[pkgsrc/pkgsrc-2017Q1]: pkgsrc/www/wordpress Pullup ticket #5487 - requested ...

To: pkgsrc-changes-hg%NetBSD.org@localhost
Subject: [pkgsrc/pkgsrc-2017Q1]: pkgsrc/www/wordpress Pullup ticket #5487 - requested ...
From: bsiegert <bsiegert%pkgsrc.org@localhost>
Date: Wed, 15 Jan 2020 06:56:01 +0000
details:   https://anonhg.NetBSD.org/pkgsrc/rev/40a3fe5e6610
branches:  pkgsrc-2017Q1
changeset: 360432:40a3fe5e6610
user:      bsiegert <bsiegert%pkgsrc.org@localhost>
date:      Wed Jun 21 18:52:40 2017 +0000

description:
Pullup ticket #5487 - requested by sevan
www/wordpress: security fix

Revisions pulled up:
- www/wordpress/Makefile                                        1.68-1.69
- www/wordpress/PLIST                                           1.34
- www/wordpress/distinfo                                        1.54-1.55

---
   Module Name:    pkgsrc
   Committed By:   jklos
   Date:           Tue May 30 07:20:15 UTC 2017

   Modified Files:
           pkgsrc/www/wordpress: Makefile distinfo

   Log Message:
   Security update 4.7.5. Bugs fixed:

   Insufficient redirect validation in the HTTP class. Reported by Ronni
   Skansing.
   Improper handling of post meta data values in the XML-RPC API. Reported by
   Sam Thomas.
   Lack of capability checks for post meta data in the XML-RPC API. Reported
   by Ben Bidner of the WordPress Security Team.
   A Cross Site Request Forgery (CSRF)  vulnerability was discovered in the
   filesystem credentials dialog. Reported by Yorick Koster.
   A cross-site scripting (XSS) vulnerability was discovered when attempting
   to upload very large files. Reported by Ronni Skansing.
   A cross-site scripting (XSS) vulnerability was discovered related to the
   Customizer. Reported by Weston Ruter of the WordPress Security Team.

---
   Module Name:    pkgsrc
   Committed By:   morr
   Date:           Sun Jun 18 18:01:42 UTC 2017

   Modified Files:
           pkgsrc/www/wordpress: Makefile PLIST distinfo

   Log Message:
   Update to newest version 4.8.

   For changes, check https://codex.wordpress.org/Version_4.8.

diffstat:

 www/wordpress/Makefile |   5 ++---
 www/wordpress/PLIST    |  24 ++++++++++++++++--------
 www/wordpress/distinfo |  10 +++++-----
 3 files changed, 23 insertions(+), 16 deletions(-)

diffs (114 lines):

diff -r e4a9bf728f03 -r 40a3fe5e6610 www/wordpress/Makefile
--- a/www/wordpress/Makefile    Wed Jun 21 18:51:30 2017 +0000
+++ b/www/wordpress/Makefile    Wed Jun 21 18:52:40 2017 +0000
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.64 2017/03/12 07:20:52 maya Exp $
+# $NetBSD: Makefile,v 1.64.2.1 2017/06/21 18:52:40 bsiegert Exp $
 
 DISTNAME=              wordpress-${VERSION}
-VERSION=               4.7.3
-PKGREVISION=           1
+VERSION=               4.8
 CATEGORIES=            www
 MASTER_SITES=          http://wordpress.org/
 
