CVS commit: [pkgsrc-2017Q1] pkgsrc/www/wordpress

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Wed Jun 21 18:52:40 UTC 2017

Modified Files:
        pkgsrc/www/wordpress [pkgsrc-2017Q1]: Makefile PLIST distinfo

Log Message:
Pullup ticket #5487 - requested by sevan
www/wordpress: security fix

Revisions pulled up:
- www/wordpress/Makefile                                        1.68-1.69
- www/wordpress/PLIST                                           1.34
- www/wordpress/distinfo                                        1.54-1.55

---
   Module Name:    pkgsrc
   Committed By:   jklos
   Date:           Tue May 30 07:20:15 UTC 2017

   Modified Files:
           pkgsrc/www/wordpress: Makefile distinfo

   Log Message:
   Security update 4.7.5. Bugs fixed:

   Insufficient redirect validation in the HTTP class. Reported by Ronni
   Skansing.
   Improper handling of post meta data values in the XML-RPC API. Reported by
   Sam Thomas.
   Lack of capability checks for post meta data in the XML-RPC API. Reported
   by Ben Bidner of the WordPress Security Team.
   A Cross Site Request Forgery (CSRF)  vulnerability was discovered in the
   filesystem credentials dialog. Reported by Yorick Koster.
   A cross-site scripting (XSS) vulnerability was discovered when attempting
   to upload very large files. Reported by Ronni Skansing.
   A cross-site scripting (XSS) vulnerability was discovered related to the
   Customizer. Reported by Weston Ruter of the WordPress Security Team.

---
   Module Name:    pkgsrc
   Committed By:   morr
   Date:           Sun Jun 18 18:01:42 UTC 2017

   Modified Files:
           pkgsrc/www/wordpress: Makefile PLIST distinfo

   Log Message:
   Update to newest version 4.8.

   For changes, check https://codex.wordpress.org/Version_4.8.


To generate a diff of this commit:
cvs rdiff -u -r1.64 -r1.64.2.1 pkgsrc/www/wordpress/Makefile
cvs rdiff -u -r1.33 -r1.33.2.1 pkgsrc/www/wordpress/PLIST
cvs rdiff -u -r1.53 -r1.53.2.1 pkgsrc/www/wordpress/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/wordpress/Makefile
diff -u pkgsrc/www/wordpress/Makefile:1.64 pkgsrc/www/wordpress/Makefile:1.64.2.1
--- pkgsrc/www/wordpress/Makefile:1.64  Sun Mar 12 07:20:52 2017
+++ pkgsrc/www/wordpress/Makefile       Wed Jun 21 18:52:40 2017
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.64 2017/03/12 07:20:52 maya Exp $
+# $NetBSD: Makefile,v 1.64.2.1 2017/06/21 18:52:40 bsiegert Exp $
 
 DISTNAME=              wordpress-${VERSION}
-VERSION=               4.7.3
-PKGREVISION=           1
+VERSION=               4.8
 CATEGORIES=            www
 MASTER_SITES=          http://wordpress.org/
 

