of it. The WordPress 2.6.5 update is pretty easy. We only have 5 files to [...]

    Pingback from WordPress 2.6.5 is Released - Maverick Web Creations on November 26, 2008

  93. [...] WordPress 2.6.5 was announced today — bypassing the fake 2.6.4 designator. [...]

    Pingback from Keeping up with WordPress 2.6.5 | DeanKennedy.com on November 26, 2008

  94. [...] 这次版本跳过啦2.6.4,官方原文介绍。 The security issue is an XSS exploit discovered by Jeremias Reith that fortunately only affects IP-based virtual servers running on Apache 2.x. If you are interested only in the security fix, copy wp-includes/feed.php and wp-includes/version.php from the 2.6.5 release package. [...]

    Pingback from 今日杂碎:更新WordPress 2.6.5 | Lin's空间|Only on November 26, 2008

  95. [...] via | WordPress Blog [...]

    Pingback from Exploit su WordPress: necessario aggiornamento // Tr3ndy.com on November 26, 2008

  96. [...] 在WordPress 2.7即将发布前,WordPress竟然紧急发布了WordPress 2.6.5,这个版本修正了一个XSS跨站脚本攻击漏洞,还有另外三个小毛病:避免了添加meta信息到修改版本(revision)中、避免了XML-RPC提取不正确的文章类型、在删除用户请求中对用户ID进行整数化处理。 [...]

    Pingback from WordPress 2.6.5 | 玩WordPress on November 26, 2008

  97. [...] – und es ist wieder ein Bugfix- bzw. Sicherheitsrelease. Die offizielle Ankündigung gibt es bei wordpress.org, das via des Tages geht an caschy, dessen Eintrag mich daran erinnerte, dass ich zu dem Thema auch [...]

    Pingback from WordPress 2.6.5 erschienen — filzo.de on November 26, 2008

  98. [...] → http://wordpress.org/development/2008/11/wordpress-265/ Tags: aggiornamenti, sicurezza, WordPress, WordPress 2.6 da pi3tr0 »  Commenta [...]

    Pingback from » WordPress 2.6.5: aggiornamento di sicurezza » Blogg ‘R on November 26, 2008

  99. [...] WordPress 2.6.5 [...]

    Pingback from Today’s Ma.gnolia Links : Slobokan’s Site O’ Schtuff on November 26, 2008

  100. [...] muchos blogs, y como mi propia instalación de WordPress me avisaba esta mañana, ya hay una actualización, la 2.6.5, disponible, que se ha sacado sin previo aviso y que sobre todo pretende subsanar un remoto [...]

    Pingback from Software Libre y Cooperación » Blog Archive » Actualización de urgencia de WP a 2.6.5 on November 26, 2008

  101. [...] wordpress 2.7̸2;yi beklerken wordpress 2.6.5 çıktı. Önemli güvenlik porblemleri giderilen wordpress 2.6.5′e, mevcut sürümünüzü hemen [...]

    Pingback from WordPress 2.6.5 Çıktı! on November 26, 2008

  102. [...] quelques jours de la sortie de la version 2.7, l’équipe de développement nous sort une version 2.6.5 de derrière les fagots… mais aussi de dernière minute ! La [...]

    Pingback from Sortie de WordPress 2.6.5 | L'Autre Reg@rd Du Web on November 26, 2008

  103. [...] Siamo dunque a WordPress 2.6.5! [...]

    Pingback from WordPress 2.6.5! « M a x G a l l i n a . i t on November 26, 2008

  104. [...] ha reso disponibile una nuovo aggiornamento per la serie 2.6 del popolare CMS per blog. Si tratta di una versione che corregge un problema di [...]

    Pingback from WordPress 2.6.5 | Liquida Utilities on November 26, 2008

  105. [...] I just upgraded multiple blogs running WordPress 2.6.3 (hups… seems like i missed one release). Here’s the release announcement [...]

    Pingback from elblogg » Blog Archive » Upgraded to wordpress 2.6.5 on November 26, 2008

  106. [...] 因为发现安全方面的漏洞,wordpress在昨天发布2.6.5版本。原文见: http://wordpress.org/development/2008/11/wordpress-265/ [...]

    Pingback from Marshal’s Blog» Blog 存档 » 更新wordpress到2.6.5 on November 26, 2008

  107. [...] neue WordPress 2.6.5 ist seit kurzem im Original und in der deutschen Version frei verfügbar. Das neue Release schließt einige [...]

    Pingback from WordPress 2.6.5 schließt XSS-Sicherheitslücken | Telagon Sichelputzer on November 26, 2008

  108. [...] azt skippelte a fejlesztőcsapat, a bugfixek meg minden egyéb újdonság leírása fellelhető itt, az új verzió, annak aki nem valamiféle egygombos telepítővel tolja fel, letölthető a [...]

    Pingback from WordPress upgrade 2.6.5. at pappito.com on November 26, 2008

  109. [...] Annuncio ufficiale sul blog di WordPress [...]

    Pingback from Un aggiornamento minore – Rilasciato WordPress 2.6.5. | Spaghetti WordPress on November 26, 2008

  110. [...] einer Sicherheitslücke, die allerdings nur einige Benutzer betrifft (IP-basiertes virtuelles Hosting auf Apache 2.x), [...]

    Pingback from WordPress | Deutschland » WordPress 2.6.5 on November 26, 2008

  111. [...] заради фалшивата такава появила се преди седмици. В WordPress 2.6.5 е отстранен XSS експлойт, засягащ IP-базирани виртуални [...]

    Pingback from WordPress 2.6.5 @ Blog.Caspie.Net on November 26, 2008

  112. [...] The word on the WordPress street: [...]

    Pingback from InstantUpgrade for WordPress 2.6.5 | thephotographer4you on November 26, 2008

  113. [...] See @ Official Blog addthis_url = ‘http%3A%2F%2Fwebtrickz.com%2Fwordpress-265-critical-update-released%2F'; addthis_title = ‘WordPress+2.6.5+Critical+Update+Released'; addthis_pub = ”; [...]

