[pkgsrc/pkgsrc-2017Q3]: pkgsrc/www/wordpress Pullup ticket #5659 - requested ...

[spz <spz%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/a08b9778d0af
branches:  pkgsrc-2017Q3
changeset: 408625:a08b9778d0af
user:      spz <spz%pkgsrc.org@localhost>
date:      Wed Dec 20 18:38:37 2017 +0000

description:
Pullup ticket #5659 - requested by bsiegert
www/wordpress: security update

Revisions pulled up:
- www/wordpress/Makefile                                        1.74
- www/wordpress/PLIST                                           1.36
- www/wordpress/distinfo                                        1.59

-------------------------------------------------------------------
   Module Name: pkgsrc
   Committed By:        morr
   Date:                Sun Dec  3 17:06:37 UTC 2017

   Modified Files:
        pkgsrc/www/wordpress: Makefile PLIST distinfo

   Log Message:
   Update to newest version, 4.9.1

   This version fixes 4 security bugs from earlier versions.

   For details, head to https://codex.wordpress.org/Version_4.9.1
   For 4.9 changes, head to https://codex.wordpress.org/Version_4.9


   To generate a diff of this commit:
   cvs rdiff -u -r1.73 -r1.74 pkgsrc/www/wordpress/Makefile
   cvs rdiff -u -r1.35 -r1.36 pkgsrc/www/wordpress/PLIST
   cvs rdiff -u -r1.58 -r1.59 pkgsrc/www/wordpress/distinfo

diffstat:

 www/wordpress/Makefile |    4 +-
 www/wordpress/PLIST    |  120 +++++++++++++++++++++++++++++++++++-------------
 www/wordpress/distinfo |   10 ++--
 3 files changed, 94 insertions(+), 40 deletions(-)

diffs (truncated from 322 to 300 lines):

diff -r ad1c9dea274b -r a08b9778d0af www/wordpress/Makefile
--- a/www/wordpress/Makefile    Wed Dec 20 16:54:59 2017 +0000
+++ b/www/wordpress/Makefile    Wed Dec 20 18:38:37 2017 +0000
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.72.4.1 2017/11/06 19:41:32 bsiegert Exp $
+# $NetBSD: Makefile,v 1.72.4.2 2017/12/20 18:38:37 spz Exp $
 
 DISTNAME=              wordpress-${VERSION}
-VERSION=               4.8.3
+VERSION=               4.9.1
 CATEGORIES=            www
 MASTER_SITES=          https://wordpress.org/
 
