Subject: CVS commit: pkgsrc/www/wordpress
From: Daniel Horecki
Date: 2020-02-23 10:59:42
Message id: 20200223095942.9E32DFBF4@cvs.NetBSD.org

Log Message:
Update to version 5.3.2.

Changes:

Version 5.3.2:
Maintenance updates
- Date/Time: Ensure that get_feed_build_date() correctly handles a modified post \ 
object with invalid date.
- Uploads: Fix file name collision in wp_unique_filename() when uploading a file \ 
with upper case extension on non case-sensitive file systems.
- Media: Fix PHP warnings in wp_unique_filename() when the destination directory \ 
is unreadable.
- Administration: Fix the colors in all color schemes for buttons with the \ 
.active class.
- Tests/build tools: In wp_insert_post(), when checking the post date to set \ 
future or publish status, use a proper delta comparison.

Version 5.3.1:
Security fixes
- Props to Daniel Bachhuber for finding an issue where an unprivileged user \ 
could make a post sticky via the REST API.
- Props to Simon Scannell of RIPS Technologies for finding and disclosing an \ 
issue where cross-site scripting (XSS) could be stored in well-crafted links.
- Props to the WordPress.org Security Team for hardening wp_kses_bad_protocol() \ 
to ensure that it is aware of the named colon attribute.
- Props to Nguyen The Duc for discovering a stored XSS vulnerability using block \ 
editor content.

Maintenance updates
- Administration: improvements to admin form controls height and alignment \ 
standardization (see related dev note), dashboard widget links accessibility and \ 
alternate color scheme readability issues (see related dev note).
- Block editor: fix Edge scrolling issues and intermittent JavaScript issues.
- Bundled themes: add customizer option to show/hide author bio, replace JS \ 
based smooth scroll with CSS (see related dev note) and fix Instagram embed CSS.
- Date/time: improve non-GMT dates calculation, fix date format output in \ 
specific languages and make get_permalink() more resilient against PHP timezone \ 
changes.
- Embeds: remove CollegeHumor oEmbed provider as the service doesn’t exist anymore.
- External libraries: update sodium_compat.
- Site health: allow the remind interval for the admin email verification to be \ 
filtered.
- Uploads: avoid thumbnails overwriting other uploads when filename matches, and \ 
exclude PNG images from scaling after upload.
- Users: ensure administration email verification uses the user’s locale \ 
instead of the site locale.

Files:
RevisionActionfile
1.91modifypkgsrc/www/wordpress/Makefile
1.42modifypkgsrc/www/wordpress/PLIST
1.73modifypkgsrc/www/wordpress/distinfo