    Pingback from WordPress 2.6.5 Critical Update Released on November 26, 2008

  114. [...] que no esperes más, y Actualiza tu WordPress a WordPress 2.6.5 ya! Tags: descargar wordpress, nuevo wordpress, wordpress 2.6.5 Guardado en: Blogs, [...]

    Pingback from WordPress 2.6.5 listo para Descargar!!.. | Bloggea2.com on November 26, 2008

  115. [...] Quelle: WordPress.org [...]

    Pingback from WordPress 2.6.5 Update | Pretzlaff.info on November 26, 2008

  116. [...] arriba la informació de la publicació d’una nova actualització per WordPress que soluciona alguns problemes de seguretat detectats per un usuari, el més important dels quals és un error XSS que afecta a les IP’s [...]

    Pingback from Elliot.cat on November 26, 2008

  117. [...] | WordPress 2.6.5 trackback ¿Recomendarías este post? Más noticias sobre: Web, Seguridad, Bitácoras [...]

    Pingback from WordPress 2.6.5: actualización de seguridad on November 26, 2008

  118. [...] Quelle…weiterlesen [...]

    Pingback from linux, m68n, wengophone and fun » upgrade auf wordpress - version 2.6.5 on November 26, 2008

  119. [...] WordPress Development Blog: WordPress 2.6.5 [...]

    Pingback from WordPress 2.6.5 : WebNetiques on November 26, 2008

  120. [...] WordPress 2.6.5 has just been released and has been labeled as a recommended upgrade. This release fixes a security issue and three other small bugs. [...]

    Pingback from WordPress 2.6.5 Released — WPCandy — WordPress Themes, Plugins, Tips, and Tricks on November 26, 2008

  121. [...] Μια ακόμα ενημέρωση ασφαλείας έγινε διαθέσιμη. Καλύπτει 1 κενό ασφαλείας και 3 bug σύμφωνα με την ανακοίνωση. [...]

    Pingback from WordPress 2.6.5 on November 26, 2008

  122. [...] 26, 20083:10 am WordPress 2.6.5 Released ; fixes XSS exploit The WordPress dev team released WordPress 2.6.5 – a security release that fixes one security problem and three bugs. The [...]

    Pingback from WordPress 2.6.5 Released ; fixes XSS exploit on November 26, 2008

  123. [...] WordPress 2.6.5 has been released, which is a security upgrade. [...]

    Pingback from WordPress 2.6.5 - Security and Bug Fix Released | (Anti) Social Development on November 26, 2008

  124. [...] Opdateringen er sket ved at kopiere wp-includes/feed.php og wp-includes/version.php fra 2.6.5 pakken, som anbefalet på WordPress bloggen. [...]

    Pingback from oldermand.guldborgsundkommune.net » Oldermand opgraderet til WordPress version 2.6.5 on November 26, 2008

  125. [...] WordPress Development Blog: WordPress 2.6.5 [...]

    Pingback from WordPress 2.6.5 : Dragonfly Networks on November 26, 2008

  126. [...] You can read the full WordPress release announcement here. [...]

    Pingback from WordPress 2.6.5 released with important security fix - Crane Factory on November 26, 2008

  127. [...] WordPress 2.6.5 Download link: Download WordPress 2.6.5 Deel met je [...]

    Pingback from Download WordPress 2.6.5 en niet 2.6.4! on November 26, 2008

  128. [...] manera sorprendente, nos salieron por otro lado con la nueva versión de WordPress 2.6.5, todo el mundo esperaba la versión 2.7; pero nos caen con esta [...]

    Pingback from WordPress 2.6.5 | Corbec Soluciones on November 26, 2008

  129. [...] a aparut WordPress 2.6.5 , disponibil aici . Ceea ce nu inteleg eu este de ce se mai chinuie sa scoata sub-versiunid e 2.6 cand pot termina [...]

    Pingback from A aparut Worpress 2.6.5 si 2.7 sta inca in Beta... | Vlad Gidea - Blog si alte idei on November 26, 2008

  130. [...] Излезе съвсем случайно (почти) WordPress 2.6.5 [...]

    Pingback from WordPress 2.6.5 | Hey, you! on November 26, 2008

  131. [...] Continue reading… November 26th, 2008 in WordPress | tags: WordPress 2.6.5 If you like this article share it [...]

    Pingback from NoVirusThanks Blog » Blog Archive » WordPress 2.6.5 released and fixes one security problem and three bug on November 26, 2008

  132. [...] 2.6.5 di WordPress, sia nella versione inglese che in quella italiana. Maggiori dettagli nel post con l’annuncio del rilascio, qui il relativo annuncio su WordPress [...]

    Pingback from lucatogni.ch › Archivio › Rilasciato WordPress 2.6.5, anche in italiano on November 26, 2008

  133. [...] WordPress: http://wordpress.org/development/2008/11/wordpress-265/ [...]

    Pingback from WP and WPMU 2.5 now available | Open Alternatives on November 26, 2008

  134. [...] wurde gerade das neue Update von WordPress, Verion 2.6.5 auf den Server geladen. Da es sich um eine Version handelt, wo Fehler [...]

    Pingback from WordPress Update 2.6.5 | blogIK on November 26, 2008

  135. [...] Вийшов WordPress 2.6.5, який виправляє одну діру в безпеці використання блогівського движка та 3 баги. [...]

    Pingback from WordPress 2.6.5 та 100 відеопосібників як працювати з WordPress | Watcher on November 26, 2008

  136. [...] WordPress 2.6.5 release (tags: WordPress) Spread the word! [...]

    Pingback from links for 2008-11-26 | links | WereWP on November 26, 2008

  137. [...] Opdateringen indeholder en del bug fixes, men også forbedringer i forhold til sikkerhed. Vi anbefaler på det kraftigste at alle der benytter wordpress 2.6.x opgraderer straks. Læs hele meddelelsen på http://wordpress.org/development/2008/11/wordpress-265/ [...]

