Wordpress 2.1.1 may contain nasty surprise

Filed under: Internet, Security, Blogging, Web services, Open Source

Wordpress 2.1.1 may contain nasty surprise

by Dan Lurie Mar 2nd 2007

Breaking news on the internets right now as Matt over at WordPress is reporting some serious issues with packages of WordPress 2.1.1 downloaded over the past 3-4 days. According to a blog post, a malicious intruder gained access to the wordpress.org servers and modified the files being made available for download. How exactly this happened is still unknown.

The long-and-short of the situation is this: if you downloaded and installed the most recent version of WordPress from wordpress.org in the last few days, you weren't downloading the official release– you were downloading a modified version that likely includes some sort of back-door.

Although only a subset of in-the-wild copies of 2.1.1 contain the vulnerability, the development team has declared the entire release "dangerous," and highly suggest all users upgrade to 2.1.2.

Tags: 2.1.1, 2.1.2, vulnerability, wordpress

Reader Comments (Page 1 of 1)

Dave Chartier said 11:00PM on 3-02-2007

In the words of Mr. Frank:

"asshole."

Seriously, what the hell does sabotaging WordPress do for anyone?

Andrew Hillman, Andrew Hillman said 11:27PM on 3-02-2007

Big Suprise!

Andrew Hillman

Featured Time Waster

Civiballs is a beautiful, soothing physics puzzle Time Waster

I have an absolute weakness for physics games, and while Civiballs isn't the strongest physics-based game, what it lacks in the physics department it makes up for a few times over in style and fun.

In Civiballs, you are presented with a few colored balls, and your goal is to get those balls into the same-colored urn on the level. The "civi" part of Civiballs is that there are 3 sets of levels to play, each representing a different civilization. While the civilization doesn't affect gameplay, the artwork for each level is beautifully themed to it's appropriate era.

To play the game, you are given only one tool - a sword with which to cut the chains that are holding the balls. The puzzle part of the game is in figuring out what order, and with what timing to cut each chain. Do it right, and all the right balls end up in the right urns, with no stray balls entering an urn (a no-no). Do it wrong, and you get to start over again.

Civiballs is not terribly deep on gameplay; the entire game can be completed in about 15 minutes. But if you enjoy this type of game, it will be a very enjoyable 15 minutes.

View more Time Wasters