diff -r e4a9bf728f03 -r 40a3fe5e6610 www/wordpress/PLIST
--- a/www/wordpress/PLIST       Wed Jun 21 18:51:30 2017 +0000
+++ b/www/wordpress/PLIST       Wed Jun 21 18:52:40 2017 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.33 2017/03/07 17:39:13 morr Exp $
+@comment $NetBSD: PLIST,v 1.33.2.1 2017/06/21 18:52:40 bsiegert Exp $
 share/doc/wordpress/license.txt
 share/doc/wordpress/readme.html
 share/examples/wordpress/wordpress.conf
@@ -264,6 +264,7 @@
 share/wordpress/wp-admin/includes/class-wp-ajax-upgrader-skin.php
 share/wordpress/wp-admin/includes/class-wp-automatic-updater.php
 share/wordpress/wp-admin/includes/class-wp-comments-list-table.php
+share/wordpress/wp-admin/includes/class-wp-community-events.php
 share/wordpress/wp-admin/includes/class-wp-filesystem-base.php
 share/wordpress/wp-admin/includes/class-wp-filesystem-direct.php
 share/wordpress/wp-admin/includes/class-wp-filesystem-ftpext.php
@@ -415,6 +416,16 @@
 share/wordpress/wp-admin/js/user-suggest.min.js
 share/wordpress/wp-admin/js/widgets.js
 share/wordpress/wp-admin/js/widgets.min.js
+share/wordpress/wp-admin/js/widgets/media-audio-widget.js
+share/wordpress/wp-admin/js/widgets/media-audio-widget.min.js
+share/wordpress/wp-admin/js/widgets/media-image-widget.js
+share/wordpress/wp-admin/js/widgets/media-image-widget.min.js
+share/wordpress/wp-admin/js/widgets/media-video-widget.js
+share/wordpress/wp-admin/js/widgets/media-video-widget.min.js
+share/wordpress/wp-admin/js/widgets/media-widgets.js
+share/wordpress/wp-admin/js/widgets/media-widgets.min.js
+share/wordpress/wp-admin/js/widgets/text-widgets.js
+share/wordpress/wp-admin/js/widgets/text-widgets.min.js
 share/wordpress/wp-admin/js/word-count.js
 share/wordpress/wp-admin/js/word-count.min.js
 share/wordpress/wp-admin/js/wp-fullscreen-stub.js
@@ -1249,7 +1260,6 @@
 share/wordpress/wp-includes/js/tinymce/plugins/image/plugin.min.js
 share/wordpress/wp-includes/js/tinymce/plugins/lists/plugin.js
 share/wordpress/wp-includes/js/tinymce/plugins/lists/plugin.min.js
-share/wordpress/wp-includes/js/tinymce/plugins/media/moxieplayer.swf
 share/wordpress/wp-includes/js/tinymce/plugins/media/plugin.js
 share/wordpress/wp-includes/js/tinymce/plugins/media/plugin.min.js
 share/wordpress/wp-includes/js/tinymce/plugins/paste/plugin.js
@@ -1266,8 +1276,6 @@
 share/wordpress/wp-includes/js/tinymce/plugins/wpdialogs/plugin.min.js
 share/wordpress/wp-includes/js/tinymce/plugins/wpeditimage/plugin.js
 share/wordpress/wp-includes/js/tinymce/plugins/wpeditimage/plugin.min.js
-share/wordpress/wp-includes/js/tinymce/plugins/wpembed/plugin.js
-share/wordpress/wp-includes/js/tinymce/plugins/wpembed/plugin.min.js
 share/wordpress/wp-includes/js/tinymce/plugins/wpemoji/plugin.js
 share/wordpress/wp-includes/js/tinymce/plugins/wpemoji/plugin.min.js
 share/wordpress/wp-includes/js/tinymce/plugins/wpgallery/plugin.js
@@ -1280,14 +1288,11 @@
 share/wordpress/wp-includes/js/tinymce/plugins/wpview/plugin.min.js
 share/wordpress/wp-includes/js/tinymce/skins/lightgray/content.inline.min.css
 share/wordpress/wp-includes/js/tinymce/skins/lightgray/content.min.css
-share/wordpress/wp-includes/js/tinymce/skins/lightgray/fonts/readme.md
 share/wordpress/wp-includes/js/tinymce/skins/lightgray/fonts/tinymce-small.eot
-share/wordpress/wp-includes/js/tinymce/skins/lightgray/fonts/tinymce-small.json
 share/wordpress/wp-includes/js/tinymce/skins/lightgray/fonts/tinymce-small.svg
 share/wordpress/wp-includes/js/tinymce/skins/lightgray/fonts/tinymce-small.ttf
 share/wordpress/wp-includes/js/tinymce/skins/lightgray/fonts/tinymce-small.woff
 share/wordpress/wp-includes/js/tinymce/skins/lightgray/fonts/tinymce.eot
-share/wordpress/wp-includes/js/tinymce/skins/lightgray/fonts/tinymce.json
 share/wordpress/wp-includes/js/tinymce/skins/lightgray/fonts/tinymce.svg
 share/wordpress/wp-includes/js/tinymce/skins/lightgray/fonts/tinymce.ttf
 share/wordpress/wp-includes/js/tinymce/skins/lightgray/fonts/tinymce.woff
@@ -1295,7 +1300,6 @@
 share/wordpress/wp-includes/js/tinymce/skins/lightgray/img/loader.gif
 share/wordpress/wp-includes/js/tinymce/skins/lightgray/img/object.gif
 share/wordpress/wp-includes/js/tinymce/skins/lightgray/img/trans.gif
-share/wordpress/wp-includes/js/tinymce/skins/lightgray/skin.ie7.min.css
 share/wordpress/wp-includes/js/tinymce/skins/lightgray/skin.min.css
 share/wordpress/wp-includes/js/tinymce/skins/wordpress/images/audio.png
 share/wordpress/wp-includes/js/tinymce/skins/wordpress/images/dashicon-edit.png
@@ -1461,6 +1465,10 @@
 share/wordpress/wp-includes/widgets/class-wp-widget-calendar.php
 share/wordpress/wp-includes/widgets/class-wp-widget-categories.php
 share/wordpress/wp-includes/widgets/class-wp-widget-links.php
+share/wordpress/wp-includes/widgets/class-wp-widget-media-audio.php
+share/wordpress/wp-includes/widgets/class-wp-widget-media-image.php
+share/wordpress/wp-includes/widgets/class-wp-widget-media-video.php
+share/wordpress/wp-includes/widgets/class-wp-widget-media.php
 share/wordpress/wp-includes/widgets/class-wp-widget-meta.php
 share/wordpress/wp-includes/widgets/class-wp-widget-pages.php
 share/wordpress/wp-includes/widgets/class-wp-widget-recent-comments.php
diff -r e4a9bf728f03 -r 40a3fe5e6610 www/wordpress/distinfo
--- a/www/wordpress/distinfo    Wed Jun 21 18:51:30 2017 +0000
+++ b/www/wordpress/distinfo    Wed Jun 21 18:52:40 2017 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.53 2017/03/07 17:39:13 morr Exp $
+$NetBSD: distinfo,v 1.53.2.1 2017/06/21 18:52:40 bsiegert Exp $
 