    Pingback from WordPress opdatering - 2.6.5 | Internet 123 - blog on November 26, 2008

  138. [...] sich gewisser Maßen in Grenzen: An WordPress 2.6.5 wurde nicht viel geschraubt, wie die Entwickler zugaben. Dennoch wurde wichtige XSS-Sicherheitslücken behoben, weshalb das Upgrade dringend geraten wird! [...]

    Pingback from WordPress 2.6.5 verfügbar… - ravoxx // blog & notizen on November 26, 2008

  139. [...] WordPress 2.6.5 is available. But if you already have a blog, you already know that [...]

    Pingback from Some links | Ionut Staicu - Webdeveloper Blog on November 26, 2008

  140. [...] new here, you may want to subscribe to my RSS feed. Thanks for visiting!WordPress has released a critical update today. Quoting their official blog [...]

    Pingback from Upgrade to WordPress 2.6.5 Easily - Three Tips A Day on November 26, 2008

  141. [...] ja blogista tuli siinä mielessä vähän aikuisempi, että päivitin coren uusimpaan WordPressiin. Kyllä nyt on taas turvallinen [...]

    Pingback from Kalak.org » Uusi Visa ja uusi WordPress on November 26, 2008

  142. [...] Enlace | WordPress 2.6.5 [...]

    Pingback from WordPress 2.6.5: actualización de seguridad | Planeta Tecnologia on November 26, 2008

  143. [...] Zusammenhang mit IP-basierenden virtuellen Hosts, sowie 3 Bugs beseitigt. Genaueres findet man im offiziellen Blog. Das Update hier im Blog verlief völlig [...]

    Pingback from WordPress: 2.6.5 Sicherheitsrelease (XSS-Lücke) > Bugfix, Sicherheitslücke, Update, WordPress, XSS > splash ;) on November 26, 2008

  144. [...] WordPress › Blog » WordPress 2.6.5 Social Bookmarking: [...]

    Pingback from Cotton Rohrscheib - Blog Archive » WordPress 2.6.5 on November 26, 2008

  145. [...] (XSS exploit) as well as a few bug fixes. For more information on WordPress version 2.6.5, read the official WordPress version 2.6.5 documentation. Download the latest versions of WordPress: WordPress [...]

    Pingback from WordPress 2.6.5 is Released | Sandbox Development and Consulting Inc. on November 26, 2008

  146. [...] new WordPress version 2.6.5 addresses a security vulnerability as well as a few other very minor improvements. There are a [...]

    Pingback from WordPress Security Release Version 2.6.5 | SuccessCREEations, Inc. on November 26, 2008

  147. [...] Soeben wurde WordPress 2.6.5 veröffentlicht. Diese Version ist ein Sicherheitsrelease (Details) und behebt einen schwerwiegenden XSS-Exploit, desweiteren wurden einige kleinere Probleme behoben. [...]

    Pingback from WordPress 2.6.5 veröffentlicht | Tagebuch eines Internetjunkies on November 26, 2008

  148. [...] we were all excited about version 2.7, WordPress 2.6.5 has just been released and has been labeled as a recommended upgrade as always. There are few [...]

    Pingback from WordPress 2.6.5 Released | Jnbn.Org on November 26, 2008

  149. [...] security problem and three bugs has been addressed with the new release of WordPress 2.6.5 If you are interested only in the security fix, copy wp-includes/feed.php and [...]

    Pingback from WordPress 2.6.5 is out. skipped version 2.6.4 | Web 2.0 Guide on November 26, 2008

  150. [...] WordPress 2.6.5 [...]

    Pingback from WordPress 2.6.5 on November 26, 2008

  151. [...] have released a new version 2.6.5 that fixes a security issue and three bugs as can be read on the official WordPress Blog, so go [...]

    Pingback from WordPress 2.6.5 Released! | Marco Luthe Online! on November 26, 2008

  152. [...] have released a new version 2.6.5 that fixes a security issue and three bugs as can be read on the official WordPress Blog, so go [...]

    Pingback from WordPress 2.6.5 Released! | Marco Luthe Online! on November 26, 2008

  153. [...] zou het met al die drukte nog haast vergeten te zeggen, maar er is een update van WordPress uitgekomen vandaag – namelijk versie 2.6.5 die, as usual, bomvol updates en security [...]

    Pingback from Unexpected » Blog Archive » WordPress 2.6.5 on November 26, 2008

  154. [...] 26, 2008 at 4:19 pm (Randomized) WordPress 2.6.5 has been released and includes a number of changes including one security fix, here is a list of the changes in [...]

    Pingback from Update On WordPress 2.6.5 « H O L L Y W O O D N O W on November 26, 2008

  155. [...] explicación sobre las mejoras está en el blog de WordPress en la entrada: WordPress 2.6.5 y se resumen en un parche de seguridad para los feed, un mejora que impide que se guarden [...]

    Pingback from Actualizar a WordPress 2.6.5 | Phylosoft on November 26, 2008

  156. [...] está disponible la versión 2.6.5 de WordPress (anuncio oficial), que arregla un fallo XSS, un problema de XML-RPC y algunas cosas [...]

    Pingback from WordPress 2.6.5 liberado | Sumolari.com on November 26, 2008

  157. [...] Actus et a 0 Commentaire à ce jour. A quelques jours de la sortie de la version 2.7, l’équipe de développement nous sort une version 2.6.5 de derrière les fagots… mais aussi de dernière minute ! La [...]

    Pingback from Sortie de WordPress 2.6.5 | Mounik on November 26, 2008

  158. [...] some abbreviated output from upgrading to 2.6.5 a few minutes [...]

    Pingback from Orange is my favorite color » Blog Archive » Upgrading many WordPress installs at once from subversion on November 26, 2008

  159. [...] WordPress 2.6.5 has been released and I have upgraded to this latest version since it also solves a security issue. [...]

