CVS commit: pkgsrc/www/wordpress

["Daniel Horecki" <morr%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   morr
Date:           Sun May  3 12:00:03 UTC 2020

Modified Files:
        pkgsrc/www/wordpress: Makefile PLIST distinfo

Log Message:
Update to version 5.4.1.

Changes for 5.4:

Too much to include here, visit https://wordpress.org/support/wordpress-version/version-5-4/

Changes for 5.4.1:

Six security issues affect WordPress versions 5.4 and earlier; version 5.4.1 fixes them, so you’ll want to upgrade. If you haven’t yet updated to 5.4, there are also updated versions of 5.3 and 
earlier that fix the security issues.

- Props to Muaz Bin Abdus Sattar and Jannes who both independently reported an issue where password reset tokens were not properly invalidated
- Props to ka1n4t for finding an issue where certain private posts can be viewed unauthenticated
- Props to Evan Ricafort for discovering an XSS issue in the Customizer
- Props to Ben Bidner from the WordPress Security Team who discovered an XSS issue in the search block
- Props to Nick Daugherty from WPVIP.com / WordPress Security Team who discovered an XSS issue in wp-object-cache
- Props to Ronnie Goodrich (Kahoots) and Jason Medeiros who independently reported an XSS issue in file uploads.
- Additionally, an authenticated XSS issue in the block editor was discovered by Nguyen the Duc in WordPress 5.4 RC1 and RC2. It was fixed in 5.4 RC5. We wanted to be sure to give credit and thank 
them for all of their work in making WordPress more secure.

WordPress 5.4.1 also fixes some regressions introduced in version 5.4:

#49838 – Accessibility: Fix the headings hierarchy on the Freedoms page
#49798 – Customize: Give the WordPress logo a white background for dark mode browsers
#49853 – Mail: Make the check for empty post title in wp-mail.php more resilient
#49753 – Media: Remove display: none; from the (visually hidden) <input type="file"> button used in Plupload to select files for uploading. Fixes selecting files in Edge <= 44 and iOS Safari
#49772 – Privacy: Support additional elements (table, ol, ul) in privacy policy guide new styling
#49802 – Privacy: Make the deprecated wp_get_user_request_data() function available on front end
#49645 – REST API: Fix revisions controller get_item permission check
#49648 – REST API: Fix _fields filtering of registered rest fields
#49824 – Site Health: Instantiation prevents use of some hooks by plugins
#49759 – Taxonomy: Un-deprecate category_link and tag_link filters
#49974 – Block Editor updates


To generate a diff of this commit:
cvs rdiff -u -r1.91 -r1.92 pkgsrc/www/wordpress/Makefile
cvs rdiff -u -r1.42 -r1.43 pkgsrc/www/wordpress/PLIST
cvs rdiff -u -r1.73 -r1.74 pkgsrc/www/wordpress/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/wordpress/Makefile
diff -u pkgsrc/www/wordpress/Makefile:1.91 pkgsrc/www/wordpress/Makefile:1.92
--- pkgsrc/www/wordpress/Makefile:1.91  Sun Feb 23 09:59:42 2020
+++ pkgsrc/www/wordpress/Makefile       Sun May  3 12:00:03 2020
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.91 2020/02/23 09:59:42 morr Exp $
+# $NetBSD: Makefile,v 1.92 2020/05/03 12:00:03 morr Exp $
 
 DISTNAME=              wordpress-${VERSION}
-VERSION=               5.3.2
+VERSION=               5.4.1
 CATEGORIES=            www
 MASTER_SITES=          https://wordpress.org/
 