-SHA1 (wordpress-4.7.3.tar.gz) = 35adcd8162eae00d5bc37f35344fdc06b22ffc98
-RMD160 (wordpress-4.7.3.tar.gz) = 5030cb6bc1f54bfdd1f81033c44ac3991e016d63
-SHA512 (wordpress-4.7.3.tar.gz) = 071df65c3a43557faf351838a661a83e26d8de37c8633dc17a59d773cc91caef640a625b0719606df1fc563fd18af71ba1da22a5b6f345339e73761754484dc5
-Size (wordpress-4.7.3.tar.gz) = 8008833 bytes
+SHA1 (wordpress-4.8.tar.gz) = 3738189a1f37a03fb9cb087160b457d7a641ccb4
+RMD160 (wordpress-4.8.tar.gz) = b12e449362cba8dfa114fc8e2883bc5bda87b874
+SHA512 (wordpress-4.8.tar.gz) = 20249cf13dbcec198df3ec1feb3a7381c194c7c9f832262e40449f90c5e5b5d3f4b63b6021e78c65cc615e059b1b601881d33ce03e1e4618231329b680511467
+Size (wordpress-4.8.tar.gz) = 8169865 bytes
Prev by Date: [pkgsrc/pkgsrc-2017Q1]: pkgsrc/net/ndpi Pullup ticket #5483 - requested by sevan
Next by Date: [pkgsrc/pkgsrc-2017Q1]: pkgsrc/net/transmission Pullup ticket #5489 - request...
Previous by Thread: [pkgsrc/pkgsrc-2017Q1]: pkgsrc/net/ndpi Pullup ticket #5483 - requested by sevan
Next by Thread: [pkgsrc/pkgsrc-2017Q1]: pkgsrc/net/transmission Pullup ticket #5489 - request...
Indexes:
Home | Main Index | Thread Index | Old Index