    Pingback from WordPress 2.6.5 on Chess Teaching on November 26, 2008

  160. [...] post² lama sudah lebur.. Lagi satu kena upgrade ke WP 2.6.5 [...]

    Pingback from Siap Install « menteil on November 26, 2008

  161. [...] 2.7 sürümünü beklediğimiz şu günlerde WordPress, 2.6.4 sürümünü atlayarak 2.6.5 sürümünü yayınladı. [...]

    Pingback from WordPress 2.6.5 | MaviPC.Net on November 26, 2008

  162. [...] whenever there is a new release for download (absolutely free from WordPress.org). According to Ryan’s post, the latest WordPress 2.6.5 fixes one serious security threat (XSS exploit) and three bugs – [...]

    Pingback from Update To Latest WordPress 2.6.5 To Fix XSS Exploit - Walker News on November 26, 2008

  163. [...] skarpa versionen av WordPress är version 2.6.5, ute nu. Man hoppar alltså över 2.6.4 på grund av en falsk version, så den skall du absolut inte köra. [...]

    Pingback from WordPress 2.6.5 ute, undvik 2.6.4 | Thord Daniel Hedengren on November 26, 2008

  164. [...] dat de laatste fixrelease voor de 2.6 serie wel geweest was, wordt er binnen 4 weken alweer een nieuwe versie uitgebracht. Ditmaal versie 2.6.5, nummer 4 wordt overgeslagen omdat daar een corrupte versie van [...]

    Pingback from WordPress 2.6.5 » Zomaar… on November 26, 2008

  165. [...] ayer esta disponible WordPress 2.6.5 que corrige algunos errores de seguridad, por lo tanto debemos actualizar de forma rapida para [...]

    Pingback from Actualización a WordPress 2.6.5: Mundología on November 26, 2008

  166. [...] The latest WordPress update fixes one security problem and three bugs. [...]

    Pingback from WordPress 2.6.3 to 2.6.5 Update File » Techtites on November 26, 2008

  167. [...] un correctif a été publié pour WordPress. En effet, pour les serveurs tournant sous Apache 2.x, il existait une faille XSS. Les fichiers a [...]

    Pingback from Sargeros’ Blog » Mise à jour importante pour WordPress : 2.6.5 on November 26, 2008

  168. [...] has released version 2.6.5 for standard WordPress and WordPress [...]

    Pingback from WordPress and WordPress MU version 2.6.5 released | WebDevStudios.com on November 26, 2008

  169. [...] Few Days back the WordPress team found a major security issue in the wordpress 2.6.3 and released the version 2.6.5. [...]

    Pingback from WordPress gets updated to 2.6.5 | Techie Blues on November 26, 2008

  170. [...] listopada 2008 pojawiała się na oficjalnym blogu WordPress-a informacja że udostępniono nową wersję systemu pod numerem 2.6.5 Zmiany wprowadzono [...]

    Pingback from » WordPress 2.6.5 [25.11.2008] » NaszeWP | Wielki zbiór porad dla WordPress-a on November 26, 2008

  171. [...] Hier geht’s entsprechenden WordPress-Blog-Artikel [...]

    Pingback from WordPress 2.6.5 - Kulturbanause on November 26, 2008

  172. [...] Hier geht’s entsprechenden WordPress-Blog-Artikel [...]

    Pingback from WordPress 2.6.5 - Kulturbanause on November 26, 2008

  173. [...] WordPress 2.6.5 [...]

    Pingback from Quasi.dot on November 26, 2008

  174. [...] Bu adreste yayınlanan habere göre galiba xss ve buglar düzeltilmiş..Güvenlik güncelleştirmesi oldu sanırsam bu.. [...]

    Pingback from WordPress Destek Sitesi | WordPressim.Com » Blog Archive » WordPress 2.6.5 Yayınlandı on November 26, 2008

  175. [...] 2.6.5 ist ein Sicherheitsrelease das einen schwerwiegenden XSS-Exploit behebt, nebenbei wurden auch noch ein paar kleinere Probleme gefixed.  [Details] [...]

    Pingback from WordPress Security Update 2.6.5 | TechBlog on November 26, 2008

  176. [...] [Source] [Full Changelist] [Download] Tags: Software, WordPress [...]

    Pingback from WordPress 2.6.5 Released | Brontesaurus on November 26, 2008

  177. [...] WordPress 2.6.5 has been released which is probably the last release in that branch till 2.7 goes official. It represents a pretty important release because there’s a security hole that has been blocked, together with a couple of minor fixes. [...]

    Pingback from WordPress 2.6.5 - Upgrade or not? | wordpressguru.eu on November 26, 2008

  178. [...] reported by the WordPress folks themselves, they’ve released version 2.6.5 once they learned of the exploit and assembled the [...]

    Pingback from WordPress 2.6.5 Now Available — Javamancy on November 27, 2008

  179. [...] WordPress 2.6.5 has been released. It fixes an XSS security problem concerning blogs running on Apache 2.x using IP-based virtual servers and there are three small non-critical bug fixes. You can download the fix or use Subversion to pull them down thus: [...]

    Pingback from gordon.dewis.ca | WordPress 2.6.5 on November 27, 2008

  180. [...] Article Link Tag It: [...]

    Pingback from Liquidmatrix Security Digest » Upgrade Time For Bloggers: WordPress 2.6.5 on November 27, 2008

  181. [...] jika wordpress diinstall di IP-based virtual server yang menjalankan apache 2.x.x. Berita WordPress versi 2.6.5 ini terbit tanggal 26 November 2008 di situs resmi wordpress.org. Sayangnya sampai saya [...]

    Pingback from Update WordPress 2.6.5 Security Fix | Sharing Knowledge for All on November 27, 2008

  182. [...] 2.6.5 has just been released. The latest version fixes a security issue with XSS and three more bugs related to the XSS issue. In case you [...]