diff -r ad1c9dea274b -r a08b9778d0af www/wordpress/PLIST
--- a/www/wordpress/PLIST       Wed Dec 20 16:54:59 2017 +0000
+++ b/www/wordpress/PLIST       Wed Dec 20 18:38:37 2017 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.34.6.1 2017/11/06 19:41:32 bsiegert Exp $
+@comment $NetBSD: PLIST,v 1.34.6.2 2017/12/20 18:38:37 spz Exp $
 share/doc/wordpress/license.txt
 share/doc/wordpress/readme.html
 share/examples/wordpress/wordpress.conf
@@ -22,6 +22,10 @@
 share/wordpress/wp-admin/css/admin-menu-rtl.min.css
 share/wordpress/wp-admin/css/admin-menu.css
 share/wordpress/wp-admin/css/admin-menu.min.css
+share/wordpress/wp-admin/css/code-editor-rtl.css
+share/wordpress/wp-admin/css/code-editor-rtl.min.css
+share/wordpress/wp-admin/css/code-editor.css
+share/wordpress/wp-admin/css/code-editor.min.css
 share/wordpress/wp-admin/css/color-picker-rtl.css
 share/wordpress/wp-admin/css/color-picker-rtl.min.css
 share/wordpress/wp-admin/css/color-picker.css
@@ -128,14 +132,6 @@
 share/wordpress/wp-admin/css/nav-menus-rtl.min.css
 share/wordpress/wp-admin/css/nav-menus.css
 share/wordpress/wp-admin/css/nav-menus.min.css
-share/wordpress/wp-admin/css/press-this-editor-rtl.css
-share/wordpress/wp-admin/css/press-this-editor-rtl.min.css
-share/wordpress/wp-admin/css/press-this-editor.css
-share/wordpress/wp-admin/css/press-this-editor.min.css
-share/wordpress/wp-admin/css/press-this-rtl.css
-share/wordpress/wp-admin/css/press-this-rtl.min.css
-share/wordpress/wp-admin/css/press-this.css
-share/wordpress/wp-admin/css/press-this.min.css
 share/wordpress/wp-admin/css/revisions-rtl.css
 share/wordpress/wp-admin/css/revisions-rtl.min.css
 share/wordpress/wp-admin/css/revisions.css
@@ -283,7 +279,6 @@
 share/wordpress/wp-admin/includes/class-wp-plugins-list-table.php
 share/wordpress/wp-admin/includes/class-wp-post-comments-list-table.php
 share/wordpress/wp-admin/includes/class-wp-posts-list-table.php
-share/wordpress/wp-admin/includes/class-wp-press-this.php
 share/wordpress/wp-admin/includes/class-wp-screen.php
 share/wordpress/wp-admin/includes/class-wp-site-icon.php
 share/wordpress/wp-admin/includes/class-wp-terms-list-table.php
@@ -337,8 +332,8 @@
 share/wordpress/wp-admin/install.php
 share/wordpress/wp-admin/js/accordion.js
 share/wordpress/wp-admin/js/accordion.min.js
-share/wordpress/wp-admin/js/bookmarklet.js
-share/wordpress/wp-admin/js/bookmarklet.min.js
+share/wordpress/wp-admin/js/code-editor.js
+share/wordpress/wp-admin/js/code-editor.min.js
 share/wordpress/wp-admin/js/color-picker.js
 share/wordpress/wp-admin/js/color-picker.min.js
 share/wordpress/wp-admin/js/comment.js
@@ -392,8 +387,6 @@
 share/wordpress/wp-admin/js/post.min.js
 share/wordpress/wp-admin/js/postbox.js
 share/wordpress/wp-admin/js/postbox.min.js
-share/wordpress/wp-admin/js/press-this.js
-share/wordpress/wp-admin/js/press-this.min.js
 share/wordpress/wp-admin/js/revisions.js
 share/wordpress/wp-admin/js/revisions.min.js
 share/wordpress/wp-admin/js/set-post-thumbnail.js
@@ -406,6 +399,8 @@
 share/wordpress/wp-admin/js/tags-suggest.min.js
 share/wordpress/wp-admin/js/tags.js
 share/wordpress/wp-admin/js/tags.min.js
+share/wordpress/wp-admin/js/theme-plugin-editor.js
+share/wordpress/wp-admin/js/theme-plugin-editor.min.js
 share/wordpress/wp-admin/js/theme.js
 share/wordpress/wp-admin/js/theme.min.js
 share/wordpress/wp-admin/js/updates.js
@@ -416,8 +411,12 @@
 share/wordpress/wp-admin/js/user-suggest.min.js
 share/wordpress/wp-admin/js/widgets.js
 share/wordpress/wp-admin/js/widgets.min.js
+share/wordpress/wp-admin/js/widgets/custom-html-widgets.js
+share/wordpress/wp-admin/js/widgets/custom-html-widgets.min.js
 share/wordpress/wp-admin/js/widgets/media-audio-widget.js
 share/wordpress/wp-admin/js/widgets/media-audio-widget.min.js
+share/wordpress/wp-admin/js/widgets/media-gallery-widget.js
+share/wordpress/wp-admin/js/widgets/media-gallery-widget.min.js
