The security issue is an XSS exploit discovered by Jeremias Reith that fortunately only affects IP-based virtual servers running on Apache 2.x. If you are interested only in the security fix, copy wp-includes/feed.php and wp-includes/version.php from the 2.6.5 release package.

2.6.5 contains three other small fixes in addition to the XSS fix. The first prevents accidentally saving post meta information to a revision. The second prevents XML-RPC from fetching incorrect post types. The third adds some user ID sanitization during bulk delete requests. For a list of changed files, consult the full changeset between 2.6.3 and 2.6.5.

Get the WordPress 2.6.5 files from the official WordPress site.

Related Posts:

• Has Your WordPress Blog Been Hacked?
• WordPress 2.1 Release
• [UPDATED] Early versions of WordPress under attack – upgrade to 2.8.4 today!
• PINKI Server – Critical Hardware Update **Resolved**
• New Billing and Support System
• Have a look at the new WordPress 2.7 Dashboard
• WordPress SuperCache
• Wordpress for Dummies
• Akismet bug fixed
• New Hosting Packages Rollout!

( The IP of the server you are on is listed in your account CPanel, in the left menu – if it matches the one listed above, your site is on Jingles)

We are upgrading the RAM on this machine today.  The server is functioning fine right now – although we did experience a minor 5 minute outage earlier this morning.  The RAM upgrade will occur overnight – during times of lower traffic and readership.  The integrity of all backup files will be maintained in our system, but you may experience some maintenance downtime in the very late hours of the night tonight, if you’re like me and are still awake at that hour!

Grab a book.  Catch up on the news.  Relax – have a good night of sleep, you probably won’t even notice.  Will provide updates here when it’s done and dusted!

UPDATE: 11:15 PM (CST/GMT -6) -> We’ve confirmed the time of the hardware maintenance on this server to be between 12:00AM (Midnight) – 4:00AM (CST/GMT -6).  That’s not to say the server will be down for the entire 4 hours – - but that is the window of time that the maintenance is scheduled for.  Will update here again with progress as it happens!  Hang tight – we’re getting there!

UPDATE #2: 10/21 – All is well and good in the land of Jingles!  Our Jingles got herself some brand new, shiney RAM – as well as a new chassis because we suspected the box had some I/O issues, as well.  Pretty much everything was replaced except for the hard drives and she is running smooth and we expect to hear ZERO whining out of her!  If you even noticed the downtime last night between 12:00AM (Midnight) and 4:00AM CST – we thank you very very much for your patience.  If you didn’t notice – all the better!  The intermittant problems we’ve had with Jingles are resolved and we expect smooth sailing out of her from here on out.  Yay!

Update 10/21 - We have worked with the fine folks at CPanel about a licensing issue for the CPanel software.  During/after the repairs to Jingles, our authorized license did not get transferred and access to CPanel was limited for a small amount of time.  The license has since been transferred over and we’ve not experienced any CPanel access issues since then.  If you have, or continue to experience problems accessing your CPanel – <a href=”http://tickets.blogs-about.com”>please file a ticket in our Help Desk</a> and let us know so we can get it resolved for you.  Thanks!

Related Posts:

• PINKI Server – Critical Hardware Update **Resolved**
• New Billing and Support System
• Mail Server Update

We currently have 5 of our shared servers we are currently monitoring and good question might be… “How do I know which server my account is on?” – which would be an excellent question! The servers on the Site Uptime monitoring page are listed by name and IP address:

• KIWI – 76.74.159.114
• JINGLES – 66.135.55.41
• BUBBA – 72.51.34.113
• TALIS – 72.51.38.154
• OZ – 72.51.46.32

It is the string of numbers to the right of the Server Name that you need to worry about. The IP of the server you are on is listed in your account CPanel, in the left menu. Find that IP – compare it to one of the 5 listed above and BINGO! You know which one you are on! Feel free to bookmark our uptime monitoring page so you can visit it and check up on our regular progress of uptime! Those uptime stats are refreshed every 5 minutes!

Small triva that most of you don’t know: The names of our servers: Kiwi, Oz, Bubba, Talis, Jingles – those are all names of our pets. Yes, we’re pet people! We have three birds and three cats – so far!

Kiwi – our conure parrot; she recently died after choking on a seed
Oz – our Military Mackaw
Jingles – our Chattering Lorikeet
Bubba – our adopted kitten from Alabama
Talis – our Abysynnian cat

But there are only 5 servers, you ask?? Yes – we recently adopted a Pionus Parrot named Pinki who doesn’t have a server named after her yet! All in good time, Pinksters!

Related Posts:

• New Hosting Packages Rollout!
• Server Migration 12/13 – 12/14 2008
• New design launch and some great new features!
• WordPress SuperCache
• Welcome Clients from Weblog Design Studios