    Pingback from WordPress 2.6.5 - Latest WordPress Version | Blogging, SEO and Online Marketing Tips on November 27, 2008

  183. [...] dapat dilihat di blog pengembangan WordPress. if(typeof(hyperweb_adcount)==”undefined”) hyperweb_adcount =1; Category: WordPress You [...]

    Pingback from ryandi [dot] com » Blog Archive » WordPress 2.6.5 on November 27, 2008

  184. [...] are highly recommended to upgrade their blogs, to the latest version which is WordPress 2.6.5. As stated on the wordpress blog by Ryan [...]

    Pingback from WordPress 2.6.3 Security Compromised, Upgrade Now! « Top Info on November 27, 2008

  185. [...] WordPress 2.6.5 – As always: new version of WordPress installed on zx81.org.uk, no known problems but please let me know if you find anything recently broken. [...]

    Pingback from My del.icio.us bookmarks for November 17th through November 27th ~ This is ZX81.org.uk on November 27, 2008

  186. [...] 官網的資料: 1.WordPress2.6.5更新訊息發布 [...]

    Pingback from 部落格WordPress 2.6.3更新至2.6.5 on November 27, 2008

  187. [...] jokes aside I think its great that Development team releases security patches and updates even though WordPress 2.7 is not far off from final release. [...]

    Pingback from WordPress 2.6.5 Update on November 27, 2008

  188. [...] Barusan jalan-jalan ke official blog wordpress. Lalu ada info security tentang celah bugs keamanan dari wordpress versi 2.6.3. Untuk selengkapnya baca sendiri ya disini. [...]

    Pingback from Celah keamanan WP 2.6.3, buruan upgrade | Leoslab.net on November 27, 2008

  189. [...] WordPress.org [...]

    Pingback from WordPress 2.6.5 is Released » Gallery of Temptations on November 27, 2008

  190. Sicherheitsupdate: WordPress Version 2.6.5…

    Heute wurde ein Sicherheitsupdate für WordPress veröffentlicht. Das Update schließt eine Lücke welche beim Betrieb eines IP-basierten virtuellen WordPress-Hosting mit Apache 2.x auftritt.
    Eine Version 2.6.4 wurde übrigens nicht veröffentlicht, da……

    Trackback from rack::SPEED Blog on November 27, 2008

  191. [...] WordPress 2.6.5 (官方部落格) [...]

    Pingback from SmallKen's Blog » Blog Archive » 部落格更新至 WordPress 2.6.5 on November 27, 2008

  192. [...] to WordPress blog, The security issue is an XSS exploit discovered by Jeremias Reith that fortunately only affects [...]

    Pingback from WordPress 2.6.5 Is Released | Bloghonour on November 27, 2008

  193. [...] Source: WordPress [...]

    Pingback from WordPress 2.6.5 | WING LOON on November 27, 2008

  194. [...] upgrade their blog with latest version and which makes your site secure and about this matter official blog site posted in details. Given [...]

    Pingback from WordPress 2.6.5 Available & Security Alerts « Tech Idea on November 27, 2008

  195. [...] zu diesem Release: WordPress & WordPress Deutschland [...]

    Pingback from Upgrade auf WordPress Version 2.6.5 - By Joerg Hochwald - hochwald.net on November 27, 2008

  196. [...] have an overwhelming reason not to, it is advised that you upgrade as soon as possible. From the WP Blog: The security issue is an XSS exploit discovered by Jeremias Reith that fortunately only affects [...]

    Pingback from CompuSkills Blog » Blog Archive » Word Press Upgrade on November 27, 2008

  197. [...] el día de ayer, WordPress 2.6.5 se encuentra disponible para la descarga, esta nueva versión repara tres pulgas en el código y un [...]

    Pingback from WordPress 2.6.5 disponible | TecnoVits on November 27, 2008

  198. [...] informacja o nowej wersji Worpressa jest tutaj. Tam też jest link do informacji jakie pliki zostały zmienione pomiędzy tą wersją a wersją [...]

    Pingback from Nowy WordPress 2.6.5 | Poradnik Webmastera - Blog on November 27, 2008

  199. [...] WordPress is in official release of version 2.6.5, and the 3rd beta release of 2.7 is availble for testing. Expect 2.7 to officially rock your world [...]

    Pingback from Thanks For WordPress 2.7 | iePlexus on November 27, 2008

  200. [...] Fuente: http://wordpress.org [...]

    Pingback from Actualiza WordPress 2.6.3 a 2.6.5. | davidsuarez.es on November 27, 2008

  201. [...] http://wordpress.org/development/2008/11/wordpress-265/ [...]

    Pingback from http://wordpress.org/development/2008/11/wordpress-265/ | El blog de Carlos Andrade Sánchez on November 27, 2008

  202. [...] WordPress Blog によると、Apache 2.x で IP アドレスベースの仮想サーバを構築している場合にのみ XSS1 の問題があったのを修正したようです。この問題を修正するだけなら 2つのファイルを上書きするだけでも良いようですが、実際にはほか 3つの問題を修正し、合計 5つのファイルがアップデートされています。 [...]

    Pingback from WordPress 2.6.5: 2.6.3 からのアップグレード手順まとめ / Apache 2.x 上での XSS 脆弱性を修正 - Nire.Com on November 28, 2008

  203. [...] View the official link here at the WordPress development blog. [...]

    Pingback from JungleJar WordPress 2.6.5 Released on November 28, 2008

  204. [...] 2.7. The release version is 2.6.5, not to be confused with the malicious version, WordPress 2.6.4. WordPress 2.6.5 tackles an XSS exploit that impacts only IP-based virtual servers running Apache 2.x and three [...]