 share/wordpress/wp-admin/js/widgets/media-image-widget.js
 share/wordpress/wp-admin/js/widgets/media-image-widget.min.js
 share/wordpress/wp-admin/js/widgets/media-video-widget.js
@@ -466,6 +465,7 @@
 share/wordpress/wp-admin/network/plugin-editor.php
 share/wordpress/wp-admin/network/plugin-install.php
 share/wordpress/wp-admin/network/plugins.php
+share/wordpress/wp-admin/network/privacy.php
 share/wordpress/wp-admin/network/profile.php
 share/wordpress/wp-admin/network/settings.php
 share/wordpress/wp-admin/network/setup.php
@@ -498,6 +498,7 @@
 share/wordpress/wp-admin/post-new.php
 share/wordpress/wp-admin/post.php
 share/wordpress/wp-admin/press-this.php
+share/wordpress/wp-admin/privacy.php
 share/wordpress/wp-admin/profile.php
 share/wordpress/wp-admin/revision.php
 share/wordpress/wp-admin/setup-config.php
@@ -519,6 +520,7 @@
 share/wordpress/wp-admin/user/freedoms.php
 share/wordpress/wp-admin/user/index.php
 share/wordpress/wp-admin/user/menu.php
+share/wordpress/wp-admin/user/privacy.php
 share/wordpress/wp-admin/user/profile.php
 share/wordpress/wp-admin/user/user-edit.php
 share/wordpress/wp-admin/users.php
@@ -962,9 +964,11 @@
 share/wordpress/wp-includes/customize/class-wp-customize-background-image-control.php
 share/wordpress/wp-includes/customize/class-wp-customize-background-image-setting.php
 share/wordpress/wp-includes/customize/class-wp-customize-background-position-control.php
+share/wordpress/wp-includes/customize/class-wp-customize-code-editor-control.php
 share/wordpress/wp-includes/customize/class-wp-customize-color-control.php
 share/wordpress/wp-includes/customize/class-wp-customize-cropped-image-control.php
 share/wordpress/wp-includes/customize/class-wp-customize-custom-css-setting.php
+share/wordpress/wp-includes/customize/class-wp-customize-date-time-control.php
 share/wordpress/wp-includes/customize/class-wp-customize-filter-setting.php
 share/wordpress/wp-includes/customize/class-wp-customize-header-image-control.php
 share/wordpress/wp-includes/customize/class-wp-customize-header-image-setting.php
@@ -975,6 +979,7 @@
 share/wordpress/wp-includes/customize/class-wp-customize-nav-menu-item-control.php
 share/wordpress/wp-includes/customize/class-wp-customize-nav-menu-item-setting.php
 share/wordpress/wp-includes/customize/class-wp-customize-nav-menu-location-control.php
+share/wordpress/wp-includes/customize/class-wp-customize-nav-menu-locations-control.php
 share/wordpress/wp-includes/customize/class-wp-customize-nav-menu-name-control.php
 share/wordpress/wp-includes/customize/class-wp-customize-nav-menu-section.php
 share/wordpress/wp-includes/customize/class-wp-customize-nav-menu-setting.php
@@ -986,6 +991,7 @@
 share/wordpress/wp-includes/customize/class-wp-customize-sidebar-section.php
 share/wordpress/wp-includes/customize/class-wp-customize-site-icon-control.php
 share/wordpress/wp-includes/customize/class-wp-customize-theme-control.php
+share/wordpress/wp-includes/customize/class-wp-customize-themes-panel.php
 share/wordpress/wp-includes/customize/class-wp-customize-themes-section.php
 share/wordpress/wp-includes/customize/class-wp-customize-upload-control.php
 share/wordpress/wp-includes/customize/class-wp-widget-area-customize-control.php
@@ -1088,9 +1094,18 @@
 share/wordpress/wp-includes/images/xit.gif
 share/wordpress/wp-includes/js/admin-bar.js
 share/wordpress/wp-includes/js/admin-bar.min.js
+share/wordpress/wp-includes/js/api-request.js
+share/wordpress/wp-includes/js/api-request.min.js
 share/wordpress/wp-includes/js/autosave.js
 share/wordpress/wp-includes/js/autosave.min.js
 share/wordpress/wp-includes/js/backbone.min.js
+share/wordpress/wp-includes/js/codemirror/codemirror.min.css
+share/wordpress/wp-includes/js/codemirror/codemirror.min.js
+share/wordpress/wp-includes/js/codemirror/csslint.js
+share/wordpress/wp-includes/js/codemirror/htmlhint-kses.js
