Subject: CVS commit: [pkgsrc-2010Q4] pkgsrc/www/wordpress
From: Steven Drake
Date: 2011-02-11 05:31:47
Message id: 20110211043147.9CE52175DD@cvs.netbsd.org

Log Message:
Pullup ticket #3349 - requested by morr
www/wordpress update

Revisions pulled up:
- pkgsrc/www/wordpress/Makefile		1.15
- pkgsrc/www/wordpress/distinfo		1.11

-------------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	morr
   Date:		Thu Feb 10 10:25:50 UTC 2011

   Modified Files:
   	pkgsrc/www/wordpress: Makefile distinfo

   Log Message:
   Security update to 3.0.5. Changes:

   * Fix XSS bug: Properly encode title used in Quick/Bulk Edit, and offer
     additional sanitization to various fields. Affects users of the
     Author or Contributor role.
   * Fix XSS bug: Preserve tag escaping in the tags meta box. Affects
     users of the Author or Contributor role.
   * Fix potential information disclosure of posts through the media
     uploader. Affects users of the Author role.
   * Enhancement: Force HTML filtering on comment text in the admin
   * Enhancement: Harden check_admin_referer() when called without
     arguments, which plugins should avoid.
   * Update the license to GPLv2 (or later) and update copyright
     information for the KSES library.

Files:
RevisionActionfile
1.14.2.1modifypkgsrc/www/wordpress/Makefile
1.10.2.1modifypkgsrc/www/wordpress/distinfo