Index: pkgsrc/www/wordpress/PLIST
diff -u pkgsrc/www/wordpress/PLIST:1.33 pkgsrc/www/wordpress/PLIST:1.33.2.1
--- pkgsrc/www/wordpress/PLIST:1.33     Tue Mar  7 17:39:13 2017
+++ pkgsrc/www/wordpress/PLIST  Wed Jun 21 18:52:40 2017
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.33 2017/03/07 17:39:13 morr Exp $
+@comment $NetBSD: PLIST,v 1.33.2.1 2017/06/21 18:52:40 bsiegert Exp $
 share/doc/wordpress/license.txt
 share/doc/wordpress/readme.html
 share/examples/wordpress/wordpress.conf
@@ -264,6 +264,7 @@ share/wordpress/wp-admin/includes/class-
 share/wordpress/wp-admin/includes/class-wp-ajax-upgrader-skin.php
 share/wordpress/wp-admin/includes/class-wp-automatic-updater.php
 share/wordpress/wp-admin/includes/class-wp-comments-list-table.php
+share/wordpress/wp-admin/includes/class-wp-community-events.php
 share/wordpress/wp-admin/includes/class-wp-filesystem-base.php
 share/wordpress/wp-admin/includes/class-wp-filesystem-direct.php
 share/wordpress/wp-admin/includes/class-wp-filesystem-ftpext.php
@@ -415,6 +416,16 @@ share/wordpress/wp-admin/js/user-suggest
 share/wordpress/wp-admin/js/user-suggest.min.js
 share/wordpress/wp-admin/js/widgets.js
 share/wordpress/wp-admin/js/widgets.min.js
+share/wordpress/wp-admin/js/widgets/media-audio-widget.js
+share/wordpress/wp-admin/js/widgets/media-audio-widget.min.js
+share/wordpress/wp-admin/js/widgets/media-image-widget.js
+share/wordpress/wp-admin/js/widgets/media-image-widget.min.js
+share/wordpress/wp-admin/js/widgets/media-video-widget.js
+share/wordpress/wp-admin/js/widgets/media-video-widget.min.js
+share/wordpress/wp-admin/js/widgets/media-widgets.js
+share/wordpress/wp-admin/js/widgets/media-widgets.min.js
+share/wordpress/wp-admin/js/widgets/text-widgets.js
+share/wordpress/wp-admin/js/widgets/text-widgets.min.js
 share/wordpress/wp-admin/js/word-count.js
 share/wordpress/wp-admin/js/word-count.min.js
 share/wordpress/wp-admin/js/wp-fullscreen-stub.js
@@ -1249,7 +1260,6 @@ share/wordpress/wp-includes/js/tinymce/p
 share/wordpress/wp-includes/js/tinymce/plugins/image/plugin.min.js
 share/wordpress/wp-includes/js/tinymce/plugins/lists/plugin.js
 share/wordpress/wp-includes/js/tinymce/plugins/lists/plugin.min.js
-share/wordpress/wp-includes/js/tinymce/plugins/media/moxieplayer.swf
 share/wordpress/wp-includes/js/tinymce/plugins/media/plugin.js
 share/wordpress/wp-includes/js/tinymce/plugins/media/plugin.min.js
 share/wordpress/wp-includes/js/tinymce/plugins/paste/plugin.js
@@ -1266,8 +1276,6 @@ share/wordpress/wp-includes/js/tinymce/p
 share/wordpress/wp-includes/js/tinymce/plugins/wpdialogs/plugin.min.js
 share/wordpress/wp-includes/js/tinymce/plugins/wpeditimage/plugin.js
 share/wordpress/wp-includes/js/tinymce/plugins/wpeditimage/plugin.min.js
-share/wordpress/wp-includes/js/tinymce/plugins/wpembed/plugin.js
-share/wordpress/wp-includes/js/tinymce/plugins/wpembed/plugin.min.js
 share/wordpress/wp-includes/js/tinymce/plugins/wpemoji/plugin.js
 share/wordpress/wp-includes/js/tinymce/plugins/wpemoji/plugin.min.js
 share/wordpress/wp-includes/js/tinymce/plugins/wpgallery/plugin.js
@@ -1280,14 +1288,11 @@ share/wordpress/wp-includes/js/tinymce/p
 share/wordpress/wp-includes/js/tinymce/plugins/wpview/plugin.min.js
 share/wordpress/wp-includes/js/tinymce/skins/lightgray/content.inline.min.css
 share/wordpress/wp-includes/js/tinymce/skins/lightgray/content.min.css
-share/wordpress/wp-includes/js/tinymce/skins/lightgray/fonts/readme.md
 share/wordpress/wp-includes/js/tinymce/skins/lightgray/fonts/tinymce-small.eot
-share/wordpress/wp-includes/js/tinymce/skins/lightgray/fonts/tinymce-small.json
 share/wordpress/wp-includes/js/tinymce/skins/lightgray/fonts/tinymce-small.svg
 share/wordpress/wp-includes/js/tinymce/skins/lightgray/fonts/tinymce-small.ttf
 share/wordpress/wp-includes/js/tinymce/skins/lightgray/fonts/tinymce-small.woff
 share/wordpress/wp-includes/js/tinymce/skins/lightgray/fonts/tinymce.eot
-share/wordpress/wp-includes/js/tinymce/skins/lightgray/fonts/tinymce.json
 share/wordpress/wp-includes/js/tinymce/skins/lightgray/fonts/tinymce.svg
 share/wordpress/wp-includes/js/tinymce/skins/lightgray/fonts/tinymce.ttf
 share/wordpress/wp-includes/js/tinymce/skins/lightgray/fonts/tinymce.woff
@@ -1295,7 +1300,6 @@ share/wordpress/wp-includes/js/tinymce/s
 share/wordpress/wp-includes/js/tinymce/skins/lightgray/img/loader.gif
 share/wordpress/wp-includes/js/tinymce/skins/lightgray/img/object.gif
 share/wordpress/wp-includes/js/tinymce/skins/lightgray/img/trans.gif
-share/wordpress/wp-includes/js/tinymce/skins/lightgray/skin.ie7.min.css
 share/wordpress/wp-includes/js/tinymce/skins/lightgray/skin.min.css
 share/wordpress/wp-includes/js/tinymce/skins/wordpress/images/audio.png
 share/wordpress/wp-includes/js/tinymce/skins/wordpress/images/dashicon-edit.png
@@ -1461,6 +1465,10 @@ share/wordpress/wp-includes/widgets/clas
 share/wordpress/wp-includes/widgets/class-wp-widget-calendar.php
 share/wordpress/wp-includes/widgets/class-wp-widget-categories.php
 share/wordpress/wp-includes/widgets/class-wp-widget-links.php
+share/wordpress/wp-includes/widgets/class-wp-widget-media-audio.php
+share/wordpress/wp-includes/widgets/class-wp-widget-media-image.php
+share/wordpress/wp-includes/widgets/class-wp-widget-media-video.php
+share/wordpress/wp-includes/widgets/class-wp-widget-media.php
 share/wordpress/wp-includes/widgets/class-wp-widget-meta.php
 share/wordpress/wp-includes/widgets/class-wp-widget-pages.php
 share/wordpress/wp-includes/widgets/class-wp-widget-recent-comments.php

