[pkgsrc/trunk]: pkgsrc/www/wordpress Security and maintenance update to versi...

[morr <morr%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/455a9cd2c947
branches:  trunk
changeset: 651749:455a9cd2c947
user:      morr <morr%pkgsrc.org@localhost>
date:      Mon May 11 05:16:31 2015 +0000

description:
Security and maintenance update to version 4.2.2.

WordPress 4.2.2 fixes a cross-site scripting vulnerability contained in an HTML
file shipped with recent Genericons packages included in the Twenty Fifteen
theme as well as a number of popular plugins by removing the file.

Version 4.2.2 also improves on a fix for a critical cross-site scripting
vulnerability introduced in 4.2.1.

The release also includes hardening for a potential cross-site scripting
vulnerability when using the Visual editor.

In addition to the security fixes, WordPress 4.2.2 contains fixes for 13 bugs
from 4.2.1, including:

o Fixes an emoji loading error in IE9 and IE10
o Fixes a keyboard shortcut for saving from the Visual editor on Mac
o Fixes oEmbed for YouTube URLs to always expect https
o Fixes how WordPress checks for encoding when sending strings to MySQL
o Fixes a bug with allowing queries to reference tables in the dbname.tablename
  format
o Lowers memory usage for a regex checking for UTF-8 encoding
o Fixes an issue with trying to change the wrong index in the wp_signups table
  on utf8mb4 conversion
o Improves performance of loop detection in _get_term_children()
o Fixes a bug where attachment URLs were incorrectly being forced to use https
  in some contexts
o Fixes a bug where creating a temporary file could end up in an endless loop.

diffstat:

 www/wordpress/Makefile |  4 ++--
 www/wordpress/PLIST    |  5 +----
 www/wordpress/distinfo |  8 ++++----
 3 files changed, 7 insertions(+), 10 deletions(-)

diffs (59 lines):

diff -r 8edbe9b7c6a2 -r 455a9cd2c947 www/wordpress/Makefile
--- a/www/wordpress/Makefile    Sun May 10 19:47:03 2015 +0000
+++ b/www/wordpress/Makefile    Mon May 11 05:16:31 2015 +0000
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.46 2015/05/04 19:48:00 morr Exp $
+# $NetBSD: Makefile,v 1.47 2015/05/11 05:16:31 morr Exp $
 
 DISTNAME=              wordpress-${VERSION}
-VERSION=               4.2.1
+VERSION=               4.2.2
 CATEGORIES=            www
 MASTER_SITES=          http://wordpress.org/
 
diff -r 8edbe9b7c6a2 -r 455a9cd2c947 www/wordpress/PLIST
--- a/www/wordpress/PLIST       Sun May 10 19:47:03 2015 +0000
+++ b/www/wordpress/PLIST       Mon May 11 05:16:31 2015 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.24 2015/05/04 19:48:00 morr Exp $
+@comment $NetBSD: PLIST,v 1.25 2015/05/11 05:16:31 morr Exp $
 share/doc/wordpress/license.txt
 share/doc/wordpress/readme.html
 share/examples/wordpress/wordpress.conf
@@ -482,7 +482,6 @@
 share/wordpress/wp-content/themes/twentyfifteen/genericons/Genericons.woff
 share/wordpress/wp-content/themes/twentyfifteen/genericons/LICENSE.txt
 share/wordpress/wp-content/themes/twentyfifteen/genericons/README.md
-share/wordpress/wp-content/themes/twentyfifteen/genericons/example.html
 share/wordpress/wp-content/themes/twentyfifteen/genericons/genericons.css
 share/wordpress/wp-content/themes/twentyfifteen/header.php
 share/wordpress/wp-content/themes/twentyfifteen/image.php
@@ -531,7 +530,6 @@
 share/wordpress/wp-content/themes/twentyfourteen/genericons/Genericons-Regular.otf
 share/wordpress/wp-content/themes/twentyfourteen/genericons/LICENSE.txt
 share/wordpress/wp-content/themes/twentyfourteen/genericons/README.txt
-share/wordpress/wp-content/themes/twentyfourteen/genericons/example.html
 share/wordpress/wp-content/themes/twentyfourteen/genericons/font/genericons-regular-webfont.eot
 share/wordpress/wp-content/themes/twentyfourteen/genericons/font/genericons-regular-webfont.svg
 share/wordpress/wp-content/themes/twentyfourteen/genericons/font/genericons-regular-webfont.ttf
@@ -593,7 +591,6 @@
 share/wordpress/wp-content/themes/twentythirteen/genericons/Genericons-Regular.otf
 share/wordpress/wp-content/themes/twentythirteen/genericons/LICENSE.txt
 share/wordpress/wp-content/themes/twentythirteen/genericons/README.txt
-share/wordpress/wp-content/themes/twentythirteen/genericons/example.html
 share/wordpress/wp-content/themes/twentythirteen/genericons/font/genericons-regular-webfont.eot
 share/wordpress/wp-content/themes/twentythirteen/genericons/font/genericons-regular-webfont.svg
 share/wordpress/wp-content/themes/twentythirteen/genericons/font/genericons-regular-webfont.ttf
diff -r 8edbe9b7c6a2 -r 455a9cd2c947 www/wordpress/distinfo
--- a/www/wordpress/distinfo    Sun May 10 19:47:03 2015 +0000
+++ b/www/wordpress/distinfo    Mon May 11 05:16:31 2015 +0000
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.38 2015/05/04 19:48:00 morr Exp $
+$NetBSD: distinfo,v 1.39 2015/05/11 05:16:31 morr Exp $
 
-SHA1 (wordpress-4.2.1.tar.gz) = c93a39be9911591b19a94743014be3585df0512f
-RMD160 (wordpress-4.2.1.tar.gz) = 2f81bec9ac2af030f827537916dcbe3fea4d60df
-Size (wordpress-4.2.1.tar.gz) = 6321767 bytes
+SHA1 (wordpress-4.2.2.tar.gz) = d3a70d0f116e6afea5b850f793a81a97d2115039
+RMD160 (wordpress-4.2.2.tar.gz) = 74037a085ec23d815564e22f4990794137a58bec
+Size (wordpress-4.2.2.tar.gz) = 6307937 bytes