./www/wordpress, Blogging tool written in php

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]


Branch: pkgsrc-2017Q1, Version: 4.8, Package name: wordpress-4.8, Maintainer: morr

WordPress is a state-of-the-art publishing platform with a focus on
aesthetics, web standards, and usability. WordPress is both free and
priceless at the same time.


Required to run:
[www/ap-php] [www/php-curl] [databases/php-mysql] [graphics/php-gd] [archivers/php-zip] [archivers/php-zlib]

Required to build:
[www/apache22] [pkgtools/cwrappers]

Package options: ap-php

Master sites:

SHA1: 3738189a1f37a03fb9cb087160b457d7a641ccb4
RMD160: b12e449362cba8dfa114fc8e2883bc5bda87b874
Filesize: 7978.384 KB

Version history: (Expand)


CVS history: (Expand)


   2017-06-21 20:52:40 by Benny Siegert | Files touched by this commit (3) | Package updated
Log message:
Pullup ticket #5487 - requested by sevan
www/wordpress: security fix

Revisions pulled up:
- www/wordpress/Makefile                                        1.68-1.69
- www/wordpress/PLIST                                           1.34
- www/wordpress/distinfo                                        1.54-1.55

---
   Module Name:    pkgsrc
   Committed By:   jklos
   Date:           Tue May 30 07:20:15 UTC 2017

   Modified Files:
           pkgsrc/www/wordpress: Makefile distinfo

   Log message:
   Security update 4.7.5. Bugs fixed:

   Insufficient redirect validation in the HTTP class. Reported by Ronni
   Skansing.
   Improper handling of post meta data values in the XML-RPC API. Reported by
   Sam Thomas.
   Lack of capability checks for post meta data in the XML-RPC API. Reported
   by Ben Bidner of the WordPress Security Team.
   A Cross Site Request Forgery (CSRF)  vulnerability was discovered in the
   filesystem credentials dialog. Reported by Yorick Koster.
   A cross-site scripting (XSS) vulnerability was discovered when attempting
   to upload very large files. Reported by Ronni Skansing.
   A cross-site scripting (XSS) vulnerability was discovered related to the
   Customizer. Reported by Weston Ruter of the WordPress Security Team.

---
   Module Name:    pkgsrc
   Committed By:   morr
   Date:           Sun Jun 18 18:01:42 UTC 2017

   Modified Files:
           pkgsrc/www/wordpress: Makefile PLIST distinfo

   Log message:
   Update to newest version 4.8.

   For changes, check https://codex.wordpress.org/Version_4.8.