CVS commit: pkgsrc/www/php-ja-wordpress

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Thu Mar 12 16:08:38 UTC 2026

Modified Files:
        pkgsrc/www/php-ja-wordpress: Makefile distinfo

Log Message:
www/php-ja-wordpress: update to 6.9.2

6.9.2 (2026-03-10)

This is a security release that features several fixes.

* A Blind SSRF issue reported by sibwtf, and subsequently by several other
  researchers while the fix was being worked on

* A PoP-chain weakness in the HTML API and Block Registry reported by Phat
  RiO

* A regex DoS weakness in numeric character references reported by Dennis
  Snell of the WordPress Security Team

* A stored XSS in nav menus reported by Phill Savage

* An AJAX query-attachments authorization bypass reported by Vitaly
  Simonovich

* A stored XSS via the data-wp-bind directive reported by kaminuma

* An XSS that allows overridding client-side templates in the admin area
  reported by Asaf Mozes

* A PclZip path traversal issue reported independently by Francesco Carlucci
  and kaminuma

* An authorization bypass on the Notes feature reported by kaminuma

* An XXE in the external getID3 library reported by Youssef Achtatal


To generate a diff of this commit:
cvs rdiff -u -r1.31 -r1.32 pkgsrc/www/php-ja-wordpress/Makefile
cvs rdiff -u -r1.28 -r1.29 pkgsrc/www/php-ja-wordpress/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/php-ja-wordpress/Makefile
diff -u pkgsrc/www/php-ja-wordpress/Makefile:1.31 pkgsrc/www/php-ja-wordpress/Makefile:1.32
--- pkgsrc/www/php-ja-wordpress/Makefile:1.31   Wed Mar 11 15:19:44 2026
+++ pkgsrc/www/php-ja-wordpress/Makefile        Thu Mar 12 16:08:38 2026
@@ -1,9 +1,8 @@
-# $NetBSD: Makefile,v 1.31 2026/03/11 15:19:44 taca Exp $
+# $NetBSD: Makefile,v 1.32 2026/03/12 16:08:38 taca Exp $
 
 DISTNAME=              wordpress-${VERSION}-ja
 PKGNAME=               ${PHP_PKG_PREFIX}-ja-wordpress-${VERSION}
-PKGREVISION=           1
-VERSION=               6.9.1
+VERSION=               6.9.2
 CATEGORIES=            www
 MASTER_SITES=          https://ja.wordpress.org/
 
@@ -11,7 +10,7 @@ MAINTAINER=           ryoon%NetBSD.org@localhost
 HOMEPAGE=              https://ja.wordpress.org/
 COMMENT=               Blogging tool written in php (Localized for Japanese)
 LICENSE=               gnu-gpl-v2
-DIST_SUBDIR=           php-ja-wordpress-20260227
+DIST_SUBDIR=           php-ja-wordpress-20260312
 
 USE_TOOLS+=            pax
 

Index: pkgsrc/www/php-ja-wordpress/distinfo
diff -u pkgsrc/www/php-ja-wordpress/distinfo:1.28 pkgsrc/www/php-ja-wordpress/distinfo:1.29
--- pkgsrc/www/php-ja-wordpress/distinfo:1.28   Wed Mar 11 15:19:44 2026
+++ pkgsrc/www/php-ja-wordpress/distinfo        Thu Mar 12 16:08:38 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.28 2026/03/11 15:19:44 taca Exp $
+$NetBSD: distinfo,v 1.29 2026/03/12 16:08:38 taca Exp $
 
-BLAKE2s (php-ja-wordpress-20260227/wordpress-6.9.1-ja.tar.gz) = aadd53cfe5a006f51788b981b7e723e5a88105a63e608f0029c45252cb34b904
-SHA512 (php-ja-wordpress-20260227/wordpress-6.9.1-ja.tar.gz) = 9b4cdbfc1d1a36e3f3d46a02e6eb1bff948c64749938a774dff0227398d20909533eec966713c6880255be4f6d99cbdfa1ef7c0d3394213bc6c93ba4318aa9f8
-Size (php-ja-wordpress-20260227/wordpress-6.9.1-ja.tar.gz) = 34370806 bytes
+BLAKE2s (php-ja-wordpress-20260312/wordpress-6.9.2-ja.tar.gz) = 23f86a6ff2cad31346e52deeb7c754e8a540b0bd8a54bdd453eff7ce020dc937
+SHA512 (php-ja-wordpress-20260312/wordpress-6.9.2-ja.tar.gz) = 97b2ac21fa8b3b73412a3d4e4c8c9c835bc8cd54d34198862420114ff9988b6b5e63dc7cf63e7207a56e8d70301a2cbd0f956bb311cdbc9af61d6eac4849aa90
+Size (php-ja-wordpress-20260312/wordpress-6.9.2-ja.tar.gz) = 34370215 bytes