    Pingback from WordPress News: WordPress 2.7 New Login, WordCamp Australia, WordPress 2.6.5 Security Update, BuddyPress, and More | The Blog Herald on November 28, 2008

  205. [...] 2.7. The release version is 2.6.5, not to be confused with the malicious version, WordPress 2.6.4. WordPress 2.6.5 tackles an XSS exploit that impacts only IP-based virtual servers running Apache 2.x and three [...]

    Pingback from WordPress 2.7 Release News and Links « Lorelle on WordPress on November 28, 2008

  206. [...] In those setups it might be possible for hackers to rig systems so that they serve up malicious Java Script from domains under their control, as explained in an advisory by WordPress here. [...]

    Pingback from WordPress Has Fixed a Cross-site scripting XSS Flaw | H_acktivis_T on November 28, 2008

  207. [...] Para verem mais informações podem consultar o blog oficial. [...]

    Pingback from Actualização de segurança do WordPress. | WebVicio.com on November 28, 2008

  208. [...] de problemas com a segurança do wordpress então foi lança a versão de correção que é a WordPress 2.6.5, é um problema de segurança XSS explorar descoberto por Jeremias Reith que felizmente só afeta [...]

    Pingback from ATUALIZAÇÃO URGENTE PARA WORDPRESS 2.6.5 | on November 28, 2008

  209. [...] wordpress upgrade: aktualisierung der wordpress-core-dateien auf die version 2.6.5 [...]

    Pingback from under construction... on November 28, 2008

  210. [...] 这星期WP又出了新了版本,那么又要升级,烦。 真后悔当初这个Blog没有用dreamhost的One-Click [...]

    Pingback from 过眼云烟 » Blog Archive » 头痛 on November 28, 2008

  211. [...] Links: Download DE Version Download int. Version Release Information [...]

    Pingback from Cyberday GmbH Blog» Blogarchiv » WordPress Version 2.6.5 erschienen on November 28, 2008

  212. [...] been check on wordpress.org which said if wordpress has launched the new version of 2.6.5 . So what’s new [...]

    Pingback from WordPress 2.6.5 : What's new ? on November 28, 2008

  213. [...] do blog para sua última versão 2.6.5. Para quem quiser ver o changelog da versão, clique aqui ou aqui (ambos em [...]

    Pingback from WinPress » Voltei dos mortos e com novidades! on November 28, 2008

  214. [...] Información adicional en: http://wordpress.org/development/2008/11/wordpress-265/ [...]

    Pingback from GULAGS » Blog Archive » Actuialización wordpress on November 28, 2008

  215. [...] days ago, WordPress 2.6.5 was released, and according to the post on WordPress.org, it contains one security fix and three bug [...]

    Pingback from WordPress 2.6.5 Released | Professional PHP Development Blog on November 28, 2008

  216. [...] WordPress 2.6.5 Released – On Tuesday, WordPress 2.6.5 was released to the public. End users are highly encouraged to upgrade because of a Cross Site Scripting vulnerability that was discovered and subsequently fixed. Besides the security fix, the release contains three other bug fixes. For those wondering why version 2.6.4 was skipped in favor of 2.6.5, a week or two ago, a malicious version of WordPress which contained a backdoor was being distributed across the web and this version was labeled as 2.6.4 thus why the WordPress development team is avoiding confusion by not having an official version labeled with that number. – http://wordpress.org/development/2008/11/wordpress-265/ [...]

    Pingback from WordPress Report For The Week Of November 28th 2008 : The NMP Network on November 29, 2008

  217. [...] 2.6.5 has been released. It contains security and bug fixes, and is recommended that everybody should update immediately. [...]

    Pingback from WordPress 2.6.5 « Matt's Blog on November 29, 2008

  218. [...] plataforma de publicacion de contenidos mas popular, WordPress, lanzo hace unos dias la version WordPress 2.6.5, ahora disponible en español. La actualizacion es menor, sin embargo, algunos problemas de [...]

    Pingback from Que no soy geek…!!! » Blog Archive » Notas Open Source: WordPress 2.6.5, Fedora 10 y openSUSE 11.1 RC 1 on November 29, 2008

  219. [...] Blog de desarrollo de WordPress (inglés) Software [...]

    Pingback from Lanzado WordPress 2.6.5 | Turleando on November 29, 2008

  220. [...] for blogging – but it can also be used to set up a plain and simple (business?) homepage. WordPress released number 2.6.5. Soon there will be the (long waited for !!) 2.7 – but meanwhile this 2.6.5 has been released [...]

    Pingback from WordPress; 2.6.5 released on November 29, 2008

  221. [...] Read the original post:  WordPress › Blog » WordPress 2.6.5 [...]

    Pingback from WordPress › Blog » WordPress 2.6.5 | thewordpresssecrets on November 29, 2008

  222. [...] Wczoraj postanowiłem zmienić desing na jednej ze stron Iwonki. Był stary i obleśny. Teraz został odświeżony. Wiadomo większość stron jest stawiana jak najtańszym sposobem, ale jednak z dobrymi zabezpieczeniami. Bo nie sztuka zrobić coś, starać się przez wiele miesięcy, a potem żeby stracić w niewujaśnionych okolicznościach. Cały dzień trwała praca nad stroną. Dopieściłem ją w 100%, a nawet zaktualizowałem skrypta do najnowszej wersji. [...]

    Pingback from » Ciężki dzień z kompem » Januszek - Osobisty kawałek świata on November 29, 2008

  223. [...] tiga lagi perbaikan seperti disampaikan di situs blog WordPress. [...]

    Pingback from Update WordPress 2.6.5 « Catatan TIK on November 30, 2008

  224. [...] 2.6.5が出ていたので更新。主な変更点はIPで振り分けるVirtualHostの設定になっているApache2系のサーバでXSS攻撃が可能になる問題の修正。 [...]

    Pingback from WordPress更新 | Selfkleptomaniac on November 30, 2008

  225. [...] Blogipohjan päivitys ok, no problems. [...]

    Pingback from Vesa Salmi » Blog Archive » WordPress 2.6.5. on November 30, 2008

  226. [...] Shared a link on Google Reader. WordPress 2.6.5 [...]

