CVS commit: [pkgsrc-2026Q2] pkgsrc/www/wordpress

["Maya Rashish" <maya%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   maya
Date:           Sat Jul 18 21:23:16 UTC 2026

Modified Files:
        pkgsrc/www/wordpress [pkgsrc-2026Q2]: Makefile distinfo

Log Message:
Pullup ticket #7187 - requested by taca
www/wordpress: Security fix

Revisions pulled up:
- www/wordpress/Makefile                                        1.119
- www/wordpress/distinfo                                        1.100

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Sat Jul 18 12:44:06 UTC 2026

   Modified Files:
        pkgsrc/www/wordpress: Makefile distinfo

   Log Message:
   www/wordpress: update to 6.9.5

   6.9.5 (2026-7-17)

   This is security release fixes these

   * A facilitated SQL injection issue reported as a team by TF1T, dtro, and
     haongo.  (CVE-2026-60137 / GHSA-fpp7-x2x2-2mjf)

   * A REST API batch-route confusion and SQL injection issue leading to Remote
     Code.  (CVE-2026-63030 / GHSA-ff9f-jf42-662q)


To generate a diff of this commit:
cvs rdiff -u -r1.118 -r1.118.2.1 pkgsrc/www/wordpress/Makefile
cvs rdiff -u -r1.99 -r1.99.2.1 pkgsrc/www/wordpress/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/wordpress/Makefile
diff -u pkgsrc/www/wordpress/Makefile:1.118 pkgsrc/www/wordpress/Makefile:1.118.2.1
--- pkgsrc/www/wordpress/Makefile:1.118 Fri May  8 02:02:06 2026
+++ pkgsrc/www/wordpress/Makefile       Sat Jul 18 21:23:16 2026
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.118 2026/05/08 02:02:06 jklos Exp $
+# $NetBSD: Makefile,v 1.118.2.1 2026/07/18 21:23:16 maya Exp $
 
 DISTNAME=              wordpress-${VERSION}
 PKGNAME=               ${PHP_PKG_PREFIX}-${DISTNAME}
-VERSION=               6.9.4
+VERSION=               6.9.5
 CATEGORIES=            www
 MASTER_SITES=          https://wordpress.org/
 

Index: pkgsrc/www/wordpress/distinfo
diff -u pkgsrc/www/wordpress/distinfo:1.99 pkgsrc/www/wordpress/distinfo:1.99.2.1
--- pkgsrc/www/wordpress/distinfo:1.99  Fri May  8 02:02:06 2026
+++ pkgsrc/www/wordpress/distinfo       Sat Jul 18 21:23:16 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.99 2026/05/08 02:02:06 jklos Exp $
+$NetBSD: distinfo,v 1.99.2.1 2026/07/18 21:23:16 maya Exp $
 
-BLAKE2s (wordpress-6.9.4.tar.gz) = b67a5c376646b122a543279f914482e7e60a8f484fcdd3a7fac0fae564a732e2
-SHA512 (wordpress-6.9.4.tar.gz) = 3065a037dae9450459c475ab85030f0ef0517942d681afe364afbdfd010587d2cb0bb3a520e03ac0492fa6c3d6e904c0da67b8b0b5f1fbd5adf40b5ba29d4362
-Size (wordpress-6.9.4.tar.gz) = 27064862 bytes
+BLAKE2s (wordpress-6.9.5.tar.gz) = bb5f5071034047020c4e1082b8169e7ec2781648002cc8b84f037d5c97ceebce
+SHA512 (wordpress-6.9.5.tar.gz) = 9dcdbd5b46366657010eeb9b89dede46172d912d9cfe26458e7d5a1971263263e0e7cf732846b9edfa126e318bef3a7c5c8d532c433bf43f94ede224ab28a865
+Size (wordpress-6.9.5.tar.gz) = 27062732 bytes