Index: pkgsrc/www/wordpress/PLIST
diff -u pkgsrc/www/wordpress/PLIST:1.42 pkgsrc/www/wordpress/PLIST:1.43
--- pkgsrc/www/wordpress/PLIST:1.42     Sun Feb 23 09:59:42 2020
+++ pkgsrc/www/wordpress/PLIST  Sun May  3 12:00:03 2020
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.42 2020/02/23 09:59:42 morr Exp $
+@comment $NetBSD: PLIST,v 1.43 2020/05/03 12:00:03 morr Exp $
 share/doc/wordpress/license.txt
 share/doc/wordpress/readme.html
 share/examples/wordpress/wordpress.conf
@@ -448,8 +448,6 @@ share/wordpress/wp-admin/js/widgets/text
 share/wordpress/wp-admin/js/widgets/text-widgets.min.js
 share/wordpress/wp-admin/js/word-count.js
 share/wordpress/wp-admin/js/word-count.min.js
-share/wordpress/wp-admin/js/wp-fullscreen-stub.js
-share/wordpress/wp-admin/js/wp-fullscreen-stub.min.js
 share/wordpress/wp-admin/js/xfn.js
 share/wordpress/wp-admin/js/xfn.min.js
 share/wordpress/wp-admin/link-add.php
@@ -561,6 +559,7 @@ share/wordpress/wp-content/plugins/akism
 share/wordpress/wp-content/plugins/akismet/_inc/form.js
 share/wordpress/wp-content/plugins/akismet/_inc/img/logo-full-2x.png
 share/wordpress/wp-content/plugins/akismet/akismet.php
+share/wordpress/wp-content/plugins/akismet/changelog.txt
 share/wordpress/wp-content/plugins/akismet/class.akismet-admin.php
 share/wordpress/wp-content/plugins/akismet/class.akismet-cli.php
 share/wordpress/wp-content/plugins/akismet/class.akismet-rest-api.php
@@ -598,6 +597,7 @@ share/wordpress/wp-content/themes/twenty
 share/wordpress/wp-content/themes/twentynineteen/inc/back-compat.php
 share/wordpress/wp-content/themes/twentynineteen/inc/color-patterns.php
 share/wordpress/wp-content/themes/twentynineteen/inc/customizer.php
+share/wordpress/wp-content/themes/twentynineteen/inc/helper-functions.php
 share/wordpress/wp-content/themes/twentynineteen/inc/icon-functions.php
 share/wordpress/wp-content/themes/twentynineteen/inc/template-functions.php
 share/wordpress/wp-content/themes/twentynineteen/inc/template-tags.php
@@ -731,53 +731,6 @@ share/wordpress/wp-content/themes/twenty
 share/wordpress/wp-content/themes/twentyseventeen/template-parts/post/content-none.php
 share/wordpress/wp-content/themes/twentyseventeen/template-parts/post/content-video.php
 share/wordpress/wp-content/themes/twentyseventeen/template-parts/post/content.php
-share/wordpress/wp-content/themes/twentysixteen/404.php
-share/wordpress/wp-content/themes/twentysixteen/archive.php
-share/wordpress/wp-content/themes/twentysixteen/comments.php
-share/wordpress/wp-content/themes/twentysixteen/css/blocks.css
-share/wordpress/wp-content/themes/twentysixteen/css/editor-blocks.css
-share/wordpress/wp-content/themes/twentysixteen/css/editor-style.css
-share/wordpress/wp-content/themes/twentysixteen/css/ie.css
-share/wordpress/wp-content/themes/twentysixteen/css/ie7.css
-share/wordpress/wp-content/themes/twentysixteen/css/ie8.css
-share/wordpress/wp-content/themes/twentysixteen/footer.php
-share/wordpress/wp-content/themes/twentysixteen/functions.php
-share/wordpress/wp-content/themes/twentysixteen/genericons/COPYING.txt
-share/wordpress/wp-content/themes/twentysixteen/genericons/Genericons.eot
-share/wordpress/wp-content/themes/twentysixteen/genericons/Genericons.svg
-share/wordpress/wp-content/themes/twentysixteen/genericons/Genericons.ttf
-share/wordpress/wp-content/themes/twentysixteen/genericons/Genericons.woff
-share/wordpress/wp-content/themes/twentysixteen/genericons/LICENSE.txt
-share/wordpress/wp-content/themes/twentysixteen/genericons/README.md
-share/wordpress/wp-content/themes/twentysixteen/genericons/genericons.css
-share/wordpress/wp-content/themes/twentysixteen/header.php
-share/wordpress/wp-content/themes/twentysixteen/image.php
-share/wordpress/wp-content/themes/twentysixteen/inc/back-compat.php
-share/wordpress/wp-content/themes/twentysixteen/inc/customizer.php
-share/wordpress/wp-content/themes/twentysixteen/inc/template-tags.php
-share/wordpress/wp-content/themes/twentysixteen/index.php
-share/wordpress/wp-content/themes/twentysixteen/js/color-scheme-control.js
-share/wordpress/wp-content/themes/twentysixteen/js/customize-preview.js
-share/wordpress/wp-content/themes/twentysixteen/js/functions.js
-share/wordpress/wp-content/themes/twentysixteen/js/html5.js
-share/wordpress/wp-content/themes/twentysixteen/js/keyboard-image-navigation.js
-share/wordpress/wp-content/themes/twentysixteen/js/skip-link-focus-fix.js
-share/wordpress/wp-content/themes/twentysixteen/page.php
-share/wordpress/wp-content/themes/twentysixteen/readme.txt
-share/wordpress/wp-content/themes/twentysixteen/rtl.css
-share/wordpress/wp-content/themes/twentysixteen/screenshot.png
-share/wordpress/wp-content/themes/twentysixteen/search.php
-share/wordpress/wp-content/themes/twentysixteen/searchform.php
-share/wordpress/wp-content/themes/twentysixteen/sidebar-content-bottom.php
-share/wordpress/wp-content/themes/twentysixteen/sidebar.php
-share/wordpress/wp-content/themes/twentysixteen/single.php
-share/wordpress/wp-content/themes/twentysixteen/style.css
-share/wordpress/wp-content/themes/twentysixteen/template-parts/biography.php
-share/wordpress/wp-content/themes/twentysixteen/template-parts/content-none.php
-share/wordpress/wp-content/themes/twentysixteen/template-parts/content-page.php
-share/wordpress/wp-content/themes/twentysixteen/template-parts/content-search.php