    Pingback from Daily Digest for 2008-11-26 at Dudtn on November 30, 2008

  227. [...] çıkartmadılar. Hatta hiç olmayacakmış bu sürüm (: Gerekli açıklamanın ingilizcesi burada [...]

    Pingback from WordPress 2.6.5 Yayınlandı! on November 30, 2008

  228. [...] discuss the release of WordPress 2.6.5, which fixes for a very obscure security bug and three more [...]

    Pingback from Episode 48: WordPress 2.6.5 released, Mark Jaquith on 2.7, WordPress Direct controversy - The WordPress Community on November 30, 2008

  229. [...] WordPress 2.6.5 was released just short of a week ago and it’s definitely mounting up for the release of WordPress 2.7, which arrives soon! The security issue is an XSS exploit discovered by Jeremias Reith that fortunately only affects IP-based virtual servers running on Apache 2.x. If you are interested only in the security fix, copy wp-includes/feed.php and wp-includes/version.php from the 2.6.5 release package. 2.6.5 contains three other small fixes in addition to the XSS fix. The first prevents accidentally saving post meta information to a revision. The second prevents XML-RPC from fetching incorrect post types. The third adds some user ID sanitization during bulk delete requests. [...]

    Pingback from WordPress 2.6.5 is released, but I want 2.7 | iMod on December 1, 2008

  230. [...] regular (single user?) version of WordPress are the equivalent, so if you’ve heard about the recent security issues and bug fixes in WordPress, don’t worry – you got [...]

    Pingback from WedBlog - Wedblogs.com Updated to WPMU 2.6.5 on December 1, 2008

  231. [...] quelques jours de la sortie de la version 2.7, l’équipe de développement nous sort une version 2.6.5 de derrière les fagots… mais aussi de dernière minute ! La [...]

    Pingback from Hebergement .TV » Blog Archive » » Sortie de WordPress 2.6.5 on December 1, 2008

  232. [...] Upgraded the WordPress installation that runs Moment by Moment to 2.6.5. Previous version was 2.6.3. For more information on v2.6.5, see WordPress 2.6.5. on the WordPress Blog. [...]

    Pingback from WordPress upgraded to 2.6.5 – Moment by Moment on December 2, 2008

  233. [...] ternyata dibagian dashboard ada pemberitahuan bahwa ada update terbaru tentang engine wordpress ke versi 2.6.5 [...]

    Pingback from Cara Cepat Upgrade WordPress | I Md Yanuarta DPY on December 2, 2008

  234. [...] WordPress 2.6.5 released! Security update! [...]

    Pingback from WordCast 38: Of Dunkles and WordCamps | WordCast - The web's best podcast on WordPress and blogging on December 2, 2008

  235. [...] | pagina oficial Lo hemos visto en [...]

    Pingback from Actualizacion WordPress 2.6.5 « PixelCSS on December 2, 2008

  236. [...] çıkartmadılar. Hatta hiç olmayacakmış bu sürüm (: Gerekli açıklamanın ingilizcesi burada [...]

    Pingback from WordPress 2.6.5 Yayınlandı! | Net Alemi on December 3, 2008

  237. [...] Read the official announcement about WordPress 2.6.5 at the WordPress.org Development Blog. [...]

    Pingback from BLOG » Upgraded to WordPress 2.6.5 » Sofie Estolloso Hofmann Designs International - Weggis, Switzerland on December 3, 2008

  238. [...] am instalat-o cu WP Automatic Upgrade. Nu mă întrebaţi ce aduce, chestii de securitate (citiţi aici). Important e să fii up 2 date! Şi, apropo, cică se lucrează la 2.7, care e în [...]

    Pingback from WordPress 2.6.5 on December 4, 2008

  239. [...] (via wordpress) [...]

    Pingback from WordPress 2.6.5 Security Update released before 2.7, never will be a version 2.6.4 at www.HWDOT.com on December 4, 2008

  240. [...] Now: Due to the recent security release of WordPress 2.6.5 and the stable WordPress 2.7 Release Candidate 1, it is recommended that you upgrade to RC1 so when [...]

    Pingback from Countdown to WordPress 2.7 « Lorelle on WordPress on December 4, 2008

  241. [...] WordPress 2.7 RC1 Now: Due to the recent security release of WordPress 2.6.5 and the stable WordPress 2.7 Release Candidate 1, it is recommended that you upgrade to RC1 so when [...]

    Pingback from WordPress News: WordPress 2.7 Out on WordPress.com, WordPress 2.7 News, WordCamps, WordPress Plugins and Themes Updated | The Blog Herald on December 5, 2008

  242. [...] on the edge – current official wordpress advice is “Due to the recent security release of WordPress 2.6.5 and the stable WordPress 2.7 Release Candidate 1, it is recommended that you upgrade to RC1 so [...]

    Pingback from no more excuses - time for WP 2.7 : WordPress guy on December 5, 2008

  243. [...] Ben weer terug van vakantie – geweldig!! – en uiteraard moest er nog wat achterstallige onderhoud plaatsvinden op de site. WordPress – de motor achter Clicko – is inmiddels geupdate van v2.6.3 naar v2.6.5 inclusief een aantal update. Het lijkt allemaal weer goed te werken. Meer informatie over de update vind je hier. [...]

    Pingback from Clicko.nl weer geupdate (en weer terug van vakantie) | Clicko.nl on December 6, 2008

  244. [...] Updated to WordPress 2.6.5 that fixes one security problem and a few other bugs. (Release notes) [...]

    Pingback from JumpBox Official Blog » Introducing Zenoss - Start managing your IT network in minutes on December 10, 2008

  245. [...] WordPress 2.6.5 [...]