+share/wordpress/wp-includes/js/codemirror/htmlhint.js
+share/wordpress/wp-includes/js/codemirror/jshint.js
+share/wordpress/wp-includes/js/codemirror/jsonlint.js
 share/wordpress/wp-includes/js/colorpicker.js
 share/wordpress/wp-includes/js/colorpicker.min.js
 share/wordpress/wp-includes/js/comment-reply.js
@@ -1197,19 +1212,54 @@
 share/wordpress/wp-includes/js/media-models.min.js
 share/wordpress/wp-includes/js/media-views.js
 share/wordpress/wp-includes/js/media-views.min.js
-share/wordpress/wp-includes/js/mediaelement/background.png
-share/wordpress/wp-includes/js/mediaelement/bigplay.png
-share/wordpress/wp-includes/js/mediaelement/bigplay.svg
-share/wordpress/wp-includes/js/mediaelement/controls.png
-share/wordpress/wp-includes/js/mediaelement/controls.svg
-share/wordpress/wp-includes/js/mediaelement/flashmediaelement.swf
-share/wordpress/wp-includes/js/mediaelement/froogaloop.min.js
-share/wordpress/wp-includes/js/mediaelement/jumpforward.png
-share/wordpress/wp-includes/js/mediaelement/loading.gif
+share/wordpress/wp-includes/js/mediaelement/lang/ca.js
+share/wordpress/wp-includes/js/mediaelement/lang/cs.js
+share/wordpress/wp-includes/js/mediaelement/lang/de.js
+share/wordpress/wp-includes/js/mediaelement/lang/es.js
+share/wordpress/wp-includes/js/mediaelement/lang/fa.js
+share/wordpress/wp-includes/js/mediaelement/lang/fr.js
+share/wordpress/wp-includes/js/mediaelement/lang/hr.js
+share/wordpress/wp-includes/js/mediaelement/lang/hu.js
+share/wordpress/wp-includes/js/mediaelement/lang/it.js
+share/wordpress/wp-includes/js/mediaelement/lang/ja.js
+share/wordpress/wp-includes/js/mediaelement/lang/ko.js
+share/wordpress/wp-includes/js/mediaelement/lang/nl.js
+share/wordpress/wp-includes/js/mediaelement/lang/pl.js
+share/wordpress/wp-includes/js/mediaelement/lang/pt.js
+share/wordpress/wp-includes/js/mediaelement/lang/ro.js
+share/wordpress/wp-includes/js/mediaelement/lang/ru.js
+share/wordpress/wp-includes/js/mediaelement/lang/sk.js
+share/wordpress/wp-includes/js/mediaelement/lang/sv.js
+share/wordpress/wp-includes/js/mediaelement/lang/uk.js
+share/wordpress/wp-includes/js/mediaelement/lang/zh-cn.js
+share/wordpress/wp-includes/js/mediaelement/lang/zh.js
+share/wordpress/wp-includes/js/mediaelement/mediaelement-and-player.js
 share/wordpress/wp-includes/js/mediaelement/mediaelement-and-player.min.js
+share/wordpress/wp-includes/js/mediaelement/mediaelement-flash-audio-ogg.swf
+share/wordpress/wp-includes/js/mediaelement/mediaelement-flash-audio.swf
+share/wordpress/wp-includes/js/mediaelement/mediaelement-flash-video-hls.swf
+share/wordpress/wp-includes/js/mediaelement/mediaelement-flash-video-mdash.swf
+share/wordpress/wp-includes/js/mediaelement/mediaelement-flash-video.swf
+share/wordpress/wp-includes/js/mediaelement/mediaelement-migrate.js
+share/wordpress/wp-includes/js/mediaelement/mediaelement-migrate.min.js
+share/wordpress/wp-includes/js/mediaelement/mediaelement.js
+share/wordpress/wp-includes/js/mediaelement/mediaelement.min.js
+share/wordpress/wp-includes/js/mediaelement/mediaelementplayer-legacy.css
+share/wordpress/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css
+share/wordpress/wp-includes/js/mediaelement/mediaelementplayer.css
 share/wordpress/wp-includes/js/mediaelement/mediaelementplayer.min.css
-share/wordpress/wp-includes/js/mediaelement/silverlightmediaelement.xap
-share/wordpress/wp-includes/js/mediaelement/skipback.png
+share/wordpress/wp-includes/js/mediaelement/mejs-controls.png
+share/wordpress/wp-includes/js/mediaelement/mejs-controls.svg
+share/wordpress/wp-includes/js/mediaelement/renderers/dailymotion.js
+share/wordpress/wp-includes/js/mediaelement/renderers/dailymotion.min.js
+share/wordpress/wp-includes/js/mediaelement/renderers/facebook.js
+share/wordpress/wp-includes/js/mediaelement/renderers/facebook.min.js
+share/wordpress/wp-includes/js/mediaelement/renderers/soundcloud.js