-share/wordpress/wp-content/themes/twentysixteen/template-parts/content-single.php
-share/wordpress/wp-content/themes/twentysixteen/template-parts/content.php
 share/wordpress/wp-content/themes/twentytwenty/.stylelintrc.json
 share/wordpress/wp-content/themes/twentytwenty/404.php
 share/wordpress/wp-content/themes/twentytwenty/assets/css/editor-style-block-rtl.css
@@ -965,6 +918,7 @@ share/wordpress/wp-includes/Text/Diff/En
 share/wordpress/wp-includes/Text/Diff/Renderer.php
 share/wordpress/wp-includes/Text/Diff/Renderer/inline.php
 share/wordpress/wp-includes/admin-bar.php
+share/wordpress/wp-includes/assets/script-loader-packages.php
 share/wordpress/wp-includes/atomlib.php
 share/wordpress/wp-includes/author-template.php
 share/wordpress/wp-includes/blocks.php
@@ -977,6 +931,9 @@ share/wordpress/wp-includes/blocks/lates
 share/wordpress/wp-includes/blocks/rss.php
 share/wordpress/wp-includes/blocks/search.php
 share/wordpress/wp-includes/blocks/shortcode.php
+share/wordpress/wp-includes/blocks/shortcode/block.json
+share/wordpress/wp-includes/blocks/social-link.php
+share/wordpress/wp-includes/blocks/social-link/block.json
 share/wordpress/wp-includes/blocks/tag-cloud.php
 share/wordpress/wp-includes/bookmark-template.php
 share/wordpress/wp-includes/bookmark.php
@@ -1048,6 +1005,7 @@ share/wordpress/wp-includes/class-wp-met
 share/wordpress/wp-includes/class-wp-metadata-lazyloader.php
 share/wordpress/wp-includes/class-wp-network-query.php
 share/wordpress/wp-includes/class-wp-network.php
+share/wordpress/wp-includes/class-wp-object-cache.php
 share/wordpress/wp-includes/class-wp-oembed-controller.php
 share/wordpress/wp-includes/class-wp-oembed.php
 share/wordpress/wp-includes/class-wp-paused-extensions-storage.php
@@ -1104,6 +1062,10 @@ share/wordpress/wp-includes/css/customiz
 share/wordpress/wp-includes/css/customize-preview.min.css
 share/wordpress/wp-includes/css/dashicons.css
 share/wordpress/wp-includes/css/dashicons.min.css
+share/wordpress/wp-includes/css/dist/block-directory/style-rtl.css
+share/wordpress/wp-includes/css/dist/block-directory/style-rtl.min.css
+share/wordpress/wp-includes/css/dist/block-directory/style.css
+share/wordpress/wp-includes/css/dist/block-directory/style.min.css
 share/wordpress/wp-includes/css/dist/block-editor/style-rtl.css
 share/wordpress/wp-includes/css/dist/block-editor/style-rtl.min.css
 share/wordpress/wp-includes/css/dist/block-editor/style.css
@@ -1357,6 +1319,8 @@ share/wordpress/wp-includes/js/dist/auto
 share/wordpress/wp-includes/js/dist/autop.min.js
 share/wordpress/wp-includes/js/dist/blob.js
 share/wordpress/wp-includes/js/dist/blob.min.js
+share/wordpress/wp-includes/js/dist/block-directory.js
+share/wordpress/wp-includes/js/dist/block-directory.min.js
 share/wordpress/wp-includes/js/dist/block-editor.js
 share/wordpress/wp-includes/js/dist/block-editor.min.js
 share/wordpress/wp-includes/js/dist/block-library.js
@@ -1401,6 +1365,8 @@ share/wordpress/wp-includes/js/dist/i18n
 share/wordpress/wp-includes/js/dist/i18n.min.js
 share/wordpress/wp-includes/js/dist/is-shallow-equal.js
 share/wordpress/wp-includes/js/dist/is-shallow-equal.min.js
+share/wordpress/wp-includes/js/dist/keyboard-shortcuts.js
+share/wordpress/wp-includes/js/dist/keyboard-shortcuts.min.js
 share/wordpress/wp-includes/js/dist/keycodes.js
 share/wordpress/wp-includes/js/dist/keycodes.min.js
 share/wordpress/wp-includes/js/dist/list-reusable-blocks.js
@@ -1413,6 +1379,8 @@ share/wordpress/wp-includes/js/dist/nux.
 share/wordpress/wp-includes/js/dist/nux.min.js
 share/wordpress/wp-includes/js/dist/plugins.js
 share/wordpress/wp-includes/js/dist/plugins.min.js
+share/wordpress/wp-includes/js/dist/primitives.js
+share/wordpress/wp-includes/js/dist/primitives.min.js
 share/wordpress/wp-includes/js/dist/priority-queue.js
 share/wordpress/wp-includes/js/dist/priority-queue.min.js
 share/wordpress/wp-includes/js/dist/redux-routine.js
@@ -1435,6 +1403,8 @@ share/wordpress/wp-includes/js/dist/vend
 share/wordpress/wp-includes/js/dist/vendor/react-dom.min.js
 share/wordpress/wp-includes/js/dist/vendor/react.js
 share/wordpress/wp-includes/js/dist/vendor/react.min.js
+share/wordpress/wp-includes/js/dist/vendor/wp-polyfill-dom-rect.js
+share/wordpress/wp-includes/js/dist/vendor/wp-polyfill-dom-rect.min.js
 share/wordpress/wp-includes/js/dist/vendor/wp-polyfill-element-closest.js
 share/wordpress/wp-includes/js/dist/vendor/wp-polyfill-element-closest.min.js
 share/wordpress/wp-includes/js/dist/vendor/wp-polyfill-fetch.js
@@ -1443,10 +1413,14 @@ share/wordpress/wp-includes/js/dist/vend
 share/wordpress/wp-includes/js/dist/vendor/wp-polyfill-formdata.min.js
 share/wordpress/wp-includes/js/dist/vendor/wp-polyfill-node-contains.js
 share/wordpress/wp-includes/js/dist/vendor/wp-polyfill-node-contains.min.js
+share/wordpress/wp-includes/js/dist/vendor/wp-polyfill-url.js
+share/wordpress/wp-includes/js/dist/vendor/wp-polyfill-url.min.js
 share/wordpress/wp-includes/js/dist/vendor/wp-polyfill.js
 share/wordpress/wp-includes/js/dist/vendor/wp-polyfill.min.js
 share/wordpress/wp-includes/js/dist/viewport.js
 share/wordpress/wp-includes/js/dist/viewport.min.js
+share/wordpress/wp-includes/js/dist/warning.js
+share/wordpress/wp-includes/js/dist/warning.min.js
 share/wordpress/wp-includes/js/dist/wordcount.js
 share/wordpress/wp-includes/js/dist/wordcount.min.js
 share/wordpress/wp-includes/js/heartbeat.js

