diff --git a/.cvsignore b/.cvsignore
index 8276998..fae44df 100644
--- a/.cvsignore
+++ b/.cvsignore
@@ -1 +1 @@
-wordpress-2.6.3.tar.gz
+wordpress-2.6.5.tar.gz
diff --git a/sources b/sources
index 8265a11..b30dd47 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-c3300c2b615861f3bfffdd9701e8dd97  wordpress-2.6.3.tar.gz
+066433e2b6d090e7d4c4cce49cf9b232  wordpress-2.6.5.tar.gz
diff --git a/wordpress.spec b/wordpress.spec
index 20bdc1a..4e6baf4 100644
--- a/wordpress.spec
+++ b/wordpress.spec
@@ -1,7 +1,7 @@
 Summary: WordPress blogging software
 URL: http://www.wordpress.org
 Name: wordpress
-Version: 2.6.3
+Version: 2.6.5
 Group: Applications/Publishing
 Release: 1%{?dist}
 License: GPLv2
@@ -75,6 +75,10 @@ rm -rf ${RPM_BUILD_ROOT}
 %dir %{_sysconfdir}/wordpress
 
 %changelog
+* Wed Nov 26 2008 Adrian Reber <adrian@lisas.de> - 2.6.5-1
+- updated to 2.6.5
+- fixes "CVE-2008-5113 wordpress delayed attack via cookies" (#471989) 
+
 * Fri Oct 24 2008 Adrian Reber <adrian@lisas.de> - 2.6.3-1
 - updated to 2.6.3