    Pingback from wordpress 2.7正式版下载发布啦 | 睡到自然醒blog on December 11, 2008

  246. [...] 本文翻譯自《WordPress 2.6.5》。 Categories: WordPress Posted By: u940105 Last Edit: 11 12月 2008 @ 08 50 PM E-mail • Permalink Previous: Next:  Responses to this post » (None)  Comments are open. Feel free to leave a comment below. Comment Meta: RSS Feed for comments TrackBack URI  Leave A Comment …  [...]

    Pingback from u940105 » Blog Archive » WordPress 2.6.5 on December 11, 2008

  247. [...] WordPress 2.6.5 has just been released and has been labeled as a recommended upgrade. This release fixes a security issue and three other small bugs. [...]

    Pingback from WordPress 2.6.5 Released | Web Design Abyss on December 11, 2008

  248. [...] wasn’t activated. With past versions, waiting was a good recommendation. Now, with the recent WordPress 2.6.5 security update, it is highly recommended that you take that one step further and upgrade to 2.7 [...]

    Pingback from WordPress 2.7 Upgrade Tips « Lorelle on WordPress on December 11, 2008

  249. [...] there any security issues with 2.6? 2.6.4. has a security flaw, which was fixed in 2.6.5 (see: WordPress › Blog » WordPress 2.6.5) Regarding 2.7, the WordPress development blog doesn’t mention if they fixed any specific security [...]

    Pingback from What You Ought to Know About WordPress 2.7 - Indian Domain Names Forum on December 11, 2008

  250. [...] 26 ноября 2008 г. Выпущено внеплановое обновление 2.6.5. Если у вас уже установлена версия 2.6.3, то можете [...]

    Pingback from Русский WordPress 2.6.5 Lecactus Edition - Lecactus Home on December 11, 2008

  251. [...] Fuente: wordpress.org [...]

    Pingback from Foro contra Malwares » WordPress 2.6.5: actualización de seguridad on December 12, 2008

  252. [...] 2.7′ yi beklerken bir güvenlik açığını ve üç hatayı düzelten WordPress 2.6.5 sürümü [...]

    Pingback from Virüs Güvenlik Haberleri » WordPress 2.6.5 on December 12, 2008

  253. [...] sürüm yok, sahte bir sürüm varki kesinlikle 2.6.4′e yükseltilmemeli.. ama yeni çıkan 2.6.5 nihai sürümdür ve orjinaldir, mutlaka her blog sahibi yükseltmelidir.. tabi bu keyfidir, [...]

    Pingback from CaVeLL konu: "WordPress 2.6.5 Çıktı!" | Ali Cem Şener on December 28, 2008

  254. [...] activated. With past versions, waiting was a good recommendation. Now, with the recent WordPress 2.6.5 security update, it is highly recommended that you take that one step further and upgrade to 2.7 [...]

    Pingback from Koves » Blog Archive » I Want to Wait Until All the Bugs are Fixed: WordPress 2.7 has undergone extensive development and testing. It is currently in use on almost 5 million WordPress.com blogs and has been for a couple of months, though the n on December 29, 2008

  255. [...] activated. With past versions, waiting was a good recommendation. Now, with the recent WordPress 2.6.5 security update, it is highly recommended that you take that one step further and upgrade to 2.7 [...]

    Pingback from Koves » Blog Archive » I Want to Wait Until All the Bugs are Fixed: WordPress 2.7 has undergone extensive development and testing. It is currently in use on almost 5 million WordPress.com blogs and has been for a couple of months, though the n on December 29, 2008

  256. [...] WordPress 2.6.5 was released patching up an XSS security hole. Atomac is up and running with the new version, so if you spot anything gone awry please let us know. « Boxee/XBMC Back on Apple TV 2.3 Heading to Flagstaff for a Graduation » [...]

    Pingback from Upgraded to WordPress 2.6.5 at Atomac.net on January 6, 2009

  257. [...] قم بزيارة المدونة الخاصة بموقع ووردبريس الرسمي و اقرأ الموضوع الذي يتحدث عن التغييرات التي تم إجرائها في النسخة المحدثة. مثال: WordPress 2.6.5 [...]

    Pingback from أسرع طريقة لتحديث مدونتك الووردبريس « أحلام عربية on January 10, 2009

  258. [...] für weiter Infos: http://wordpress.org/development/2008/11/wordpress-265/ und [...]

    Pingback from Update auf WordPress 2.6.5 und 2.7.0 « Martin Riedl - Weblog on January 15, 2009

  259. [...] the time of this writing, WordPress 2.6.5 was just released. You know, “for future [...]

    Pingback from The Very First Steps After a Fresh WordPress Install on January 16, 2009

  260. [...] from 2.6.2 I did not do this. I merely upgraded the 2 files involved in the security portion of the WP 2.6.5 upgrade (which were wp-includes/feed.php and wp-includes/version.php). However, to date those are still the [...]

    Pingback from My Blog Hacked, Yet Again - WordPress 2.6.5 Vulnerability / Exploit? | Smackdown! on January 16, 2009

  261. [...] ile ilgili 2.7 sürüm beklenirken 2.6.5 duyuruldu. Bir güvenlik güncellemesi ve üç hatanın giderildiği bu sürümle ilgili hangi dosyaların [...]

    Pingback from WordPress 2.6.5 · Mürekkep - İnternet Yaşam Rehberiniz on January 19, 2009

  262. [...] El detalle más destacable es que se han saltado la versión 2.6.4 debido a un fake de WordPress que usaba ese número de versión; todo ello explicado en este artí­culo. [...]

    Pingback from Cosas del curro » WordPress actualizado a versión 2.6.5 on March 5, 2009

  263. [...] site full of pharma spam and hidden links, do you? That would be awful See the full annoucement here and upgrade your WordPress [...]

    Pingback from SRPI » Blog Archive » WordPress 2.6.5 on March 6, 2009

See Also:

For more WordPress news, check out the WordPress Planet.

There’s also a development P2 blog.

To see how active the project is check out our Trac timeline, it often has 20–30 updates per day.

Categories

%d bloggers like this: