CVS commit: [pkgsrc-2012Q2] pkgsrc/www/wordpress

["Matthias Scheler" <tron%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   tron
Date:           Sun Sep  9 16:32:55 UTC 2012

Modified Files:
        pkgsrc/www/wordpress [pkgsrc-2012Q2]: Makefile distinfo

Log Message:
Pullup ticket #3918 - requested by morr
www/wordpress: security update

Revisions pulled up:
- www/wordpress/Makefile                                        1.27
- www/wordpress/distinfo                                        1.22

---
   Module Name: pkgsrc
   Committed By:        morr
   Date:                Sun Sep  9 06:56:10 UTC 2012

   Modified Files:
        pkgsrc/www/wordpress: Makefile distinfo

   Log Message:
   Update to Wordpress 3.4.2.

   Changes:

   * Fixes some issues in the admin area where some older browsers (IE7, in
   particular) may slow down, lag, or freeze.
   * Fixes an issue where a theme may not preview correctly, or its screenshot 
may
   not be displayed.
   * Fixes the use of multiple trackback URLs in a post.
   * Prevents improperly sized images from being uploaded as headers from the
   customizer.
   * Ensures proper error messages can be shown to PHP4 installs. (WordPress
   requires PHP 5.2.4 or later.)
   * Fixes handling of oEmbed providers that only return XML responses.
   * Addresses pagination problems with some category permalink structures.
   * Adds more fields to be returned from the XML-RPC wp.getPost method.
   * Avoids errors when updating automatically from very old versions of 
WordPress
   (pre-3.0).
   * Fixes problems with the visual editor when working with captions.

   Additionally: Version 3.4.2 fixes a few security issues and contains some
   security hardening. These issues were discovered and addressed by the 
WordPress
   security team:

   * Fix unfiltered HTML capabilities in multisite.
   * Fix possible privilege escalation in the Atom Publishing Protocol endpoint.
   * Allow operations on network plugins only through the network admin.
   * Hardening: Simplify error messages when uploads fail.
   * Hardening: Validate a parameter passed to wp_get_object_terms().


To generate a diff of this commit:
cvs rdiff -u -r1.26 -r1.26.2.1 pkgsrc/www/wordpress/Makefile
cvs rdiff -u -r1.21 -r1.21.2.1 pkgsrc/www/wordpress/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.