+share/wordpress/wp-includes/js/mediaelement/renderers/soundcloud.min.js
+share/wordpress/wp-includes/js/mediaelement/renderers/twitch.js
+share/wordpress/wp-includes/js/mediaelement/renderers/twitch.min.js
+share/wordpress/wp-includes/js/mediaelement/renderers/vimeo.js
+share/wordpress/wp-includes/js/mediaelement/renderers/vimeo.min.js
 share/wordpress/wp-includes/js/mediaelement/wp-mediaelement.css
 share/wordpress/wp-includes/js/mediaelement/wp-mediaelement.js
 share/wordpress/wp-includes/js/mediaelement/wp-mediaelement.min.css
@@ -1219,9 +1269,10 @@
 share/wordpress/wp-includes/js/plupload/handlers.js
 share/wordpress/wp-includes/js/plupload/handlers.min.js
 share/wordpress/wp-includes/js/plupload/license.txt
-share/wordpress/wp-includes/js/plupload/plupload.flash.swf
-share/wordpress/wp-includes/js/plupload/plupload.full.min.js
-share/wordpress/wp-includes/js/plupload/plupload.silverlight.xap
+share/wordpress/wp-includes/js/plupload/moxie.js
+share/wordpress/wp-includes/js/plupload/moxie.min.js
+share/wordpress/wp-includes/js/plupload/plupload.js
+share/wordpress/wp-includes/js/plupload/plupload.min.js
 share/wordpress/wp-includes/js/plupload/wp-plupload.js
 share/wordpress/wp-includes/js/plupload/wp-plupload.min.js
 share/wordpress/wp-includes/js/quicktags.js
@@ -1232,12 +1283,7 @@
 share/wordpress/wp-includes/js/swfupload/handlers.js
 share/wordpress/wp-includes/js/swfupload/handlers.min.js
 share/wordpress/wp-includes/js/swfupload/license.txt
-share/wordpress/wp-includes/js/swfupload/plugins/swfupload.cookies.js
-share/wordpress/wp-includes/js/swfupload/plugins/swfupload.queue.js
-share/wordpress/wp-includes/js/swfupload/plugins/swfupload.speed.js
-share/wordpress/wp-includes/js/swfupload/plugins/swfupload.swfobject.js
 share/wordpress/wp-includes/js/swfupload/swfupload.js
-share/wordpress/wp-includes/js/swfupload/swfupload.swf
 share/wordpress/wp-includes/js/thickbox/loadingAnimation.gif
 share/wordpress/wp-includes/js/thickbox/macFFBgHack.png
 share/wordpress/wp-includes/js/thickbox/thickbox.css
@@ -1259,6 +1305,8 @@
 share/wordpress/wp-includes/js/tinymce/plugins/hr/plugin.min.js
 share/wordpress/wp-includes/js/tinymce/plugins/image/plugin.js
 share/wordpress/wp-includes/js/tinymce/plugins/image/plugin.min.js
+share/wordpress/wp-includes/js/tinymce/plugins/link/plugin.js
+share/wordpress/wp-includes/js/tinymce/plugins/link/plugin.min.js
 share/wordpress/wp-includes/js/tinymce/plugins/lists/plugin.js
 share/wordpress/wp-includes/js/tinymce/plugins/lists/plugin.min.js
 share/wordpress/wp-includes/js/tinymce/plugins/media/plugin.js
@@ -1362,6 +1410,8 @@
 share/wordpress/wp-includes/js/wp-lists.min.js
 share/wordpress/wp-includes/js/wp-pointer.js
 share/wordpress/wp-includes/js/wp-pointer.min.js
+share/wordpress/wp-includes/js/wp-sanitize.js
+share/wordpress/wp-includes/js/wp-sanitize.min.js
 share/wordpress/wp-includes/js/wp-util.js
 share/wordpress/wp-includes/js/wp-util.min.js
 share/wordpress/wp-includes/js/wpdialog.js
@@ -1395,6 +1445,7 @@
 share/wordpress/wp-includes/plugin.php
 share/wordpress/wp-includes/pomo/entry.php
 share/wordpress/wp-includes/pomo/mo.php
+share/wordpress/wp-includes/pomo/plural-forms.php
 share/wordpress/wp-includes/pomo/po.php
 share/wordpress/wp-includes/pomo/streams.php
 share/wordpress/wp-includes/pomo/translations.php
@@ -1443,6 +1494,7 @@
 share/wordpress/wp-includes/script-loader.php
 share/wordpress/wp-includes/session.php
 share/wordpress/wp-includes/shortcodes.php
+share/wordpress/wp-includes/spl-autoload-compat.php
 share/wordpress/wp-includes/taxonomy.php
 share/wordpress/wp-includes/template-loader.php
 share/wordpress/wp-includes/template.php
@@ -1465,8 +1517,10 @@
 share/wordpress/wp-includes/widgets/class-wp-widget-archives.php
 share/wordpress/wp-includes/widgets/class-wp-widget-calendar.php
 share/wordpress/wp-includes/widgets/class-wp-widget-categories.php