Index: pkgsrc/www/wordpress/distinfo
diff -u pkgsrc/www/wordpress/distinfo:1.73 pkgsrc/www/wordpress/distinfo:1.74
--- pkgsrc/www/wordpress/distinfo:1.73  Sun Feb 23 09:59:42 2020
+++ pkgsrc/www/wordpress/distinfo       Sun May  3 12:00:03 2020
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.73 2020/02/23 09:59:42 morr Exp $
+$NetBSD: distinfo,v 1.74 2020/05/03 12:00:03 morr Exp $
 
-SHA1 (wordpress-5.3.2.tar.gz) = fded476f112dbab14e3b5acddd2bcfa550e7b01b
-RMD160 (wordpress-5.3.2.tar.gz) = 4385dac6def9eeeb6fccdcc2b247ace9fc354b64
-SHA512 (wordpress-5.3.2.tar.gz) = d766d485d9a6a6efb2b92ffaec2ba1f773e55a6e018759bb6b196469b73db2857c34a3dfca1ac406e2b7066072a35c070c99f24b285a47b050e3d21317785198
-Size (wordpress-5.3.2.tar.gz) = 12389281 bytes
+SHA1 (wordpress-5.4.1.tar.gz) = 9800c231828eb5cd76ba0b8aa6c1a74dfca2daff
+RMD160 (wordpress-5.4.1.tar.gz) = a9708256c6cbd6aab489b335ab70deb85e9d69c7
+SHA512 (wordpress-5.4.1.tar.gz) = 5ed4f3bd593febdf2aec4c582c2ed850d3bf52122273b4306c1fba87939a675228df84092a709052f13e0096b2545cd6f078ab89b232ee4b4dce467d834de0cd
+Size (wordpress-5.4.1.tar.gz) = 12234700 bytes