Index: pkgsrc/www/wordpress/distinfo
diff -u pkgsrc/www/wordpress/distinfo:1.53 pkgsrc/www/wordpress/distinfo:1.53.2.1
--- pkgsrc/www/wordpress/distinfo:1.53  Tue Mar  7 17:39:13 2017
+++ pkgsrc/www/wordpress/distinfo       Wed Jun 21 18:52:40 2017
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.53 2017/03/07 17:39:13 morr Exp $
+$NetBSD: distinfo,v 1.53.2.1 2017/06/21 18:52:40 bsiegert Exp $
 
-SHA1 (wordpress-4.7.3.tar.gz) = 35adcd8162eae00d5bc37f35344fdc06b22ffc98
-RMD160 (wordpress-4.7.3.tar.gz) = 5030cb6bc1f54bfdd1f81033c44ac3991e016d63
-SHA512 (wordpress-4.7.3.tar.gz) = 071df65c3a43557faf351838a661a83e26d8de37c8633dc17a59d773cc91caef640a625b0719606df1fc563fd18af71ba1da22a5b6f345339e73761754484dc5
-Size (wordpress-4.7.3.tar.gz) = 8008833 bytes
+SHA1 (wordpress-4.8.tar.gz) = 3738189a1f37a03fb9cb087160b457d7a641ccb4
+RMD160 (wordpress-4.8.tar.gz) = b12e449362cba8dfa114fc8e2883bc5bda87b874
+SHA512 (wordpress-4.8.tar.gz) = 20249cf13dbcec198df3ec1feb3a7381c194c7c9f832262e40449f90c5e5b5d3f4b63b6021e78c65cc615e059b1b601881d33ce03e1e4618231329b680511467
+Size (wordpress-4.8.tar.gz) = 8169865 bytes